Indicators of Compromise

Domain

TLP:CLEAR

15.Ke

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

17.Fulop

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

9.Posnett

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

10.Imison

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

11.Hoomans

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

12.Severens

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

13.Vale

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

14.Meacock

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

16.Fulop

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

2.Coupland

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

01.ju

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

4.Fulop

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

j.healthpol

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

5.Darzi

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

6.Morris

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

7.Ramsay

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

8.Bhattarai

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

liberty.insights@proton.me

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

1.Fulop

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

3.Nuttall

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

j.moreau.epsc@proton.me

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

audit.log

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

c.laurent.ejfa@proton.me

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

www.nice.org.uk

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

tdndns.com

Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit

75% confidence

Added

2026-08-01

SHA-256 Hash

TLP:CLEAR

6897b649f29e54d8910459963bbf94ed5c7a4fe66a56bc5962540b226b8e48c4

Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit

75% confidence

Added

2026-08-01

Domain

TLP:CLEAR

acocdn.com

Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit

75% confidence

Added

2026-08-01

Domain

TLP:CLEAR

dnsrecursive.eu

Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit

75% confidence

Added

2026-08-01

SHA-256 Hash

TLP:CLEAR

b1f5beb1175fc5c7d1806a2f0d900eb124c54f0286c5c52b66eea7a6633adb1d

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

1517b3caa495f6c4e832df9c75fc94667e3c233773f7fa4e056d5e30e5ead760

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

60db9abae75cd8ccc49dd7ea5feb41677566dcd442f12ebc5745ffd2810fb874

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

SHA-1 Hash

TLP:CLEAR

e3ce7d13a83716594787a12edf6cbeedc76b9a65

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

98df604ecc57f884a2e6ce3266a0013ad64455cac48442c2312cfa4765007aaf

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

synacorzimbra.nl

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

zmailanalytics.com

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

istc-cloud.com

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

emailanalytics.com.ua

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

mailnalysis.com

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

analyticemailmeter.com

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

zimbrastat.com

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

zimbrasoft.com.ua

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

MD5 Hash

TLP:CLEAR

c010f64080b0b0997b362a8e6b9c618e

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

zimbra-metadata.com

Zimbra Mailservers Targeted with Half-Click Exploits

75% confidence

Added

2026-07-24