{"Event":{"info":"QuantusIntel Threat Intelligence Export 2026-08-06","date":"2026-08-06","threat_level_id":"2","analysis":"2","distribution":"1","Attribute":[{"type":"ip-dst","category":"Network activity","value":"223.235.98.95","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"223.150.173.25","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"219.70.147.19","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"217.216.119.56","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"217.216.118.82","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"217.60.161.214","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"217.60.161.113","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"216.245.152.51","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"216.131.109.14","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"216.49.128.86","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"213.57.90.115","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"212.32.84.30","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"212.32.82.30","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"209.216.103.192","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"209.173.194.137","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"209.87.167.145","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"209.85.221.175","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"209.46.39.47","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"208.125.100.218","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"207.81.65.78","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"205.164.131.252","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"205.164.131.59","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"203.215.167.35","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"203.17.87.10","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"202.163.87.193","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"202.47.32.146","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"199.96.167.195","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"198.72.181.224","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"198.44.157.217","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"196.243.16.2","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"194.5.53.118","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"194.5.53.116","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"193.160.100.153","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"193.142.37.167","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"193.9.35.34","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"193.9.34.19","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"193.9.33.34","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"192.210.132.15","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"192.140.148.214","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"187.40.251.179","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"187.13.251.3","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"187.13.210.199","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"185.255.130.47","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"185.239.149.34","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"185.227.133.19","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"185.225.28.208","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"185.214.96.167","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"185.212.111.188","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"185.212.111.35","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"185.203.122.246","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"185.197.248.230","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"185.182.52.87","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"185.181.245.13","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"184.151.246.102","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"184.147.183.139","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"184.98.10.239","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"184.22.1.25","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"182.186.31.76","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"182.182.212.82","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"182.182.206.44","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"182.77.76.88","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"182.77.66.164","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"182.69.183.196","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"182.69.181.104","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"182.69.177.233","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"182.1.234.92","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"181.214.206.85","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"181.41.206.113","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"179.209.140.15","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"178.212.32.126","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"178.176.79.244","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"178.175.141.239","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"176.67.87.45","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"176.32.32.192","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"175.107.247.151","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"175.29.64.38","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"174.61.85.70","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"173.234.100.30","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"173.77.236.192","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"173.52.86.162","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"172.245.232.62","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"172.216.250.5","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"172.216.58.36","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"172.94.51.137","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"170.203.218.77","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"168.232.224.218","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"167.71.222.230","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"166.88.155.21","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"165.245.212.45","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"163.227.71.8","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"162.252.55.141","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"162.84.149.215","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"161.123.151.130","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"158.173.166.115","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"158.173.89.220","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"158.173.74.225","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"158.173.74.148","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"158.173.67.13","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"158.173.24.24","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"157.51.4.21","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"157.38.133.227","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"156.230.199.24","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"156.206.160.247","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"154.192.204.21","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"154.192.169.54","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"153.67.53.179","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"153.66.75.72","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"149.88.97.5","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"149.40.247.123","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"149.40.210.70","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"148.113.167.2","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"147.219.149.3","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"147.53.121.193","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"146.70.72.171","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"143.198.217.217","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"141.11.22.43","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"140.228.24.181","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"140.141.229.104","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"139.135.41.237","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"138.199.47.186","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"138.199.40.183","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"138.199.40.173","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"136.60.41.147","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"135.136.3.9","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"135.0.149.245","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"131.106.16.221","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"129.227.39.115","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"129.222.107.214","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"129.0.60.37","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"128.1.227.233","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"122.173.30.78","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"122.167.158.90","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"122.167.10.41","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"122.96.28.168","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"119.252.192.41","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"119.159.180.234","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"119.157.21.96","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"119.156.117.17","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"119.156.104.8","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"119.155.186.167","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"117.219.171.99","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"117.5.147.241","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"116.206.159.174","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"115.241.43.155","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"115.186.50.239","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"114.130.156.156","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"113.190.204.97","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"112.80.123.197","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"110.226.115.95","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"110.225.255.138","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"110.39.95.3","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"109.248.143.151","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"108.216.208.170","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"108.168.10.242","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"108.24.128.113","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"107.173.217.177","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"107.173.217.172","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"107.173.185.237","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"107.173.4.207","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"106.219.123.15","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"106.219.120.250","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"106.219.120.204","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"106.219.68.118","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"106.51.26.71","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"105.119.15.154","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"104.224.48.209","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"104.207.131.9","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"104.190.138.173","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.240.235.225","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.237.39.212","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.203.45.3","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.187.94.138","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.164.147.97","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.157.94.22","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.154.49.201","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.120.44.203","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.111.133.149","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.85.113.97","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.68.31.68","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"103.39.119.175","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"102.244.44.92","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"102.88.114.33","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"102.67.1.67","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"99.254.186.161","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"99.247.151.64","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"99.241.187.68","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"98.242.109.70","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"98.210.174.219","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"98.164.90.6","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"98.35.15.100","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"96.249.215.64","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"96.231.44.60","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"96.125.193.142","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"95.214.113.19","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"95.214.112.23","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"95.24.13.21","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"94.249.154.64","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"94.202.231.210","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"94.154.127.229","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"93.145.149.106","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"91.205.230.210","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"91.151.136.81","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"91.124.17.47","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"88.203.42.195","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"88.23.40.61","to_ids":true,"timestamp":"1786040962","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"87.120.102.121","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"87.101.94.189","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"86.48.10.122","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"85.203.15.129","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"84.39.151.186","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"83.40.248.25","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"82.197.76.42","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"82.149.83.42","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"82.149.80.19","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"82.18.102.152","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"81.17.123.46","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"79.127.181.87","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"78.157.213.61","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"77.238.225.70","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"77.83.26.78","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"77.83.25.57","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"76.95.2.77","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"76.39.128.156","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"76.38.100.125","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"76.33.58.3","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"76.30.107.140","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"74.215.162.191","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"74.196.89.127","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"73.198.133.162","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"73.178.26.21","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"73.165.166.238","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"73.162.170.205","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"73.152.56.49","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"73.145.54.44","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"73.67.1.129","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"73.66.106.193","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"73.50.67.119","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"72.77.57.162","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"72.56.147.30","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"71.196.36.175","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"71.187.114.122","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"71.164.79.136","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"71.125.238.170","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"70.180.194.118","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"70.107.105.63","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"69.242.46.97","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"69.119.15.1","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"69.14.53.106","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"68.252.238.28","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"68.187.40.86","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"68.145.234.181","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"68.114.121.113","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"68.84.164.218","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"67.167.235.160","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"67.115.34.93","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"67.20.1.180","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"66.179.156.137","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"66.63.160.200","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"65.181.8.191","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"65.25.84.169","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"64.180.247.138","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"64.137.79.72","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"64.64.127.212","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"64.64.108.3","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"62.93.167.67","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"57.138.49.74","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"54.196.174.13","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"54.178.124.36","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"54.145.250.53","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"50.107.59.88","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"49.156.93.39","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"49.156.79.208","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"49.43.242.63","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"49.43.180.32","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"49.36.177.204","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"49.36.139.175","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"47.230.49.158","