Indicators of Compromise

Filename

TLP:CLEAR

Cuenta.lnk

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

www.netivtech.org

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

162.255.119.28

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

5f22f4c4fdb36c4f0ea3248abb00521e39008c1fb4c97e1b4a9c7b9ef0b691c2

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Claude-Pro-Relay-Technical-Overview.lnk

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

91.195.240.19

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

104.21.81.7

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

194.11.246.78

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

77.91.74.235

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

script.dat

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Claude.vbs

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Claude.msi

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

GolddTV.msi

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

178.128.108.89

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Claude-Pro-windows-x64.zip

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Claude-Pro-Relay-Technical-Overview.zip

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

8.217.190.58

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

del.vbs.bat

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

DeviceSync.zip

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

avk.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Cuenta.zip

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

netivtech.org

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

avk.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

hostfxr.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

bjh.zip

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

43.106.71.28

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

fuckaliyun.sh

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

vertextrust-advisors.com

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

photo.pokok.edu.hk

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

pta.sfaeps.edu.hk

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

IPv4 Address

TLP:CLEAR

192.252.186.62

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

SHA-256 Hash

TLP:CLEAR

d38e05a6fea310e778a8b1e623ee9b00f430ee76622f7a66cd0ca538fcaa1613

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

SHA-1 Hash

TLP:CLEAR

97918307c96d4357c81caf7ca6f942c32f43857e

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

SHA-1 Hash

TLP:CLEAR

4a7545fa95cf3ede0ef796f04bed7d0c9afe5276

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

SHA-1 Hash

TLP:CLEAR

3915dfb85d698abe2d5b4285bef1fb0f63520ea3

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

fef1d3cb35129ad25d95e279565b9001

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

f360afe51b499a036c7be8c0ecc4dc89

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

f2ce6fe8b52dfbacfee482a48f4ae972

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

efac43473d7e87ede5176fe01a114abb

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

SHA-256 Hash

TLP:CLEAR

d4d249c621b5c27fd96505d041674ea472d5dec0a7730b44324c8af6a7fb7f0a

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

SHA-256 Hash

TLP:CLEAR

8f2e8a2f9d3edc12d39ca07f4717277e863d4bfeb8ec31fe4f391ddd0f64df84

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

d99392248bdd7e351e63ead6733638ba

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

ee5a2cdd4ce6ccb2e9279c9e13e8bd15

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

e067ffea77875ae0dc13d4ce045931d3

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

bef0b8599d18acf1c74192ae9f198f85

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

c1f45a0609c5c1bd2c21cad20703f126

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

c512adfa8743c3b3c776d4452f00c6c0

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

df1f03a2534480a4838f62339bcb90d8

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

bb5c88de9e04e6306260b9f3a4498933

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23

MD5 Hash

TLP:CLEAR

aedd185b76ccda8d65dbd26204cc0e9a

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

75% confidence

Added

2026-07-23