Indicators of Compromise

IPv4 Address

TLP:CLEAR

2.0.0.0

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

ZhuDongFangYu.exe

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://taxfnat.tw/

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://www.einvoice

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://njhwuyklw.com/

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

64.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

DLL.pdb

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

154.91.64.246

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

nat.gov.tw

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

zbyq.cn

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

wsftprm.sys

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

DeviceCredentialDeployment.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

url.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Setup64.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

bqdrzbyq.cn

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://twmoi2002.tos-cn-shanghai.volces.com/E-Invoice.rar

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://sdfw2026024.tos-cn-shanghai.volces.com/E-Invoice.rar

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://twtaxgo.cn/uploads/20260129/taxIs_RX3001.7z

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

47.76.86.151

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Marvel.com

50% confidence

Added

2026-08-09

IPV4

TLP:CLEAR

134.122.204.55

ThreatFox: ValleyRAT

65% confidence

Added

2026-08-08

SHA-1 Hash

TLP:CLEAR

09b0bc41f8838949d5a1c442ee2e2ec9ff892fdc

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

f0b182423107a04cf5f09b8559e656242a4fcc89

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

cc6fd90785a528883b0203138348df8bad69bb1a

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

a12db7b72879ac0f46079efd8c67e8ca0621f73b

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

gpsfinance.co.id

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

pr0fu5a.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

pickupweb.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

zrheblirsy.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

msonline.help

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

gouvn.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

zamstats.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

dog3rj.tech

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

q74vn.live

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

abwxjp5.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

servgate.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

skycloudcenter.com

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

IPv4 Address

TLP:CLEAR

188.127.251.171

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

emezonhe.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

4741c2884d1ca3a40dadd3f3f61cb95a59b11f99a0f980dbadc663b85eb77a2a

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

SHA256

TLP:CLEAR

e18e9309db33273762be1d78f5bdd78fa6ea41dadf5f6eef8ece4c841ea76110

ThreatFox: ClearFake

85% confidence

Added

2026-05-20