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"47.218.30.46","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"47.197.155.22","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"47.195.210.31","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"47.150.114.217","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"47.148.96.20","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"47.18.35.69","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"47.11.100.52","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"47.11.99.205","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"45.251.50.203","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"45.145.129.225","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"45.134.188.36","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"45.129.32.31","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"45.117.62.242","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"45.95.242.40","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"45.95.162.20","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"45.95.160.20","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"45.85.251.235","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"45.82.66.73","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"45.11.20.22","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"42.104.157.220","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"41.210.159.105","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"39.46.102.43","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"39.44.31.232","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"39.43.189.215","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"38.34.102.92","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"38.7.180.87","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"37.114.130.20","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"37.114.50.160","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"37.72.141.146","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"34.38.252.221","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"31.134.12.61","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"31.58.50.222","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"27.63.43.35","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"27.59.79.206","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"27.4.127.146","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"24.200.100.26","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"24.141.197.219","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"24.141.161.23","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"24.79.91.85","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"24.79.59.165","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"24.69.248.240","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"24.57.242.161","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"24.47.156.132","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"23.242.125.47","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"23.234.118.91","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"23.83.218.24","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"14.163.81.136","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"14.102.191.21","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"14.102.33.178","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"9.195.164.251","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"5.255.107.133","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"5.180.61.21","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"2.123.153.192","to_ids":true,"timestamp":"1786040961","comment":"Category: IP Blocklists"},{"type":"ip-dst","category":"Network activity","value":"83.217.209.218","to_ids":true,"timestamp":"1786039220","comment":"Category: Enriched"},{"type":"ip-dst","category":"Network activity","value":"2606:4700:3033::ac43:bc20","to_ids":true,"timestamp":"1786039051","comment":"Category: Enriched"},{"type":"ip-dst","category":"Network activity","value":"204.8.99.144","to_ids":true,"timestamp":"1786036723","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"116.202.120.166","to_ids":true,"timestamp":"1786036723","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"95.216.163.36","to_ids":true,"timestamp":"1786036723","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"204.8.99.146","to_ids":true,"timestamp":"1786036723","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"116.202.120.165","to_ids":true,"timestamp":"1786036723","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.67.213.164","to_ids":true,"timestamp":"1786036721","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.21.23.208","to_ids":true,"timestamp":"1786036721","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.21.18.210","to_ids":true,"timestamp":"1786036721","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.67.183.93","to_ids":true,"timestamp":"1786036721","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.67.179.55","to_ids":true,"timestamp":"1786036720","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.21.83.166","to_ids":true,"timestamp":"1786036720","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.67.147.11","to_ids":true,"timestamp":"1786036720","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.21.79.185","to_ids":true,"timestamp":"1786036720","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.21.92.149","to_ids":true,"timestamp":"1786036719","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.67.195.70","to_ids":true,"timestamp":"1786036719","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"216.24.57.7","to_ids":true,"timestamp":"1786036718","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"216.24.57.15","to_ids":true,"timestamp":"1786036718","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"15.197.225.128","to_ids":true,"timestamp":"1786036719","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"3.33.251.168","to_ids":true,"timestamp":"1786036719","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.66.137.203","to_ids":true,"timestamp":"1786036717","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.66.135.182","to_ids":true,"timestamp":"1786036717","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"209.124.55.40","to_ids":true,"timestamp":"1786036717","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.20.34.201","to_ids":true,"timestamp":"1786036717","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.66.151.107","to_ids":true,"timestamp":"1786036717","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.67.70.195","to_ids":true,"timestamp":"1786036717","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.26.3.15","to_ids":true,"timestamp":"1786036717","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.26.2.15","to_ids":true,"timestamp":"1786036717","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.21.13.230","to_ids":true,"timestamp":"1786036716","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.67.133.104","to_ids":true,"timestamp":"1786036716","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.67.65.180","to_ids":true,"timestamp":"1786036716","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.25.214.19","to_ids":true,"timestamp":"1786036716","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.25.215.19","to_ids":true,"timestamp":"1786036716","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"135.148.242.107","to_ids":true,"timestamp":"1786036715","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"172.67.149.185","to_ids":true,"timestamp":"1786036715","comment":"Category: DNS A record"},{"type":"ip-dst","category":"Network activity","value":"104.21.29.195","to_ids":true,"timestamp":"1786036715","comment":"Category: DNS A record"},{"type":"url","category":"Network activity","value":"https://cert.br/docs/ransomware/en/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cert.br/docs/ransomware/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cursos.cert.br/criterio-aceite/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cursos.cert.br/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cert.br/docs/ransomware/#divulgacao","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cursos.cert.br/atih/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cursos.cert.br/fim/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cursos.cert.br/overview/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cursos.cert.br/inscricao/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://forum.cert.br/#cfp-misp","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://forum.cert.br/#cfp-forum","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cartilha.cert.br/fasciculos/#golpes-evite-fraudes","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cartilha.cert.br/fasciculos/#golpes","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cartilha.cert.br/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://forum.cert.br/#misp","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://forum.cert.br/#agenda","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://forum.cert.br/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cursoseventos.nic.br/evento/inscrever/misp2026/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cursoseventos.nic.br/evento/inscrever/csirts2026/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"domain","category":"Network activity","value":"NIC.br","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cursoseventos.nic.br/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://forum.cert.br/#inscricao","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cert.br/rss/certbr-rss.xml","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://cert.br/","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"domain","category":"Network activity","value":"CERT.br","to_ids":true,"timestamp":"1786036453","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.cert-in.org.in","to_ids":true,"timestamp":"1786036447","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#15","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#14","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#13","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#12","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#11","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#10","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#9","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#8","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#7","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#6","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#5","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#4","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#3","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#2","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/wr/2026/wr260805.html#1","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/at/2026/at260016.html","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/at/2026/at260017.html","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/at/2026/at260018.html","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/at/2026/at260019.html","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/at/2026/at260020.html","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/at/2026/at260021.html","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"domain","category":"Network activity","value":"jpcert.or.jp","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.jpcert.or.jp/rss/jpcert.rdf","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/terms/","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"http://www.w3.org/1999/02/22-rdf-syntax-ns#","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"http://purl.org/rss/1.0/","to_ids":true,"timestamp":"1786036446","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.cyber.gov.au/about-us/view-all-content/Reported-widespread-credential-exposure-affecting-Fortinet-Firewalls-and-VPN-Gateways","to_ids":true,"timestamp":"1786036445","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/large-scale-exploitation-campaign-targeting-website-content-management-systems-cms","to_ids":true,"timestamp":"1786036445","comment":"Category: CERT Advisories"},{"type":"url","category":"Network activity","value":"https://www.cyber.gov.au/","to_ids":true,"timestamp":"1786036445","comment":"Category: CERT Advisories"},{"type":"domain","category":"Network activity","value":"J.F.Gmelin","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"sha256","category":"Payload delivery","value":"74a0810781ce8bb669bd0f33785ed69f2a1828874e1b190fc739a453132e6d36","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://unknown.org/omitFromScheduledCrawl","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"domain","category":"Network activity","value":"dyntaxa.se","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"domain","category":"Network activity","value":"swedishlifewatch.se","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"domain","category":"Network activity","value":"artportalen.se","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/MX.73566","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/JX.1794650#115","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/MX.200535","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/JX.1794650#49","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/MX.48089","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/JX.1794650#161","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/MX.37122","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/JX.1794650#107","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/MX.36589","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/JX.1794650#123","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/MX.30443","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/JX.1794650#61","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/MX.37142","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/JX.1794650#111","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/MX.34567","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/JX.1794650#95","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://unknown.org/samplingEvent","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/MX.34574","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/JX.1794650","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/JX.1794650#2","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://tun.fi/JX.1794650#93","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://specieslink.net/col/16","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://specieslink.net/guid/16/35381","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://creativecommons.org/licenses/by-nc-sa/3.0/","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://rs.tdwg.org/ac/terms/resourceCreationTechnique","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://rs.tdwg.org/ac/terms/physicalSetting","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://xeno-canto.org/sounds/uploaded/PCTXEPPOZD/XC165501-Common%20Woodshrike.mp3","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://ns.adobe.com/xap/1.0/Rating","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/terms/description","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://rs.tdwg.org/ac/terms/variantLiteral","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/terms/rights","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/elements/1.1/type","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://data.biodiversitydata.nl/xeno-canto/observation/XC165501","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://rs.tdwg.org/ac/terms/associatedObservationReference","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://xeno-canto.org/sounds/spectrograms/PCTXEPPOZD/165501/colour.png","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://rs.tdwg.org/ac/terms/accessURI","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/elements/1.1/creator","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://ns.adobe.com/xap/1.0/rights/Owner","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://rs.tdwg.org/ac/terms/caption","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://rs.tdwg.org/ac/terms/Multimedia","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://specieslink.net/col/25","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://specieslink.net/guid/25/22942","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://svampe.databasen.org)","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"domain","category":"Network activity","value":"indexfungorum.org","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://creativecommons.org/licenses/by-nc/4.0/legalcode","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://svampe.databasen.org/observations/571704","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://svampe.databasen.org/uploads/2026-571704_B19xMXlSWx.JPG","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/terms/creator","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://creativecommons.org/licenses/by/4.0/","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/terms/license","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/terms/type","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/terms/created","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://data.nhm.ac.uk/media/36d1592b-d6a7-4ffc-a00a-aed4e040e2ed","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/terms/identifier","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/terms/rightsHolder","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/terms/title","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://purl.org/dc/terms/format","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://rs.gbif.org/terms/1.0/Multimedia","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://unknown.org/code","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://unknown.org/maxSearchResponseRecords","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://bnhm.berkeley.edu/DwC/bnhm_dc2_schema.xsd","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://unknown.org/conceptualSchema","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://creativecommons.org/publicdomain/zero/1.0/legalcode","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://unknown.org/griddedDataset","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://unknown.org/status","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://dsimap.mnhn.fr/biocase/pywrapper.cgi?dsa=cbnbp","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://unknown.org/orphanEndpoint","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://unknown.org/crawl_attempt","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://unknown.org/download","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"http://creativecommons.org/licenses/by/4.0/legalcode","to_ids":true,"timestamp":"1786036445","comment":"Category: