Indicators of Compromise

Domain

TLP:CLEAR

metadata.json

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

signspace.cloudDomainAttacker

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

privileges.Customers

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

MSTeamsSetup.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

sample.txt

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

test.js

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

www.infopackets.com

50% confidence

Added

2026-08-09

SHA-1 Hash

TLP:CLEAR

7e6d9dac619c04ae1b3c8c0906123e752ed66d63

Exposing Fox Tempest: A malware-signing service operation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

signspace.cloud

Exposing Fox Tempest: A malware-signing service operation

75% confidence

Added

2026-05-21

SHA-256 Hash

TLP:CLEAR

f0a6b89ec7eee83274cd484cea526b970a3ef28038799b0a5774bb33c5793b55

Exposing Fox Tempest: A malware-signing service operation

75% confidence

Added

2026-05-21

SHA-256 Hash

TLP:CLEAR

f0668ce925f36ff7f3359b0ea47e3fa243af13cd6ad9661dfccc9ff79fb4f1cc

Exposing Fox Tempest: A malware-signing service operation

75% confidence

Added

2026-05-21

SHA-256 Hash

TLP:CLEAR

11af4566539ad3224e968194c7a9ad7b596460d8f6e423fc62d1ea5fc0724326

Exposing Fox Tempest: A malware-signing service operation

75% confidence

Added

2026-05-21

SHA-1 Hash

TLP:CLEAR

dc0acb01e3086ea8a9cb144a5f97810d291020ce

Exposing Fox Tempest: A malware-signing service operation

75% confidence

Added

2026-05-21