Indicators of Compromise

MD5 Hash

TLP:CLEAR

7f74bb6ba185978134c318bc5f91d23c

Inside FortiBleed: Reverse Engineering the CyberStrike Harvester Behind a Global FortiGate Credential Factory

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

9eaa577c8ba71646928c1c34c3145536b0498f65f26060a6ba00744bcef57644

Inside FortiBleed: Reverse Engineering the CyberStrike Harvester Behind a Global FortiGate Credential Factory

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

874bcb1c3d050a5b5b333a2198f504fcb27927c2abdd43b07440188a380c52d5

Inside FortiBleed: Reverse Engineering the CyberStrike Harvester Behind a Global FortiGate Credential Factory

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

479ae5fd7274439ddfa27bc03298ebfdfc5ff17f6412acccf74d4dbd90d94218

Inside FortiBleed: Reverse Engineering the CyberStrike Harvester Behind a Global FortiGate Credential Factory

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

4253dd1a4c0867b0be7732f75b2f630cebfb7fed94270e15fb3b12ae40546d01

Inside FortiBleed: Reverse Engineering the CyberStrike Harvester Behind a Global FortiGate Credential Factory

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

2758f4d71a2a2dfdefab81737c2d776b2a3dafe5844fdd2157e089a28447ca98

Inside FortiBleed: Reverse Engineering the CyberStrike Harvester Behind a Global FortiGate Credential Factory

75% confidence

Added

2026-07-24

SHA-1 Hash

TLP:CLEAR

268a8420b791df46380ed9ad69905207e15d8a7c

Inside FortiBleed: Reverse Engineering the CyberStrike Harvester Behind a Global FortiGate Credential Factory

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

cottonbox.co.il

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

Domain

TLP:CLEAR

store.grafsynergy.com

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

Domain

TLP:CLEAR

panalobet.ph

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

SHA-1 Hash

TLP:CLEAR

d9617710d4ed8e9b87f6fee0b7014c4101effba0

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

SHA-1 Hash

TLP:CLEAR

b67aa4f598c0ea625a7409ea7884e10a7bc9c3ff

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

URL

TLP:CLEAR

http://panalobet.ph/wp-content/deng.php

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

URL

TLP:CLEAR

https://cottonbox.co.il/wp-content/hbd

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

URL

TLP:CLEAR

https://panalobet.ph/wp-content/deng.php

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

URL

TLP:CLEAR

https://panalobet.ph/wp-content/themes/twentytwenty/assets/fonts/chromer.txt

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

URL

TLP:CLEAR

https://panalobet.ph/wp-content/themes/twentytwenty/assets/images/finderv2.jpg

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

URL

TLP:CLEAR

https://panalobet.ph/wp-content/upgrade/zsh.txt

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

URL

TLP:CLEAR

https://panalobet.ph/wp-content/upgrade/zsh.txt.

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

URL

TLP:CLEAR

https://store.grafsynergy.com/media/apple.png

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

URL

TLP:CLEAR

https://store.grafsynergy.com/media/goyim

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

SHA-1 Hash

TLP:CLEAR

8dda05168ea8610a2449419a47517bc32823d6ec

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

Domain

TLP:CLEAR

update-check.com

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

SHA-1 Hash

TLP:CLEAR

0a1fb016bd10bac5455175c79aa4511e5ff1a330

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

SHA-1 Hash

TLP:CLEAR

2fc970e25570532f9cbe33b7ebfe1f0383a7341a

ClickLock Stealer: Paste Once, Lose Everything

75% confidence

Added

2026-07-17

Domain

TLP:CLEAR

levaquin2us.top

Threat Spotlight: The Jalisco Toolkit and AI-Powered Phishing Surge

75% confidence

Added

2026-07-15

Domain

TLP:CLEAR

authplanned.online

Threat Spotlight: The Jalisco Toolkit and AI-Powered Phishing Surge

75% confidence

Added

2026-07-15

Domain

TLP:CLEAR

sessionopen0.site

Threat Spotlight: The Jalisco Toolkit and AI-Powered Phishing Surge

75% confidence

Added

2026-07-15

MD5 Hash

TLP:CLEAR

9f8a2983fbf5479e8d8c267e0df4e73d

Threat Spotlight: The Jalisco Toolkit and AI-Powered Phishing Surge

75% confidence

Added

2026-07-15

URL

TLP:CLEAR

https://file.kiwi/7ab7c290#z_n5Qh8kwioCUs8jQ6WWhw

Threat Spotlight: The Jalisco Toolkit and AI-Powered Phishing Surge

75% confidence

Added

2026-07-15

Domain

TLP:CLEAR

grantfundingapplications.com

Threat Spotlight: The Jalisco Toolkit and AI-Powered Phishing Surge

75% confidence

Added

2026-07-15

Domain

TLP:CLEAR

secure-folder-9f8a2983fbf5479e8d8c267e0df4e73d.3vvcompany.com

Threat Spotlight: The Jalisco Toolkit and AI-Powered Phishing Surge

75% confidence

Added

2026-07-15

MD5 Hash

TLP:CLEAR

d69cc848443b63eb0ae8d05a6ecfba5e

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

1e8a11249ac38ca948a10308cc333a47

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

7bf2191620c2cca5f8238834149ba470

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

abfe90bd06b0781a075ed23757822816

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

4d9ae84166f2083a1ee7f3e7a0b3581e4b41bc4b

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

7f58210fa9fb9a154a8c9b4d595f10c3ef7f79ec

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

a225c68ddfaa81bc3f13bbfc65a85b4e047e8aa5

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

afce743ccdd089a4132aad647ed47ba13b3f83b0

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

8f1af2175403195726957dc58fe64821

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

d8d84eaba9b902045ae4fe044e9761ad0ce9051b85feea3f1cf9c80b59b2b123

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

9c23c65a8a392a3fd885496a5ff2004252f1ad4388814b20e5459695280b0b82

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

74ac41406ce7a7aa992f68b4b3042f980027526f33ec6c8d84cb26f20495c9dc

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

b14ca5898a4e4133bbce2ea2315a1916

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

57cd5721bae65c29e58121b5a9b00487a83b6c37dded56052cab2a67f90ea943

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

2d0177a00bed31f72b48965bee34cec04cb5be8eeea66ae0bb144f77e4d439b1

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

c78c6f9b78e9503ab1a079010cf12a6182ec4d43

Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor

75% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

eee517fe8da4eddf7ead1d01a32606e6beec1adc

Ringing in Chaos: How TeamPCP Weaponized the Telnyx Python SDK

75% confidence

Added

2026-05-03

SHA-1 Hash

TLP:CLEAR

e866b3fa9f87a084b610272580428761e28ad65a

Ringing in Chaos: How TeamPCP Weaponized the Telnyx Python SDK

75% confidence

Added

2026-05-03