Environmental"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/citation-lookup/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/memberships/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/docket-alerts/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/alerts/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/spouse-incomes/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/reimbursements/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/disclosure-positions/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/non-investment-incomes/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/investments/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/gifts/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/financial-disclosures/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/debts/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/agreements/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/visualizations/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/visualizations/json/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/increment-event/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/prayers/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/docket-tags/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/tags/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/scrapers/scotus-email/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/fjc-integrated-database/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/recap-query/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/recap-fetch/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/recap-email/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/recap/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/attorneys/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/parties/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/aba-ratings/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/sources/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/political-affiliations/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/schools/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/educations/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/retention-events/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/positions/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/people/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/tag/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/opinions-cited/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/opinions/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/clusters/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/audio/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/courts/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/recap-documents/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/docket-entries/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/originating-court-information/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/bankruptcy-information/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/dockets/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"https://www.courtlistener.com/api/rest/v4/search/","to_ids":true,"timestamp":"1786036405","comment":"Category: Court Cases"},{"type":"url","category":"Network activity","value":"http://data.gdeltproject.org/gdeltv2/20260806201500.gkg.csv.zip","to_ids":true,"timestamp":"1786036397","comment":"Category: Adverse Media"},{"type":"md5","category":"Payload delivery","value":"de29efad5df4dd29bb0ea323c385c30f","to_ids":true,"timestamp":"1786036397","comment":"Category: Adverse Media"},{"type":"url","category":"Network activity","value":"http://data.gdeltproject.org/gdeltv2/20260806201500.mentions.CSV.zip","to_ids":true,"timestamp":"1786036397","comment":"Category: Adverse Media"},{"type":"md5","category":"Payload delivery","value":"2aefb774e5aade61eb01a3c2278d99f3","to_ids":true,"timestamp":"1786036397","comment":"Category: Adverse Media"},{"type":"url","category":"Network activity","value":"http://data.gdeltproject.org/gdeltv2/20260806201500.export.CSV.zip","to_ids":true,"timestamp":"1786036397","comment":"Category: Adverse Media"},{"type":"md5","category":"Payload delivery","value":"87ccd6b54ea9b8b4750c953fdb34c75c","to_ids":true,"timestamp":"1786036397","comment":"Category: Adverse Media"},{"type":"domain","category":"Network activity","value":"api.w.org","to_ids":true,"timestamp":"1786036396","comment":"Category: Nation State"},{"type":"domain","category":"Network activity","value":"developer.wordpress.org","to_ids":true,"timestamp":"1786036396","comment":"Category: Nation State"},{"type":"domain","category":"Network activity","value":"theme.json","to_ids":true,"timestamp":"1786036396","comment":"Category: Nation State"},{"type":"domain","category":"Network activity","value":"akismet.com","to_ids":true,"timestamp":"1786036396","comment":"Category: Nation State"},{"type":"domain","category":"Network activity","value":"eurepoc.eu","to_ids":true,"timestamp":"1786036396","comment":"Category: Nation State"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/resources/terms-of-use/)","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"url","category":"Network activity","value":"http://www.apache.org/licenses/LICENSE-2.0","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"domain","category":"Network activity","value":"mitre-engenuity.org","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"url","category":"Network activity","value":"https://car.mitre.org/)","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"url","category":"Network activity","value":"https://ctid.mitre-engenuity.org/our-work/nist-800-53-control-mappings/)","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/techniques/T1499/004)","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/resources/updates/updates-april-2023/index.html)._","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/resources/updates/updates-april-2021/index.html)","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"url","category":"Network activity","value":"https://github.com/CVEProject/cve-schema/pull/6)","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"url","category":"Network activity","value":"https://github.com/center-for-threat-informed-defense/mappings-explorer/)","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/)","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"url","category":"Network activity","value":"https://center-for-threat-informed-defense.github.io/mappings-explorer/external/cve/)","to_ids":true,"timestamp":"1786036392","comment":"Category: Vuln Mapping"},{"type":"sha1","category":"Payload delivery","value":"adc5c8c1ddc9c8dec6edc8d9c9cc83c2df83d9c5","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"sha1","category":"Payload delivery","value":"8ce4e9e0fce8e9ffe7cce9f8e8eda2e3fea2f8e4","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/etda_thailand","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://facebook.com/ETDA.Thailand","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://creativecommons.org/licenses/by-nc-sa/4.0/","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://otx.alienvault.com/","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/groups/","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://github.com/MISP/misp-galaxy/blob/master/clusters/threat-actor.json","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"tgc-tools.json","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"tgc-actors.json","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"getmisp.cgi","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.circl.lu/doc/misp/galaxy/","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"aptstats.cgi","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"aptsearch.cgi","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"listtools.cgi","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"listgroups.cgi","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.etda.or.th","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.w3.org/1999/xhtml","to_ids":true,"timestamp":"1786036392","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.silent_run_loader","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.romulus_loader","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://rsf.org/en/exclusive-rsf-uncovers-new-spyware-belarus","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://rsf.org/sites/default/files/medias/file/2025/12/report1.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://censys.com/blog/residentbat-belarusian-kgb-android-spyware/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://rsf.org/sites/default/files/medias/file/2025/12/report_0.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/elf.spry_socks","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.funnyswitch","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.spyder","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://bishopfox.com/tools/sliver","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/BishopFox/sliver","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://gost.run/en/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://v2.gost.run/en/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/ginuerzh/gost/blob/master/README_en.md","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"setcookie.thtml.ttc","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"cav-0.1-py3.6.egg","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.malwarebytes.com/blog/threat-intelligence/2022/04/colibri-loader-combines-task-scheduler-and-powershell-in-clever-persistence-technique","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/monoxgas/sRDI/blob/master/shellcodeRDI/shellcodeRDI.c))","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/janrubin/complex-obfuscation-meh/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/janrubin/meh-2-2/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.zerofox.com/blog/the-underground-economist-volume-3-issue-12/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/emotet-darkgate-lokibot-crimeware-report/110286/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.aon.com/cyber-solutions/aon_cyber_labs/darkgate-keylogger-analysis-masterofnone/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://0xtoxin.github.io/threat%20breakdown/DarkGate-Camapign-Analysis/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"PENCILDOWN.ANDROID","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"LANDMARK.NET","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"GOLDDRAGON.POWERSHELL","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"COINTOSS.XLM","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"TXR.0.regtrans","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.gov.pl/attachment/6f51bb1a-3ad2-461c-a16d-408915a56f77","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.gov.pl/attachment/64193e8d-05e2-4cbf-bb4c-5f58da21fefb","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.gov.pl/attachment/ee91f24d-3e67-436d-aa50-7fa56acf789d","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.gov.pl/attachment/6e085a2c-ac05-4b62-9423-5d6e9ef730bf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.gov.pl/web/baza-wiedzy/espionage-campaign-linked-to-russian-intelligence-services","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/19/d/potential-targeted-attack-uses-autohotkey-and-malicious-script-embedded-in-excel-file-to-avoid-detection.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2019/finteam-trojanized-teamviewer-against-government-targets/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2022/03/threat-thursday-sunseed-malware","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/b/tgtoxic-malware-targets-southeast-asia-android-users.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.malwarebytes.com/blog/news/2018/04/fakeupdates-campaign-leverages-multiple-website-platforms","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"FlawedAmmyy.downloader","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/antonioCoco/SharPyShell","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/jpillora/chisel","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/i/buzzing-in-the-background-bumblebee-a-new-modular-backdoor-evolv.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2022/07/gootloader-from-seo-poisoning-to-multi-stage-downloader","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.cyber.nj.gov/alerts-advisories/gootloader-malware-platform-uses-sophisticated-techniques-to-deliver-malware","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/melting-unc2198-icedid-to-ransomware-operations","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/esile","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/de/security/news/cyber-attacks/esile-targeted-attack-campaign-hits-apac-governments","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.group-ib.com/colunmtk_apt41","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2021/06/chinese-hackers-believed-to-be-behind.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/BeichenDream/BadPotato","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/eset/malware-ioc/tree/master/especter","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2021/10/05/uefi-threats-moving-esp-introducing-especter-bootkit/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"loglog.txt","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://us-cert.cisa.gov/GRIZZLY-STEPPE-Russian-Malicious-Cyber-Activity","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.clearskysec.com/cedar/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/BedTheGod/ConfuserEx-Mod-By-Bed","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2017/12/recam-redux-deconfusing-confuserex.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://yck1509.github.io/ConfuserEx/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.tripwire.com/state-of-security/featured/ransomware-characteristics-attack-chains-recent-campaigns/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/exposing-modular-adware-how-dealply-iserik-and-managex-persist-in-systems/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.ncsc.gov.uk/files/Advisory-APT29-targets-COVID-19-vaccine-development.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.botconf.eu/wp-content/uploads/2018/12/2018-Y-Ishikawa-S-Nagano-Lets-go-with-a-Go-RAT-_final.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blogs.jpcert.or.jp/en/2018/07/malware-wellmes-9b78.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.lac.co.jp/lacwatch/pdf/20180614_cecreport_vol3.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://bitdefender.com/files/News/CaseStudies/study/332/Bitdefender-Whitepaper-Chafer-creat4491-en-EN-interactive.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/byt3bl33d3r/CrackMapExec","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.metasploit.com","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.cobaltstrike.com","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/cobbr/Covenant/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2016/10/20/new-eset-research-paper-puts-sednit-under-the-microscope/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2014/10/08/sednit-espionage-group-now-using-custom-exploit-kit/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2020/04/apt32-targeting-chinese-government-in-covid-19-related-espionage.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://baijiahao.baidu.com/s?id=1661498030941117519","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/news/ta505-delivers-new-gelup-malware-tool-flowerpippi-backdoor-via-spam-campaign/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://labs.bitdefender.com/2020/01/hold-my-beer-mirai-spinoff-named-liquorbot-incorporates-cryptomining/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://seguranca-informatica.pt/targeting-portugal-a-new-trojan-lampion-has-spread-using-template-emails-from-the-portuguese-government-finance-tax/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://repnz.github.io/posts/autochk-rootkit-analysis/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"autochk.sys","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://mobile.twitter.com/IntezerLabs/status/1215252764080644098","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.ibm.com/downloads/cas/OAJ4VZNJ","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/vbetaly/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"SCANSIONE.vbe","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/a-mining-multitool/86950/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.privateinternetaccess.com/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2019/11/21/deprimon-default-print-monitor-malicious-downloader/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/deprimon-malware-registers-itself-as-a-windows-print-monitor/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/wp-content/uploads/2019/10/ESET_Winnti.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.gdatasoftware.com/blog/2014/10/23941-com-object-hijacking-the-discreet-way-of-persistence","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/compfun-successor-reductor/93633/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://mobile.twitter.com/SaudiDFIR/status/1177740045186457600","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2019/08/01/banking-trojans-amavaldo/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/attack-campaign-on-the-government-of-thailand-delivers-bookworm-trojan/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.cyber.nj.gov/threat-profiles/trojan-variants/sunorcal","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/unit42-sunorcal-adds-github-steganography-repertoire-expands-vietnam-myanmar/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://otx.alienvault.com/pulse/588a7c8fe4166d1d84244b9a","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://citizenlab.ca/2013/08/surtr-malware-family-targeting-the-tibetan-community/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://threatvector.cylance.com/en_us/home/reaver-mapping-connections-between-disparate-chinese-apt-groups.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/unit42-new-malware-with-ties-to-sunorcal-discovered/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://techcrunch.com/2019/04/16/scranos-rootkit-passwords-payments/?guccounter=1&guce_referrer_us=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8&guce_referrer_cs=MrGSn18TmNoWovpLbekFYA","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://labs.bitdefender.com/2019/04/inside-scranos-a-cross-platform-rootkit-enabled-spyware-operation/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2019/04/jasperloader-targets-italy.html?m=1","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://malware.lu/assets/files/articles/RAP003_KimJongRAT-Stealer_Analysis.1.0.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Korea.However","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"too.We","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"laoshi135.zhangand","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://contagiodump.blogspot.ca/2010/10/oct-08-cve-2010-2883-pdf-nuclear.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"analyse.Furthermore","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2019/02/combing-through-brushaloader.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/cardinal-rat-sins-again-targets-israeli-fin-tech-firms/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/new-slub-backdoor-uses-github-communicates-via-slack/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/stealthworker-malware-uses-windows-linux-bots-to-hack-websites/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/chessmaster-adds-updated-tools-to-its-arsenal/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.virusbulletin.com/blog/2019/02/malspam-security-products-miss-banking-and-email-phishing-emotet-and-bushaloader/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"OSX.BadWord","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"OSX.LamePyre","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-lamepyre-macos-malware-sends-screenshots-to-attacker/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-kingminer-threat-shows-cryptominer-evolution/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/rotexy-mobile-trojan-launches-70k-attacks-in-three-months/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.carbonblack.com/2017/08/18/threat-analysis-carbon-black-threat-research-dissects-png-dropper/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"ip-dst","category":"Network activity","value":"9.36.0.0","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"ip-dst","category":"Network activity","value":"1.0.32.1","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.alienvault.com/forums/discussion/17301/alienvault-labs-threat-intelligence-update-for-usm-anywhere-march-25-march-31-2018","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"sipauth32.tsp","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://malware.dontneedcoffee.com/2017/10/coalabot-http-ddos-bot.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.ncsc.gov.uk/alerts/indicators-compromise-malware-used-apt28","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/cronix-cryptominer-kills-rivals-to-reign-supreme/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-chainshot-malware-found-by-cracking-512-bit-rsa-key/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/lojax-command-and-control-domains-still-active/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.cfr.org/interactive/cyber-operations/notpetya","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/magentocore-malware-found-on-7-339-magento-stores/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Win32%2Fsirefef","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/russian-army-exhibition-decoy-leads-to-new-biskvit-malware.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://camal.coseinc.com/publish/2013Bisonal.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/zerosum0x0/koadic","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/malware-that-hit-pyeongchang-olympics-deployed-in-new-attacks/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.360totalsecurity.com/en/new-cryptominer-hijacks-your-bitcoin-transaction-over-300000-computers-have-been-attacked/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/clipboard-hijacker-targeting-bitcoin-and-ethereum-users-infects-over-300-0000-pcs/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/roaming-mantis-uses-dns-hijacking-to-infect-android-smartphones/85178/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"www.securelist.com","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/invisimole-is-a-complex-spyware-that-can-take-pictures-and-record-audio/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/lol-babayaga-wordpress-malware-updates-your-site/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.jpcert.or.jp/2018/06/plead-downloader-used-by-blacktech.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.us-cert.gov/ncas/alerts/TA18-149A","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/defending-against-the-new-vpnfilter-botnet.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securingtomorrow.mcafee.com/consumer/consumer-threat-notices/new-vpnfilter-malware-infects-routers/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2018/05/VPNFilter.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/stalinlocker-deletes-your-files-unless-you-enter-the-right-code/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/facexworm-spreads-via-facebook-messenger-malicious-chrome-extension/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/gaming/chinese-police-arrest-15-people-who-hid-malware-inside-pubg-cheat-apps/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/maikspy-spyware-poses-as-adult-game-targets-windows-and-android-users/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://cryptovest.com/news/hello-kitty-new-malware-me0ws-its-way-into-mining-monero/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://threatpost.com/kitty-cryptomining-malware-cashes-in-on-drupalgeddon-2-0/131668/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/hello-kitty-malware-targets-drupal-to-mine-for-cryptocurrency/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.flashpoint-intel.com/blog/rubella-macro-builder/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/rovnix-infects-systems-with-password-protected-macros/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/goscanssh-malware-avoids-government-and-military-servers/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.talosintelligence.com/2018/03/goscanssh-analysis.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-diskwriter-or-uselessdisk-bootlocker-may-be-a-wiper/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.us-cert.gov/sites/default/files/publications/MAR-10135536.11.WHITE.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/march/apt15-is-alive-and-strong-an-analysis-of-royalcli-and-royaldns/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"RoyalCli.pdb","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Backdoor.APT.WINERACK","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Trojan.APT.Zumkong","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"APT.Downloader.SLOWDRIFT","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"payloads.Lure","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"APT.Backdoor.SHUTTERSPEED","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Exploit.APT.RICECURRY","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Backdoor.APT.POORAIM","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Backdoor.APT.Karae","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Downloader.APT.HAPPYWORK","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"APT.Backdoor.Win.DOGCALL","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"APT.InfoStealer.Win.CORALDECK","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.trustwave.com/Resources/SpiderLabs-Blog/Gamut-Spambot-Analysis/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/necurs-and-gamut-botnets-account-for-97-percent-of-the-internets-spam-emails/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.ncsc.gov.uk/content/files/protected_files/article_files/Turla%20group%20using%20Neuron%20and%20Nautilus%20tools%20alongside%20Snake%20malware_0.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~ShipUp-A/detailed-analysis.aspx","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/W32~ShipUp-F/detailed-analysis.aspx","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Worm:Win32/Shipup.A","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Trojan%3AWin32%2FShipup.K","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Trojan:Win32/Shipup.G","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/dk/threat-encyclopedia/archive/malware/pe_ghotex.a-o","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.csoonline.com/article/2132422/malware-cybercrime/cyberespionage-malware--miniflame--discovered.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/miniflame-aka-spe-elvis-and-his-friends-5/31730/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"KAZY.SM","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Trojan.Spuler","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Trojan.Generic","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Generic30.ASYL","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.solvusoft.com/en/malware/trojans/downloader-fgo/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.peerlyst.com/posts/hack-lu-2016-recap-interesting-malware-no-i-m-not-kidding-by-marion-marschalek-claus-cramon","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://malware-research.org/prepare-father-of-stuxnet-news-are-coming/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=u2Ry9HTBbZI","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/connect/blogs/hydraq-attack-mythical-proportions","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/connect/blogs/hydraq-aurora-attackers-back","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/connect/blogs/trojanhydraq-incident-analysis-aurora-0-day-exploit","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/security_response/writeup.jsp?docid=2011-011117-0057-99","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"W32.Rotinom","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://news.softpedia.com/news/Exforel-Backdoor-Implemented-at-NDIS-Level-to-Be-More-Stealthy-Experts-Say-313567.shtml","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.jpcert.or.jp/.s/2018/03/malware-tscooki-7aa0.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/digmine-cryptocurrency-miner-spreading-via-facebook-messenger/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/travle-aka-pylot-backdoor-hits-russian-speaking-targets/83455/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://objective-see.com/blog/blog_0x25.html#Proton","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://objective-see.com/blog/blog_0x25.html#Empyre","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://objective-see.com/blog/blog_0x25.html#MacDownloader","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://objective-see.com/blog/blog_0x25.html#FruitFly","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2017/09/28/monero-money-mining-malware/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/ratankba-watering-holes-against-enterprises/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/sites/default/files/pfpt-us-wp-north-korea-bitten-by-bitcoin-bug.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.fortinet.com/2017/12/12/rise-of-one-more-mirai-worm-variant","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/satori-botnet-has-sudden-awakening-with-over-280-000-active-bots/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"52869.Effectively","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"bot.The","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"variants.Previous","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/dissecting-prilex-cutlet-maker-atm-malware-families/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://community.rsa.com/community/products/netwitness/blog/2017/12/08/gratefulpos-credit-card-stealing-malware-just-in-time-for-the-shopping-season","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/hubfs/Content%20PDFs/OSX.Pirrit%20Part%20III%20The%20DaVinci%20Code.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www2.cybereason.com/research-osx-pirrit-mac-adware","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://go.cybereason.com/rs/996-YZT-709/images/Cybereason-Lab-Analysis-OSX-Pirrit-4-6-16.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2013/01/24/linux-sshdoor-a-backdoored-ssh-daemon-that-steals-passwords/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blogs.forcepoint.com/security-labs/locky-distributor-uses-newly-released-quant-loader-sold-russian-underground","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/quant-loader-is-now-bundled-with-other-crappy-malware/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/wp-vcd-wordpress-malware-spreads-via-nulled-wordpress-themes/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/wp-vcd-wordpress-malware-campaign-is-back/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2017/12/08/strongpity-like-spyware-replaces-finfisher/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ordinypt-ransomware-intentionally-destroys-files-currently-targeting-germany/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/zoho-heavily-used-by-keyloggers-to-transmit-stolen-data/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.agenttesla.com/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/security_response/writeup.jsp?docid=2010-051118-0604-99","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/gootkit-launches-redirection-attacks-in-the-uk/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/gootkit-bobbing-and-weaving-to-avoid-prying-eyes/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/inside-the-gootkit-cc-server/76433/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/what-old-new-again-nymaim-moves-past-its-ransomware-roots-0","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://researchcenter.paloaltonetworks.com/2017/11/unit42-oilrig-deploys-alma-communicator-dns-tunneling-trojan/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://researchcenter.paloaltonetworks.com/2017/03/unit42-dimnie-hiding-plain-sight/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.netlab.360.com/iot_reaper-a-rappid-spreading-new-iot-botnet-en/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://cdn.securelist.com/files/2017/08/ShadowPad_technical_description_PDF.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.cylance.com/en_us/blog/threat-spotlight-is-fireball-adware-or-malware.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2017/08/22/gamescom-2017-fun-blackhats/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"gf.ignitgames","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://isc.sans.edu/diary/22736","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/look-js_powmet-completely-fileless-malware/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"POWMET.DE","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"md5","category":"Payload delivery","value":"9A26A0E7B88940DAA84FC4D5E6C61AD0","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/a-new-era-in-mobile-banking-trojans/79198/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Trojan-Banker.AndroidOS.Svpeng.ae","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/cowersnail-from-the-creators-of-sambacry/79087/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.talosintelligence.com/2017/05/konni-malware-under-radar-for-years.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://phishme.com/loki-bot-malware/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.talosintelligence.com/2017/06/threat-roundup-0602-0609.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Worm%3AWin32%2FFadok.A","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Win.Worm.Fadok","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.arbornetworks.com/blog/asert/lockpos-joins-flock/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securingtomorrow.mcafee.com/mcafee-labs/banload-trojan-targets-brazilians-with-malware-downloads/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/banload-limits-targets-via-security-plugin/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/banload","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://researchcenter.paloaltonetworks.com/2016/03/banload-malware-affecting-brazil-exhibits-unusually-complex-infection-process/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://myonlinesecurity.co.uk/new-guidelines-from-moneygram-malspam-delivers-a-brand-new-java-adwind-version/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://resources.netskope.com/h/i/352356475-phishing-as-a-service-phishing-revamped","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/trickbot-banking-trojan-gets-screenlocker-component/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/trickbot-is-hand-picking-private-banks-for-targets-with-redirection-attacks-in-tow/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.fraudwatchinternational.com/malware/trickbot-malware-works","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2016/10/trick-bot-dyrezas-successor/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2017/05/unit42-kazuar-multiplatform-espionage-backdoor-api-access/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.us-cert.gov/ncas/alerts/TA17-117A","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2017/04/unit42-cardinal-rat-active-two-years/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2010/10/feodosoff-a-new-botnet-on-the-rise.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/misterch0c/shadowbroker","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.f-secure.com/documents/996508/1030745/callisto-group","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2015/12/latentbot_trace_me.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://wikileaks.org/hackingteam/emails/emailid/31436","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://wikileaks.org/hackingteam/emails/fileid/581640/267803","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://surveillance.rsf.org/en/hacking-team/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://researchcenter.paloaltonetworks.com/2017/10/unit42-tracking-subaat-targeted-phishing-attacks-point-leader-threat-actors-repository/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"ip-dst","category":"Network activity","value":"2.0.0.1","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"ip-dst","category":"Network activity","value":"1.3.4.0","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"www.winsim.com","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"www.bo2k.com","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"www.dankrusi.com","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://contagiodump.blogspot.com/2010/06/these-days-i-see-spike-in-number-of.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"TROJAN.FOXY","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"ip-dst","category":"Network activity","value":"0.9.9.12","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://camaya.net/gloox/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"TROJAN.COOKIES","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://contagiodump.blogspot.lu/2013/03/mandiant-apt1-samples-categorized-by.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2017/04/06/sathurbot-distributed-wordpress-password-attack/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://virusradar.com/en/Win32_Sathurbot.A/description","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://security.googleblog.com/2017/04/an-investigation-of-chrysaor-malware-on.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.enigmasoftware.com/trochilusrat-removal/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blogs.forcepoint.com/security-labs/trojanized-adobe-installer-used-install-dragonok%E2%80%99s-new-custom-backdoor","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/elf_imeij.a","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/kevthehermit/RATDecoders","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.cylance.com/shell-crew-variants-continue-to-fly-under-big-avs-radar","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2016/11/floki-bot-and-the-stealthy-dropper/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.arbornetworks.com/blog/asert/flokibot-flock-bots/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2016/07/unit42-investigating-the-luminositylink-remote-access-trojan-configuration/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/uncovering-inner-workings-eyepyramid/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-ghostadmin-malware-used-for-data-theft-and-exfiltration/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securityaffairs.co/wordpress/78867/breaking-news/shamoon-virustotal.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://en.wikipedia.org/wiki/Shamoon","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blogs.forcepoint.com/security-labs/mm-core-memory-backdoor-returns-bigboss-and-sillygoose","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/tag/shiz-trojan-malware/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2017/01/unit42-2016-updates-shifu-banking-trojan/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/security_response/writeup.jsp?docid=2010-011016-3514-99","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://en.wikipedia.org/wiki/Zeus_(malware)","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Trojan.Zbot","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/wiki/Software/S0049","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://twitter.com/Timo_Steffens/status/814781584536719360","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Backdoor.Tinybaron","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/security_response/writeup.jsp?docid=2015-031915-4935-99","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Trojan.Seaduke","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.virusbulletin.com/conference/vb2014/abstracts/back-blackenergy-2014-targeted-attacks-ukraine-and-poland/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://en.wikipedia.org/wiki/Mirai_(malware)","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://community.rapid7.com/community/infosec/blog/2013/06/07/keyboy-targeted-attacks-against-vietnam-and-india","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://citizenlab.org/2016/11/parliament-keyboy/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.checkpoint.com/downloads/volatile-cedar-technical-report.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/adaptivethreat/Empire","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.sophos.com/medialibrary/PDFs/technical%20papers/sophos-vawtrak-international-crimeware-as-a-service-tpna.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://en.wikipedia.org/wiki/Akbot","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/worlds-largest-spam-botnet-finds-a-new-way-to-avoid-detection-for-now/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://en.wikipedia.org/wiki/Necurs_botnet","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.gdatasoftware.com/2015/03/24274-the-andromeda-gamarue-botnet-is-on-the-rise-again","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/dridex-financial-trojan.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/blog/research/73660/adwind-faq/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.symantec.com/connect/blogs/taiwan-targeted-new-cyberespionage-back-door-trojan","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Backdoor.Dripion","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2016/10/unit42-houdinis-magic-reappearance/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/connect/blogs/odinaff-new-trojan-used-high-level-financial-attacks","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/pokemon-themed-umbreon-linux-rootkit-hits-x86-arm-systems/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.amnesty.org/download/Documents/ASA3383662018ENGLISH.PDF","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.arbornetworks.com/blog/asert/mad-max-dga/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://objective-see.com/blog/blog_0x25.html#XAgent","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://app.box.com/s/l7n781ig6n8wlf1aff5hgwbh4qoi5jqq","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/pawn-storm-update-ios-espionage-app-found/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2016/06/irongate_ics_malware.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/hancitor-ruckguv-reappear","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.bit9.com/2013/02/25/bit9-security-incident-update/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2016/02/a-look-into-fysbis-sofacys-linux-backdoor/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"www.arbornetworks.com","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.symantec.com/connect/blogs/operation-cloudyomega-ichitaro-zero-day-and-ongoing-cyberespionage-campaign-targeting-japan","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.fireeye.com/blog/technical/threat-intelligence/2014/07/spy-of-the-tiger.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.cybersquared.com/killing-with-a-borrowed-knife-chaining-core-cloud-service-profile-infrastructure-for-cyber-attacks","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.circl.lu/pub/tr-13/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threats/htran/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://cofense.com/major-us-financial-institutions-imitated-advanced-geodo-emotet-phishing-lures-appear-authentic-containing-proofpoint-url-wrapped-links/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/emotet-returns-with-thanksgiving-theme-and-better-phishing-tricks/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.forcepoint.com/blog/security-labs/thanks-giving-emotet","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/analysis/publications/69560/the-banking-trojan-emotet-detailed-analysis/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://pwc.blogs.com/cyber_security_updates/2014/10/scanbox-framework-whos-affected-and-whos-using-it-1.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/butterfly-corporate-spies-out-for-financial-gain.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.avast.com/2013/07/22/multisystem-trojan-janicab-attacks-windows-and-macosx-via-scripts/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.clearskysec.com/dustysky/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2014/10/new-indicators-compromise-apt-group-nitro-uncovered/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.threatconnect.com/news/threatconnect-enables-healthy-networking-biomed-life-sciences-industry/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://labs.alienvault.com/labs/index.php/2011/another-sykipot-sample-likely-targeting-us-federal-agencies/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/cyber-threat-intelligence/threats/skeleton-key-malware-analysis/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://labs.alienvault.com/labs/index.php/2013/latest-adobe-pdf-exploit-used-to-target-uyghur-and-tibetan-activists/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.symantec.com/connect/blogs/trojantaidoor-takes-aim-policy-think-tanks","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.cylance.com/techblog/Grand-Theft-Auto-Panda.shtml","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/a-peek-into-bronze-unions-toolbox","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.fireeye.com/blog/uncategorized/2014/02/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://en.wikipedia.org/wiki/Regin_(malware)","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/understanding-kjw0rm-malware-we-dive-in-to-the-tv5-cyber-attack/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/troj_sasfis.tl","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www2.fireeye.com/rs/848-DID-242/images/APT28-Center-of-Storm-2017.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.org/intelligence/2012/06/you-dirty-rat-part-2-blackshades-net/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.justice.gov/usao-sdny/pr/manhattan-us-attorney-and-fbi-assistant-director-charge-announce-charges-connection","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/japan-us-defense-industries-among-targeted-entities-in-latest-attack/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp-fakem-rat.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://download01.norman.no/documents/ThemanyfacesofGh0stRat.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"C.Rufus","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/files/2015/02/The-Desert-Falcons-targeted-attacks.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2016/03/digital-quartermaster-scenario-demonstrated-in-attacks-against-the-mongolian-government/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://objective-see.com/blog/blog_0x25.html#Snake","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/waterbug-attack-group.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Trojan.Wipbot","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.gdatasoftware.com/2015/01/23927-evolution-of-sophisticated-spyware-from-agent-btz-to-comrat","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/wiki/Software/S0034","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://kasperskycontenthub.com/securelist/files/2015/05/TheNaikonAPT-MsnMM.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www2.fireeye.com/WEB-2015RPTAPT30.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/bkdr_rarstone-new-rat-to-watch-out-for/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.symantec.com/connect/blogs/buckeye-cyberespionage-group-shifts-gaze-us-hong-kong","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Backdoor.Pirpi","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.securestate.com/blog/2013/02/20/apt-if-it-aint-broke","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/gnaegle/cse4990-practical3","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://researchcenter.paloaltonetworks.com/2017/07/unit42-twoface-webshell-persistent-access-point-lateral-movement/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Agent.ALQHI","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://kasperskycontenthub.com/wp-content/uploads/sites/43/vlpdfs/winnti-more-than-just-a-game-130410.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securelist.com/blog/incidents/57455/nettraveler-is-back-the-red-star-apt-returns-with-new-tricks/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securityledger.com/2013/09/apt-for-hire-symantec-outs-hidden-lynx-hacking-crew/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.darkreading.com/attacks-breaches/elite-chinese-cyberspy-group-behind-bit9-hack/d/d-id/1140495","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Backdoor.Moudoor","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"AGENT.ABQMR","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"AGENT.BMZA","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"AGENT.AQUP.DROPPER","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"AGENT.GUNZ","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://telussecuritylabs.com/threats/show/TSL20120614-05","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/connect/blogs/cve-2012-1875-exploited-wild-part-1-trojannaid","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2015/06/evilgrab-delivered-by-watering-hole-attack-on-president-of-myanmars-website/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/evilgrab-malware-family-used-in-targeted-attacks-in-asia/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"DLLSERV.BE","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.rsaconference.com/writable/presentations/file_upload/hta-w02-dissecting-derusbi.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.novetta.com/wp-content/uploads/2014/11/Derusbi.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.threatgeek.com/2016/01/introducing-hi-zor-rat.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/sakula-malware-family","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Atros2.CKPN","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://nanocore.io/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.symantec.com/connect/blogs/nanocore-another-rat-tries-make-it-out-gutter","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://github.com/kevthehermit/RATDecoders/blob/master/yaraRules/njRat.yar","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.fidelissecurity.com/files/files/FTA_1009-njRAT_Uncovered_rev2.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/lost-door-rat-accessible-customizable-attack-tool/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2016/04/unit42-python-based-pwobot-targets-european-organizations/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/android-malware-about-to-get-worse-gm-bot-source-code-leaked/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://www.symantec.com/connect/blogs/new-reconnaissance-threat-trojanlaziok-targets-energy-sector","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Trojan.Laziok","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://thehackernews.com/2015/08/elise-malware-hacking.html","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Zegost.BW","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Trojan.Win32.Staser.ytq","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Backdoor%3aWin32%2fZegost.BW","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://blog.fortinet.com/2016/08/29/german-speakers-targeted-by-spam-leading-to-ozone-rat","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/whois-anchor-panda/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2016/04/unit42-new-poison-ivy-rat-variant-targets-hong-kong-pro-democracy-activists/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Backdoor.Win32.PoisonIvy","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.f-secure.com/v-descs/backdoor_w32_poisonivy.shtml","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/content/dam/fireeye-www/global/en/current-threats/pdfs/rpt-poison-ivy.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/pdf/whitepapers/msupdater_trojan_whitepaper.pdfx","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Trojan.Inject","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Trojan.Heur.JP.juW","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"domain","category":"Network activity","value":"Backdoor.FSZO","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/threat-encyclopedia/web-attack/112/pulling-the-plug-on-plugx","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/the-tinbatinybanker-malware/","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/search/label/Zusy%20Malware","to_ids":true,"timestamp":"1786036383","comment":"Category: Malware Families"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/crpx0","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://crpx0.su/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/redact","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ursba4dbibo27dtwtgy3l2pc3ekut7helebvmy7ny3b2s3mbzph4qdad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://neclc36yt4yaa5lv54kh4qbhvjcvuv6nnaurqowkellytpvj3afh4aid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sevyware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sevykkkuzbxjpkb7gtfxnltn73bm6vaxglxh5xsd55trqqew3xpowwid.onion/index.php","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/spy","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://spycorp.pro/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/0day","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://odaygplp3zhyx7zl45egetl6dzc4reduisnoyym34rjdmaryfaz5doqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/settra","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pbxvml6h3wz35qlr5muy2cg5jvjsd4qhjlsztmxj4lqkyohnfdrntqyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c3u3g7dz2yxkefci3x34jfvfa4gka4iogi4zfjkyxx2c536oqdld4kid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ttfy4zmtiaywfkkmykpxiwtlxkcr5ofvrhqgxxyspgwzbxkc3uze7jid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://26z3gms2rshr2zzedxhw5fbucilmgt2inhmxzmuhteyztpxohoqplgyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://settra5ldqwgtw5q7z5awbsvlksakyfojuc5slgrz5lvapune4fantqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ulose","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/icarus","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e6ujsppajgb756x7x5ykdryvlcjynltb52eiwi6pd4bfwo6hddd6neid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bavacai","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/doommageddon","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iacjvmxjb2ivqkxxzmde4w6g53gn6ym7c3g6mfifvejyhqtp4wrkypyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cmd","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cmdofficial.com/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cmdnkiqjije2tllr3biee2sjgj3i4robg2cbtilbnytdhh2wy3syrlyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackfile","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blacknbsxfdmjtx4yn533zzm4bemtdfl6dyopbmhg46ckhn4qy7i77id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/triple","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6qqz6m3b6htudohg2mlf5gdcalonxy3sh5g4dix4mpyirjcgelqqufad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ojcmpbdncjo5dhaxxll44bq6to3kwqtoeraevgsjquhdtt4uv5l4igid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/wallstreet","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4dwiv37h7hhuhjpvtn72hme4ylcv3qoe65arfc6mbweal7als6ma7pyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/booba","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7t3zi3e7ki6iseun77ofqtr6wmbpgnpc2ada6gstcxp54lw6q2zb7jad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7t3zi3e7ki6iseun77ofqtr6wmbpgnpc2ada6gstcxp54lw6q2zb7jad.onion/leaks","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/titan","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://titanblog.org/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/deadlock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mnt6","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ttvbuilv5mf2wggfjgmvin22ndzghpukhsyy6coz3p4wt5nqnxah7tyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/prinz","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://prinzkpn6d3itrgcytmsmlcpt5mgwn3ihpck2hsed5cezlbtbi3wklid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6cudc5cqa2bjpwdhcwm2lj6dbqejjjqzeo6ipwvmbazr6cgu7vfk3dad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/hyflock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e5hdifgit6ua7k4ggmltume7kbyryksdnlrkc55we33fnshgxfeqgsyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/aurora","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://exposedrecords.io/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pavregldzg2ypbd3gxbil2suxfok7ykmcknwhkli24anpks6lndymyyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ijexszhscln27nl263lmcd7tx3jttkhm4wjhd4e3y6r4csdbfyeprvid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/leak","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/timc","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rzzfiwoop67jrxadngcy7nvjm7suwtrjznview63ooowqfsm5sq7gmqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/killada","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://killada5556ahpb4cwmatv5qpzku2qmdlwawshtykpq37cvfva7zjhid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://killada7qgdpvzpezjxaa64b47bz47hzbn6oql5aa4lppzzwymnukqqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://killadahaynpqrkppe2m2tgindbruaeiefzr7pm3cp47tzohhhnogwad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://killadax36r6bbb3md67ekcfv5yasdlnoaklyag66ot4tefa32ywgnyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://killadaxczzw3wnuaxkygib67lk2qkgnki4gyjqoo76vh53egitoyaqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://killadaayyuzdshwskrnsvh5owzuwa4yj7gs2vbhkcjpfslrplfgwwqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/audit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cjg2avmzoly7k6mw7xobnyre354jxro4qegkoazhsmigdk2j3aziexyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6tdqqaxftvradka5d2frzgwixis7fmro7rfh4ettzcx7jfapkebe6jad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/threatmarket","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hi6bo2aihmuzkaj6gi6sigmut5bcwvguqpma3hwxsjfbqsccnchmybid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lamashtu","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lamashtux5j74mcm7lwwgn5yrvuwtrpxjoyendif3v3hrztjesfoyayd.onion/api/posts?page=1&filter=all","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lamashtux5j74mcm7lwwgn5yrvuwtrpxjoyendif3v3hrztjesfoyayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/alp-001","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qthem3ogqqixjhhwacto6pqbjfy2vcykdlz7woulnewsrwy4lfjocfqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b4riuxx7ypobdptctf6lyfcvgi6vn74iurzdh4kn2agbk7472dvywgyd.onion/index","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nblock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nblockn6jjp3xxh2do4ckkcer7w54sube7jdqaq7ttfvucgz6nsi4fad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackwater","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ejzl7cjxmkx7lzhiqwidmrwtfjv45pkczbc4fnyaut3t7gll3yaiq5id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6t5g73fbzdjuhvvovuvuhc4mdgefrwn75szssx4ftqzxyuacdij47pad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/krybit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://krybieodq754vlwufrsuxaswxb5zpxyibaawmed2jaduoz2e5m56hmid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://krybitx3fh5krdnhegyp2ob3lhizsaiadturtio3ginf7it5gsdgu2yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://krybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje67yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/m3rx","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4k6plf4h2cm2nco6ae3inrsxnmqgl6lllmwefydhnlcq4tuhwbj4qpad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pippahtohg6qgioqu3ixrsueefuw7thythmmeanyrgwn3eixcuu6jvqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/netrunner","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://netrunrsb3bivj5gnwajzxlig5qkteb6edgthxj7fmsvhkzxtwfxwaad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/zetarink","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5cxxlyurwn2usx5qwtlny7o3r5a5nb46lznelb56w2xuo7x35nbmulyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/xp95","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://37lfmtakhknzx5t6k57ieijkiqrc4c3kpimfvrmafva25ut2tknvw3yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/exitium","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m3ksukzn2glzfdvlusohril7n3iyk4z4fudf6mm22lwhpbpt5aiee5qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vect","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vectordntlcrlmfkcm4alni734tbcrnd5lk44v6sp4lqal6noqrgnbyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://158.94.210.11:8000/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bu7zr6fotni3qxxoxlcmpikwtp5mjzy7jkxt7akflnm2kwkbdtgtjuid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lsd","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t.me/rewreglsd","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/reynolds","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ironchain","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ironchaindecrypt7xfzq5tclm9jzpwq72uofgy2znkdsxm54zbcu2yid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/payload","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://payload6eualw6kni6v2lqn7ovjcl76ojx25z5unsyvqo3lbqy3bo5qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kittykatkrew","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vs6ccwled72hwmescxr2e32mmfrm6vbqbo7gbmmkxnu7g5fps7ndeeyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/shadowbyt3$","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://shdwbt3ja2ptjt6poluegas44i35727lgmoqqquoww642x3zyocyhuqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sdwbytqeb664krp2wz2qs3lxxah2rhneuotot5hy7g4jpn2pindigcad.onion/leaks.php","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://45.84.0.211","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://shadoz22.io/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://shadowsblog.cloud-ip.cc/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://shadowbyt3s.8bit.ca/index.php","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/insomnia","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r3keoxye5mki4fqcvlk4hpfqqzxmakchjpmem7oppynobcieamdbmcyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cipherforce","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://22evxpggnkyrxpluewqsrv5j4jtde6hut2peq3w44d6ase676qlkoead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://o3ydbkayttkyg4iw2nc732jxmmex25bjeyqyvuuyngnxmpehdefjr3qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://scbrksw5fgjtujc2ah42roo6bij2unr2tggfcynpbql5a7yp3s22taid.onion:8000/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://scbrksw5fgjtujc2ah42roo6bij2unr2tggfcynpbql5a7yp3s22taid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackfield","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xcou7t6a4qlecsr7ipmxlwsseghxbebqltnxwaurxx3bbsbts7ljacqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/monolock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://mlock.tel/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bravox","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bravoxxwcfz5qk43ychgveprpd5mw5hvxfs4a2uz2okx7mumiht4fzyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bravoxxtrmqeeevhl7gdh2yzvlrjxajr66d33c7ozosrccx4cz7cepad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/clearwater","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b6rgpykvtyqah4q5tii25ouevr5g3u2s7pqc24jdlyhrfms3itljtkqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/aware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ui2uleaiisccbtcooyi34cy5u3plpd5wraiza6wtibolshuf7tnzziid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/orion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cjfntkj5qeizxowuy3srceg7zo6namc3kfeor7pfn6bpdkl3w265ooid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/fletchen","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/shinyhunters","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://91.215.85.103/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://176.120.22.24/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://91.202.233.104/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://shinyhunte.rs/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://91.215.85.22/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://toolatedhs5dtr2pv6h5kdraneak5gs3sxrecqhoufc5e45edior7mqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/0apt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lynxr","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/waissbein","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://syympi25sxgm55kyk5wkktns2why6q3ubscpnwqxepdkrmifxjvjd7qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://samu747og2fgxujardbhkp5f5dkoprzyeithz4ob3g5dfvdvmzvp23yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cipherwolf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b63zgpxrwqttrr6ti3jvvezqdzahuirkkjuundu26gz4krtrrkncqjad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/benzona","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wor3mnvotoznof5puzoa35y4bwgtozqe3bae2rpkxmz5dai4xqbcbyad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cpjhb63lxycwbyus2n35ddyhdzxhf756l4rtwdttojzhzgppt3vpmsqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://benzona6x5ggng3hx52h4mak5sgx5vukrdlrrd3of54g2uppqog2joyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rwsu75mtgj5oiz3alkfpnxnopcbiqed6wllyoffpuruuu6my6imjzuqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sicari","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sicarinb4ktqcdpubjifzw3vixvzgtwacjmc5ks56kev52gxitegigad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sicariktdbhjtrk6f2pwdh6wlequw7pcjva25skkzz4m3zz3opyox3qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sicari7m63wlggfxajiuonfsk72fgencne5ztzakyuhfxzq5rnbkjead.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sicarilxx2br6esqnhad4w26bcgb5j2snbbnhyo4b6t7kby2oy4x3jad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sicariifoucvhyqg54smi3esg5sfcyw5z65t6yigqu4loyuoz62bb2id.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/tridentlocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/minteye","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kazu","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6czlbd2jfiy6765fbnbnzuwuqocg57ebvp3tbm35kib425k4qnmiiiqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://darkshiz4d5ayumjvgbdhchwc7oeuc5jgbqkkgr2jj3ga5nvpjsswdad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cry0","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pwn3dky35tub4ktj5bolc72oezg6qc3jvmbogaiwwkimiqtbbokyhrid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cryoblogedawivdcknyd4jsjxkrx3xrqqltxla6wwjjnzm3f3jaxjzqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/osiris","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://osirisbm3357xrccnid23nlyuqwzbgqheaei6dxvyi34tbkqr3bmvfid.onion/rest/blog/posts?offset=0&limit=10&search=","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://osirisbm3357xrccnid23nlyuqwzbgqheaei6dxvyi34tbkqr3bmvfid.onion/app/publications","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ausare.net","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://osirisbm3357xrccnid23nlyuqwzbgqheaei6dxvyi34tbkqr3bmvfid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/rustylocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustyzoc5hc2mre56ug7lacant25o2gepoto3vghiajll4uw6cotmnqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustywua527xyupr5vqqaigvjgnkvibp3ugv2utjx7zoopat7yzfpgqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustyvkrpehhq7x2ellti6oa43mwwvdpsf3e7maddkhtmjxfgyp2rjqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustyunet6zp35koogizqixpnn66fcz6ilosugnydhso6r6uerlgfzyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustyshyjstdvkiffwl4pif7f6jrpzmhcnv2qcrtxn4ivnn2berxreid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustyr2t5slcn66cnbiawdmledjyog5ywlh2jnbmtejflxnel4h3dwyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustypiwiusst2zptoervivs4x3i2vvabd7jok5j5wae6upjdyxt5eid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustynosqxg6f4rurkfj5qjplvcxgmxcq55e5uv4tvtrp4wgaz6ycqid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustyi5lcri2qaulc4g3l3itk6h4q47bu2kmxglqaihp52vzub7b27yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustyfso7zdjlhf3ukdj34pvq6gjnlz3ci6cyv5wun53ilzvvjo4bdad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustye6pskjsu5vo2wlxg24ir3esf6jzcis7asgfgqltja6nr5cvjlad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustyb2uj3aceqsouwei6rgrwvcpnwv7w4fkl5jdntryquabx4nlygyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rustydl5ak6p6ajqnja6qzkxvp5huhe4olpdsq5oy75ea4o34aalpkqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/root","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/spirigatito","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ms13-089","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://chatmsuppxeoma533636ga3g5k56wlyl3zvycya35nhgoktrtg7wgzyd.onion/home","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://msleakjir7pxbe6onlqe5uwgvdmy6nq4mnwfy7ojswbhnleenm77vgad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/fulcrumsec","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fulcrumsec.vg/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4e3p3in2bl67hxchuwza7qvnpe7pyeloyztr5fnh257fxkovfhappjyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gsgot6tua7ffammwdv6vpxkog32b4z7qivtqkxz55afq2hkt2o24w5yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/genesis","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/zircon","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zircon7g4qp46d3gjhejbgxnqwzebcjqs2wkke5pxeux4rrgvbuoulqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/punisher","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jh3zjsqgqk5woyuls7dxgdtorcycjx3i3sgdqpwdbiizunb5vbmppiid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/quicklock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dmkhn64rhzqtys7rns6zhtfgqyfbenrvwyaqi7lkvxhlj5yxbh2l54yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/brotherhood","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://n5yiabvtytglkrpvxgultoekllhpivoshu5glizwxvtvk4fkymdr6uqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tb2utalqu7qwyk33o7hccjoszprt6fsrpggrbwwzi72bu6f5wocqqhyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eyh7wketm3dwqadwfv5dti3yewbr7smrepmavshjfohhc6qwub44knqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cxhu5iruoa3vkmn4blslh4qzabs6jzk26esxnngzjdlquo2beu2nrhyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4n6h3qqewk6dlqribjmw64al5szeuyhcbbfoar37p3yr43hz365nwnyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lashkbx7rkjrvrhkch3oit37tg5dlzjx5eyo3scnmox7sg2v4nmldaad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2lb5n6bqncc4lu4grm46cpoqrq3yyuriyfzdwlemuajj6x6jbbsgrbqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sj2wws6vnambuzjbvaqy5tyg6hp4mm2nwyc4wne356exwzgq6ayrjhqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uwwia3msl6b7ykekgbr7xxnxmpkq7wpgqze5vu7phzkm5eaeueoxtcad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x2z7lngyalgei4zeerq5h3esvtnzisxdljjocqa6555qpivi3cmlrgyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://azgepwfm4g4btbnf2qmc7qtniuqw3wqtpahqmzisnkcvfwdbl6izwsad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xwhzg446dgqx4ofxtidnjihugtii2ydebe6e33m7njzcql5qvkgpv3qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a5wdkdd7unaacdlzcjm5javijatjwkkp726diotek3dvvaibqt7s4yqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fotxzhnoxtkpa6cwkimysoiy6o3ostmekoa3k6sy6ka5a7nuwddjciqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://brohoodyaifh2ptccph5zfljyajjabwjjo4lg6gfp4xb6ynw5w7ml6id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/tengu","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://longvqprqrb4zbxooswz4upefhtikhnyqv4gw4fkzpkc2wjpvxsucwid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://longjr5sl6a57ajn52nysmvgobmb7lktjthssmt2jeyjagk3rw36djyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://longhbqhzlv3p7tvx3iwhfizkmtkm2nhnlbw5d4qr65wjz5e6aa23mid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://longf6faa6tiudn5n6ar77z5balign2cxo2tjfsxuf6wnlzjamqew2yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://longejh5gj5igfinj36rmqt2ydx2vun6zmditi3ij6hebawnn4xucqad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://longcc4fqrfcqt5lzceutylaxir6h66fp6df3oin6mvwvz6pfdbxc6qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fuvodyoktsjdwu3mrbbrmdsmtblkxau6l7r5dygfwgzhf36mabjtcjad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nasir","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yzcpwxuhbkyjnyn4qsf4o5dkvu6m2fyo7dwizmnlutanlmzlos7pa6qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kryptos","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kyber","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tp7e2ekeoqqozyq2t3oy53tzbybvg6ehtinc7kjowtpvbkssprkdmuid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mlnmlnnrdhcaddwll4zqvfd2vyqsgtgj473gjoehwna2v4sizdukheyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/scattered","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://shinypogk4jjniry5qi7247tznop6mxdrdte2k6pdu5cyo43vdzmrwid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/miga","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q7gmt7pbo4rrt27ydkiv2kxd7cimhztq2x7hzd557jthhu5zp6ujieid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/radiant","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://trfqksm6peaeyz4q6egxbij5n2ih6zrg65of4kwasrejc7hnw2jtxryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/white","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l3e4ct2egnlfz4ymexwn66jlz55vrnnn72ub4u3xqdjcp7xel5hpbzqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/izis","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://izis6oyht2suanp5fb5tsxqywwtww7ph5ho7vdjbtyzvs4hkidxgklid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://et3j2c6b55opkefctuiepsl2cj3vpwalain3qsanu33rubffx66fu3id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/octovillan","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jvdg26n32ufrgd2c.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/arachna","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ptyctpveqfevlukjw4hpdh6nb5oiemq6ek6tuuvxbtrfghvuutvscsid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackshrantac","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://shrantacpxim7z6m6pnszi52bb2tp23sntby3hklt36rezdja7bdjsyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/coinbase","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iu6t4jcin7iexrdcgyspal6rsafyu4mw4tkdvugx4nmioxs7mbifdzad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://chk4gwd4yku5jmhrqvqv4t52dwhccmi5e4ssomqreirl5wbosqdnb3qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uzzgphpytgr7zpb6sudyf7ryds5g3cibrhwabwpf3sd7yjkv45b7uuad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://otlnqz4lzee2xpnyy7vx6mwj6nonwgdloxeykwxulvgjwc5wzfacrzid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5uvjhrqzsyyg4cku6uofsu7swmkqwit3na6plsaath4g3mgikievdead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://won2bghjatxaavvf7eoepuwj74pej764mys575xan2h2uoctxnuojyyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rfqsuxf2c3epm7tcxtqrsfaol3kpqe2omxfdls4lbg54ntsaazidgqid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pa4wtlap543g2gx34nphm5lcsrwwl3wwj6nb7omwqlrj3pruf4zuufyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c5oxtg26apmuh3omkhuto22jy37rsgfifbvblvog7ur6d2rbhx7emxqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c7izex5h5shupbutwzsj73yputkqudfm7pvurawov7ciig6nkwssclad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vkhztfqsjbh2in6425uvomeutn3oc4eos4264oexk57zdmntt2hoidid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/the","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kirov","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/securotrop","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/turkish","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vbzxvet5nbga7jblaksuorsrvdsoe2x5youwadt7ywywpqzbliwfzmid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lamialocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/yurei","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fewcriet5rhoy66k6c4cyvb2pqrblxtx4mekj3s5l4jjt4t4kn4vheyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/xleaks","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fqb6joilbbd26d574bfaycnw6tkfqeqgkjnsikmu2eixkj746dqvvgqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cephalus","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/toufan","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://toufanleaks.org/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/obscura","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://obscurad3aphckihv7wptdxvdnl5emma6t3vikcf3c5oiiqndq6y6xad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/desolator","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lunalock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lunachataclss7bvlhk5zxs6pqpunxljeqhrn2bfl6wkhlwqxvgwgayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lunalockcccxzkpfovwzifwxcytqkiuak6wzybnniqwxcmpsetpbetid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/tssxx25","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://techscckl72ibnfg2ksj5aqlanwgzw32asr6ml37aojnyw4nardojyid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lockbit5","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb7omq3tfr3qhyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/leaknet","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bnlluetsuf6pv7mchgue46h43v66uxtccpg3n5vcdzbeqften5cedlid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ahic5qo3qbjgsyv7x2h5w7uh6nuh45km5srblj7i2amxt57xp4wud2qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nleakk6sejx45jxtk7x6iyt65hwvfrkifc5v7ertdlwm3gttbpvlvxqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/piratelock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bytesfromheaven","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jhjqe4vmwfpmjgrminvt7hx7jmcmw2lw45emqmdqyjkvux2eh5lujnyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bober","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://myosbja7hixkkjqihsjh6yvmqplz62gr3r4isctjjtu2vm5jg6hsv2ad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/pear","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xsomiaq5awxh3zkzn334s3dgwuvngy6z2to7265exgovnkwk66hjypid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m3wwhkus4dxbnxbtihexlyd2cv63qrvex6jiebc4vqe22kg2z3udebid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e7a6zgqfijn2ko6lzkz53tysjpnf22fxj4h2f3saufrmsts5pbul5eid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://diyr2bnty7iktyxfd4kz65uigcfappjvux73dpgkkeocp3fmlgnuzyyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5qynbyjl4u6vbtnmpokslaxaknyicdvty7vn2qgxmaty3lb7wwxpkbid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://psvrn6ahevi6dgf55bzc26q3gjc7s6n7vcth34rmkl2y7e7dijhjfiqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q2bg7ljsrpmy6736qqmpwsnqqm3w6d3hhrokohytnmldbom7sthp4sad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xq5m6ofel63h57by46algju25g37zkdwoxxt7ij45b6obo4mxzc3h6id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://csxilwnl7orv6rwfjen5ye3tefk5shjtr4tysuykgxjsyngpvoqrvbid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://etus2tmakckdlkyjpevoyciuao7er5fj3qm26aev3nch4fusptefiayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pearsmob5sn44ismokiusuld34pnfwi6ctgin3qbvonpoob4lh3rmtqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yxwomyfmexm3bfcuumnugrzwluol5qwsw6pmne7jklgmzthkp35l2jqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://peargxn3oki34c4savcbcfqofjjwjnnyrlrbszfv6ujlx36mhrh57did.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hookphish.com/blog/ransomware-group-blacknevas-hits-tani-and-abe/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/blacknevas/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/zeta","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zeta-leaks.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sharpboys","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sharpboyz.io/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sinobi","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sinobiea4snfqtkc43paumapo4oi7vxcy5vjzfoalunsnvzehozfhpyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sinobidxodgt4jsr3tlmf2rr4okjvvwfp5gh3lrqxnowomcx62ssrhqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sinobibdvzohujkliofkxiz3ueyedfh6bed2lzjz2z6pafw5jeoptsid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sinobihmkmncjubqin5u44vso3z2zongdmmtgle7eglskjmfb6u74rad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cdn.sinobi.us.org/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://chat.sinobi.us.org/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.sinobi.us.org/leaks","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sinobiea4snfqtkc43paumapo40i7vxcy5vjzfoalunsnvzehozfhpyd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sinobidxodgt4jsr3t1mf2rr4okjvvwfp5gh31rqxnowomcx62ssrhqd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sinobicrh73ongfuxjajmlyyhalvkhlcgttxkxaxz3gvsgdcgf76uiqd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sinobibjqytwqxjw24zuerqcjyd3hoow6zia7z6kzvwawivamu7nqayd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sinobibdvzohujkliofkxiz3ueyedfh6bed21zjz2z6pafw5jeoptsid.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sinobi7yuoppj76qnkwiobwfc2qve2xkv2ckvzyyjblwd7ucpptl62ad.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/devman2","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tygjm32hxyqienrgwxveiaw3azbjmfaln2znn2hldz2oe6v453ngwlyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://devmanblggk7ddrtqj3tsocnayow3bwnozab2s4yhv4shpv6ueitjzid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wugurgyscp5rxpihef5vl6b6m5ont3b6sezhl7boboso2enib2k3q6qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/blackbyte-crux","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityboulevard.com/2025/07/new-crux-ransomware-emerges-in-three-attacks-this-month/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.itpro.com/business/cybersecurity-researchers-have-spotted-a-potent-new-ransomware-strain-being-used-in-the-wild","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.huntress.com/blog/crux-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackbyte-crux","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://faow6n2hkweyyalp67zvonafn2dzphw36cav653wamj724mwsmtfa5yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dounczge5jhw4iztnnpzp54kd4ot3tikhjsimurtcewqssgye6vvrhqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cryp70n1c0d3","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ranion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ssg3qvvuilseciagm4nixjqu3rsiheny5lifjnwt6o5ann64iocy64ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ranionv3j2o7wrn3um6de33eccbchhg32mkgnnoi72enkpp7jc25h3ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ransomedvc2","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ransomed.biz/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mindware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/cryptedpayransomware-removal/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/21736-cryptedpay-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cryptedpay","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/himalayaa","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ohu6eschnuhxfg46wvco7j3e76oqymo4cowfepbi7h6z3vf6if6lj5yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.rapid7.com/blog/post/2024/02/05/exploring-the-not-so-secret-code-of-blackhunt-ransomware-2/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackhunt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sdjf982lkjsdvcjlksaf2kjhlksvvnktyoiasuc92lf.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybershafarat.com/2025/07/30/bqtlock-ransomware-op-status/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/bqtlock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/33382-bqtlock-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bqtlock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yywhylvqeqynzik6ibocb53o2nat7lmzn5ynjpar3stndzcgmy6dkgid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/homeland","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://homelandjustice.ru","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/elonmusknow","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://leaksbcwijsbkxcx76s24qi4ab4jn7rgtzzyiss7fzco6amhj6h365ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/payoutsking","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c6nrwsloenpiat7zilh243nvhe7a3edsfm3ct3kpxhu2fv7z36ksjcad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://v2mw3spxqhggig5zjd6tjnfamwntrprreij3dq77jlq74dduyjafeead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://payoutsgn7cy6uliwevdqspncjpfxpmzgirwl2au65la7rfs5x3qnbqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vulcan","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/99fb65e2253ca3b34b83","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ank","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ankexpn6vk3qc5ooyyj7ufi6nmyt44vxbjtbxxkq4bxo7xzghai7kiqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/qilin-securotrop","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://securo45z554mw7rgrt7wcgv5eenj2xmxyrsdj3fcjsvindu63s4bsid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/d4rk4rmy","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d4rkd2fybtclo44hss2dpqpw7gmofboxhruax2az3uejw7puxxbpkvqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kawa","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/slam","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://encrP43djqOIjsq2ndakdkir91dndkqOd34dmaQq71.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://encrEjdHGdmd45JdndqkOPqe8jhNdqk.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://encr5RhdkjNNJdwq62dfHIUJ7Gdmiu4KdJRvd9md.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://encrKdm13nfKJNdwf7kd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://encr9djfOJdew92nfjK9sdn34nfsks.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/naga","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nagapay2ypwzsj7gb2hllyelhc6uepfrx7u356slaaemshrooxhbvfyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/warlock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://warlockoact3ayzqwlnay27b633bku2gmpq34dxb43v3qriujfea4yyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://warlockmdu64clit5pdwbp5hsd576vcjjigfwbtz5gtthmuy2fiqblad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://warlock6d4etw5gwwaakh6auh6cwkinhk2bx7bbldu4m5axlcwmbuuyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://warlock5zli2g4nuvixkgyivpda4ktg6flx5lbtw3u6g5lidgxzjc6id.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://warlock4fagqhnfuxtcmncfepe3jc33e33dmj2jsk64svxaerm5zhaqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://warlockoact3ayzqwlnay27b633bku2gmpq34dxb43v3qriujfea4yyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ocwjy4ynmpbbzhumh2ama2vl3bc77lf5auqf7nf4k45lbmzoep2rbyid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://elqfbcx5nofwtqfookqml7ltx2g6q6tmddys6e25vgu3al2meim6cbqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/walocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://am7hswbi46e3ozxec3msxwwzxebkfulsgonhv5kndzeryc2pu46sxmad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://weepangrbqjfsxd2noz4bmolztnqsma3vw4c6qfnbfusadzd2m26emqd.onion/index.php","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyware.com/news/global-group-ransomware-claims-breach-of-media-giant-albavision","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://picussecurity.com/resource/blog/tracking-global-group-ransomware-from-mamona-to-market-scale","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://broadcom.com/support/security-center/protection-bulletin/global-a-new-blacklock-ransomware-variant","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://infosecurity-magazine.com/news/ransomware-group-uses-ai-chatbot/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cybersecurity-magazine.com/news/ransomware-ai-chatbot-pressure/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.eclecticiq.com/global-group-emerging-ransomware-as-a-service","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/global","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7bmz2tc4p2jk23dcyehg37cd7veflk3fyhxrnbxz75vvno2azfy6qayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gdbkvfe6g3whrzkdlbytksygk45zwgmnzh5i2xmqyo3mrpipysjagqyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://panelqbinglxczi2gqkwderfvgq6bcv5cbjwxrksjtvr5xv7ozh5wqad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vg6xwkmfyirv3l6qtqus7jykcuvgx6imegb73hqny2avxccnmqt5m2id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/teamxxx","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tp5cwh6d2b5hekcg6jlhoe6mawa7dlwiv47epvnfmzuaaur2dnaa3uid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/imn","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ho7yirtlkkkytbzkn4bklwuxlu6n3eatkhvvlgjaoub2kvlm3qjq.b32.i2p","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://imncrewwfkbjkhr2oylerfm5qtbzfphhmpcfag43xc2kfgvluqtlgoid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/desolated","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/azzasec","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sebzpewd2zz7jap56r37icjee4pn5scss3mjxz74uq32ua2aa3n5vqad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lcryptorx","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lcryptordecrypt7xfzq5tclm9jzpwq72uofgy2znkdsxm54zbcu2yid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lcryxdecryptor4f6xzyorj9qsb5e.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lyrix","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4hfwnas3oexnkdimschyyld6fftxchsk77wvucpxewlwapmjhjuhjxad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://share.jtor.xyz/torrents/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://twniiyed6mydtbe64i5mdl56nihl7atfaqtpww6gqyaiohgc75apzpad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nova","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cceoxb5youzqo2uk7t7274ittlphj6vimzkjtu75yi5grceqozm5znid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://novamojnnc7n7brrnflr7evyrho2e5ynskicrjxuvhn5r6jjlxyjj4ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://novaxtychr6ohlc4zr5its73p6i7unpuhpwoodtzrg2y4w4seytatlid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pifk3xu3vad6cuxsjll4qjomyaaaoyvnyqppro75pazadzctrrvpdnyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ms5fasbpbfpbxmgtrhcspvg5ajmb2tpxdcg7x2wdd6equemuivqi5syd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://noval3kb6snxuofmqmw2we3cvzci2tfknurgxi7gdyet55xh6zhno5id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://novaeogps7purkdhxmaymmnanqiwtqf3r3iu3we4khkzwegkoefbxnyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://raaskpzmkcoraswmzotjkzplq3aw6mcbogvd5uzbgsnhqb7az3ax2qid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://npnlc7i2mxnngj6angcj5pwesbaapksstqqez2qmtgmimezcpo4haryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://nova25eabfdep76t52dt34n2qdrhrn7vxuaeitcy5x2ovxnut767bwid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://nova5cr2op6uo73korzmzkvil2btj3erjaujwtbbvtpko3yx7ivq3myd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://novazzitmugtbjwuttc5hhsemkmvwh3iyt27oeeunu5mkw62qpfeykid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://leak7y2247fj7dbb35rpfyxuyaqtwbshiwxp6h35ttzlhrxmhvi4fead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://vctmy3tytuah2offux4bixzunh53pnepsnsrr2hly6blpgiewqodnzad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://novaoddh3vxylxqpsfdjprliknbzgbkv6nkazpzu3cvykrgpyzuywryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://novag4k2te3mstt2xq5irywlpaw6edgkpiwgg4t2q7eecisj2qqtvbid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://novatd4577pzlvdyy42slydhrhru7fpcflbbxlajcmbfrgzyeis6d3id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://novavagygnhqyf7a5tgbuvmujve5a2jzgbrq2n4dvetkhvr2zjg27cad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://novav75eqkjoxct7xuhhwnjw5uaaxvznhtbykq6zal5x7tfevxzjyqyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://novaeogps7purkdhxmaymmnanqiwtqf3r3iu3we4khkzwegkoefbxnyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bitdefender.com/blog/businessinsights/bitdefender-threat-debrief-june-2025","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/88240/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/datacarry","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/datacarry","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dcarryhaih5oldidg3tbqwnde4lxljytnpvberrwgj2vlvunopd46dad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/worldleaks","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://worldleaksartrjm3c6vasllvgacbi5u3mgzkluehrzhk2jz4taufuid.onion/companies/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jf2zjpxfh3sob5xr6uc53k7rt4y4vl6rt6bdynd3ptuv4cu5yi43elad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://silentbgdghp3zeldwpumnwabglreql7jcffhx5vqkvtf2lshc4n5zid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://theravenfile.com/2025/09/23/gunra-ransomware-what-you-dont-know/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://watchguard.com/wgrd-security-hub/ransomware-tracker/gunra","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://industrialcyber.co/ransomware/cyfirma-warns-of-gunra-ransomware-surge-targeting-critical-infrastructure-using-double-extortion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.darkreading.com/threat-intelligence/nimble-gunra-ransomware-linux-variant","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/g/gunra-ransomware-linux-variant.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/gunra","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://raas.lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ryrw2ojab62yij4y33ssfgvm2d2vwt3tcqetu6qmpwznqhooqxz3wpqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6oeuvb4fq65xlrft2ezxjmkeqnu7oafbsevrr3ocer27wft6ivvhstqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://myeli53ogsryjg2kob4xqxtwkr5oc5zj7jr5fcfizpytwe566k5thxyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tgsst34i6z4mwdj2kpigixxb3k3xfz7xhuqnsowvfvyu3snm6nv4s5ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vrlgjxbl6yroq26xkcjpafgmmxrlpawvr4agppna6apfxjxav2mq66ad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jzbhtsuwysslrzi2n5is3gmzsyh6ayhm7jt3xowldhk7rej4dqqubxqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2bw7r32r5eshwk2h7uekj3lwzorxds2jyhyzqyilphid3r27x5hsf4yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ransombay","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rrrbaygxp3f2qtgvfqk6ffhdrm24ucxvbr6mhxsga4faefqyd77w7tqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rrrbayguhgtgxrdg5myxkdc2cxei25u6brknfqkl3a35nse7f2arblyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rrrbay3nf4c2wxmhprc6eotjlpqkeowfuobodic4x4nzqtosx3ebirid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cyberex","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wun2vkbns2ypyxfe7wffycdgbxsym564eamfk27py3pesqxikqpqfoyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p6lm43x2ntdgx5ixdqfmhrniz7rxv7xtiudbyicwcpir6oeig7jhrfyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/dire-wolf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.darkreading.com/threat-intelligence/dire-wolf-ransomware-manufacturing-technology","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/dire-wolf-strikes-new-ransomware-group-targeting-global-sectors/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/direwolf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://direwolf66s5zealav7azcyqeipiswecvvnapyuby3dek473kyqfucad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://direwolfgpyqohwxwoetsz7a6p72diu32c3wfysqdx4ei6bwft7zh3yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hivepro.com/threat-advisory/devman-ransomware-is-a-new-derivative-of-the-dragonforce-family/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/devman","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/devman-a-new-dragonforce-ransomware-variant","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@anyrun/devman-ransomware-analysis-of-new-dragonforce-variant-ede707fd30b1","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/devman","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qljmlmp4psnn3wqskkf3alqquatymo6hntficb4rhq5n76kuogcv7zyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://theravenfile.com/2025/06/16/bert-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortra.com/blog/bert-ransomware-what-you-need-know","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.darkreading.com/cyber-risk/bert-blitzes-linux-windows-systems","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.halcyon.ai/blog/bert-ransomwares-first-moves-kill-the-vms-kill-the-backups","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityboulevard.com/2025/07/new-bert-ransomware-evolves-with-multiple-variants/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.csoonline.com/article/4019468/trend-micro-flags-bert-a-rapidly-growing-ransomware-threat.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/bert","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bert","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wtwdv3ss4d637dka7iafl7737ucykei7pluzc7is3mgo2vl5nmq7eeid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bertblogsoqmm4ow7nqyh5ik7etsmefdbf25stauecytvwy7tkgizhad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/research/tracking-ransomware-april-2025","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sangfor.com/blog/cybersecurity/vietnam-cmc-group-ransomware-attack-anatomy-asian-cyber-shock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/crypto24","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://exchange.xforce.ibmcloud.com/threats/guid%3Afa7cb7e2ed554da0b7413eca362ed8f8","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/crypto24","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://j5o5y2feotmhvr7cbcp2j2ewayv5mn5zenl3joqwx67gtfchhezjznad.onion:5050/data","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nnvsec.online/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://j5o5y2feotmhvr7cbcp2j2ewayv5mn5zenl3joqwx67gtfchhezjznad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/satanlock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://42fybwnnv2t6fykirmgxpwvvfidgnfmegrz4lpi3vskivfid7z7kqyqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tzhwmgguyxrg6q3tu4q3gvopcjynrhw6ryx2bdl5ghisdkyunfua5xyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://satanlock2p4c3ad7gxmx3ur7wwdwlywebo2azv3vv5qlmjmole2zbyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2hxbnjzuymvdca4buxlyu4eolz4mbbxw2cnpibbb2od7z77y76di7cad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mgeegnexyhhn5dpqewihjy33qyhng3gy66h3fogiwefl5hljhtmfznad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://212.24.99.211","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mcafee","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/blacksnake-ransomware-another-chaos-variant","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.netskope.com/blog/netskope-threat-coverage-blacksnake-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blacksnake","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/frozen","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/zerolockersec","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ghfuviaplse6nbeowu7ghhid5hdowutbwbrv77aqgwco2b2ntgj3auad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nvrmre","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ioot5g6iwj26tcowu4646qyijf2sgeddggoxgch5r3oovkh6gfco3sqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/taronis","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/farattack","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mamona","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bdhjur3agrogoxvwobbzpptkxhyewnjrhzqj4ug2dyfhf3dopyvvurid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://185.158.113.114:5000/admin/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://185.158.113.114:5000/affiliate/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://owt3kwkxod2pvxlv3uljzskfhebhrhoedrh5gqrxyyd6rrco4frzj5ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/miliphen","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/skira","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mtgc3qvyedjnfu7cen2zsupdppi5ys5g2hm6xwujvoepw25p4dy6huid.onion/news.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/30382-deathgrip-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/deathgripransomware-removal/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/deathgrip-raas-small-time-threat-actors-aim-high-with-lockbit-yashma-builders","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/deathgrip-emergence-of-a-new-ransomware-as-a-service","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/deathgrip","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/thanos","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyclonis.com/remove-bidon-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/27412-bidon-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/bidonransomware-removal/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bidon","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/eruption","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://bazaar.abuse.ch/browse/tag/DarkyLock/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/24283-darky-lock-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/darky-lock/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/darkylock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/telegram","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/gazprom","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://elastio.com/detectable-ransomware/cerber-2021/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/cerber2021-ransomware-back-in-action/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-cerber-ransomware-targets-confluence-and-gitlab-servers/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cerberimposter","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/key","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/grinch","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vasalocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cymulate.com/threats/catb-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.vmray.com/catb-ransomware-a-new-threat-exploiting-dll-side-loading/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/ransomware-roundup-catb-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/decrypting-catb-ransomware-analyzing-their-latest-attack-methods/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/catb","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/60537/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/a/kasseika-ransomware.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-kasseika-ransomware-emerges-with-links-to-blackmatter-lockbit/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kasseika","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kryptina","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/weyhro","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://weyhro.hk","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://weyhro27ruifvuqkk3hxzcrtxv2lsalntxgkv6q2j3znkhdqudz54rqd.onion/leaks","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p7teg7yh2dwxg2tsbgnki3zrt5p7wgaegtfh4cobeqbhcq55nwt2m6yd.onion/files/?share=I1Ny5ax","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p7teg7yh2dwxg2tsbgnki3zrt5p7wgaegtfh4cobeqbhcq55nwt2m6yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/tuborg","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyberscoop.com/mandiant-sabbath-arcane-ransomware-rebrand/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.anvilogic.com/threat-reports/unc2190-arcane-and-sabbath","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/arcane","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/research/vanhelsing-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vanhelsing","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanhel[REDACTED].onion\\nhttp://vanhel[REDACTED].onion\\nhttp://vanhel[REDACTED].onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanhel[REDACTED].onion\\n\\thttp://vanhel[REDACTED].onion\\n\\thttp://vanhel[REDACTED].onion\\n\\thttp://vanhel[REDACTED].onion\\n\\n3","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.torproject.org/download/\\n2","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanhelq3jf5afpkwwlcfm32sdblpfkx2cfa4kxaeoabtnxjpu2qnt7id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanhel4wqo425m7rdjolykd22js3hkrvpwld6iyvpjslj63l5ocaqoqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanhelln5ly3sw63b5ke25gxvp5rr67wd7rgzezo4mhegm4qpsolbkqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanheltarnbfjhuvggbncniap56dscnzz5yf6yjmxqivqmb5r2gmllad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanhelcbxqt4tqie6fuevfng2bsdtxgc7xslo2yo7nitaacdfrlpxnqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanhelwmbf2bwzw7gmseg36qqm4ekc5uuhqbsew4eihzcahyq7sukzad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanhelsokskrlaacilyfmtuqqa5haikubsjaokw47f3pt3uoivh6cgad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanhelxjo52qr2ixcmtjayqqrcodkuh36n7uq7q7xj23ggotyr3y72yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanhelvuuo4k3xsiq626zkqvp6kobc2abry5wowxqysibmqs5yjh4uqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vanhelqmjstkvlhrjwzgjzpq422iku6wlggiz5y5r3rmfdeiaj3ljaid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mcrypt2019","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/offwhite","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.porthas.com/blog/b0-ransomware-decryption/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/b0","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bzsn5crutf7eiq5mlohn2n2lkaqcafp6tsr6g5b3y4rxbq4g32bg3uid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.scworld.com/news/medusalocker-ransomware-variant-paired-with-paid_memes-toolkit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/threat-actor-believed-to-be-spreading-new-medusalocker-variant-since-2022/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/babylockerkz","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/obsidian","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/hermes-ransomware-used-as-a-wiper-in-taiwan-bank-heist/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/blogs/threat-intelligence/hermes-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/18/b/hermes-ransomware.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/hermes","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mailto","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sundawn","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.securityweek.com/ransomware-attack-knocks-100-romanian-hospitals-offline/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://gurucul.com/blog/backmydata-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/backmydata/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/backmydata","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/ransomware-globe","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/10512-globe-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/globe-ransomware-gives-you-the-opportunity-to-customize-your-encryption/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/globe","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.superantispyware.com/blog/what-is-colossus-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.securityweek.com/colossus-ransomware-hits-automotive-company-us/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zerofox.com/intelligence/flash-report-colossus-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/colossus","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"colossus.support","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/27581-freeworld-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.darkreading.com/cyberattacks-data-breaches/mssql-databases-under-fire-from-freeworld-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.securonix.com/blog/securonix-threat-labs-security-advisory-threat-actors-target-mssql-servers-in-dbjammer-to-deliver-freeworld-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2023/09/threat-actors-targeting-microsoft-sql.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/freeworld-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/freeworld","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"FreeWorld-Contact.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/secp0","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://secp0-news.ws/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://secp0-support.cfd/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://secp0-support.net/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2a6w667vebiebciji7vm3vj43svegvozoqypttdgojzgdcbnfsu5wiid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bhn2xz5jer2xeibxjzhgfp7qclttnbvkkvd4hvlmjbnz66jxq7yzn6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://secponewsxgrlnirowclps2kllzaotaf5w2bsvktdnz4qhjr2jnwvvyd.onion/files/12b3429e1124122e/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://secp0-news.net/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://any.run/malware-trends/fargo","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/fargo-ransomware-targeting-ms-sql-servers/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/44987/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/fargo","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/elpaco-team-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://hivepro.com/wp-content/uploads/2024/12/TA2024453.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/elpaco-ransomware-a-mimic-variant/114635/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/elpaco","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/news/weekly-intelligence-report-07-feb-2025/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.isvworld.com/search/news/1543268-aptlock-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/aptlockransomware-removal/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/31862-aptlock-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/aptlock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sr3b2uzrzzubagq64savzjjarul6bacpk6onddobj72gqkdjgm5z4qyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"access.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/delta","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/rapture","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mario","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/19/h/dharma-ransomware-continues-to-target-servers-via-open-rdp-ports.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/alerts/aa23-259a","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/dharma-ransomware-switches-to-the-aes-256-encryption-algorithm/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/dharma","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/grep","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://grep3ql4yhlmpq5zy3en5bvenvfhrpzb6bgnkxeyse6basc7x4sqhgqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/wiki","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/zixer2","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybersecuritydive.com/news/veeam-cve-exploit-frag-ransomware/732670/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.com/170717/malware/veeam-backup-replication-flaw-frag-ransomware.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyjax.com/resources/blog/frag-explodes-onto-the-scene-new-dls-emerges-for-frag-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/frag","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://34o4m3f26ucyeddzpf53bksy76wd737nf2fytslovwd3viac3by5chad.onion/tada/posts/leaks?page=1","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://34o4m3f26ucyeddzpf53bksy76wd737nf2fytslovwd3viac3by5chad.onion/leaks/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://34o4m3f26ucyeddzpf53bksy76wd737nf2fytslovwd3viac3by5chad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xhvzsaxl3vbio6dg547envq5xgap3pwobtursdvwatdoxextv43kb7id.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/blackbit-ransomware-imitates-lockbit-demands-bitcoin/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/i/blackbit-ransomware-a-lockbit-imitation.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackbit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blackbittk6ux3mtrbh2qjpmrkygdmh3uqafj5h2dg2bt63jzh5xf3iad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mortalkombat","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.2-spyware.com/remove-cerbersyslock-ransomware.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cerbersyslock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/elcometa","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nightspire","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p3reixfwlpjtein4yta3kiwyijxdktypcipz6jjq4wgbyi73e3fsmeyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nspirep7orjq73k2x2fwh2mxgh74vm2now6cdbnnxjk2f5wn34bmdxad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion/datas.php","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion/server-info","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/oceans","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mountlocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/darkwave","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sm76tw7iliyprkyeywcac4s6fnqrkyujyezi3xdr4bkebz5edi2kh6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/muliaka","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://s2w.inc/en/resource/detail/871","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wblog/detailed-analysis-of-ailock-ransomware-1d3263beff15","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://gbhackers.com/ailock-ransomware-emerges-with-hybrid-encryption-tactics/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortra.com/blog/ailock-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ailock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eddo6w66t6t4kribwjbxvtehtsny4g6j2a5gj6pzivivcu5nywhegtqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wqse4qzvrtbg5o3evt2eexovcilxpvlsopwvpu7toimx64njqekzuqid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pptiuraybrwacfl5v2qmzknenqxwt5eojtbh5cxxejaq3oo4bidkv7id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ccpgp25zc37xccprbjr46iurz5c5awhqxltm6xn7nef7dxpsyegwncid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q37z64a4j7455p6zcdxfpqrrgctmd46vaz2uejsqgxbmrcjbd4w3fqid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://44ga7x7kicz2bbxaohdfw5iw6j7dgg4kyctwtf4kh6gsxifbah4jv4ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b26gczu5dbhaovnkp5c3ef3vdphqxj64z4nwzvfdabplbptgp56gsdyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://epnsv5xaxnrks5yliq5wlthbmdlidkjddon3rx5llftx4ueiwfzdx6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://to3odzfolkvhkj3jf5oo3qq5hvdycy5n5n6bi564yrxdgavnwv5znjqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qcncet2rpvs3t5lnvuzzth3vbro46snkylgyqx3igdnb5bv324nzojqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://igf7rlhjtvitxh72suhb55hqic67pvphbqikkrqqilzj3drhirglziyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://woed7o3il2jrxzczupntvhutc2ogs5otn6ekgoya6qo33qcuhomkhwad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://27kmvzlfn3dpb6s4zq3qknqpcbrk5qzhwmg5awhjmu3m2okgpd4pgrid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tsz2oqrfnyik3vtcx5rzubfuam3n5kapvkkagqr7yzxdxvdhehjxghqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fgx4uh7pzf4xr7k56opyfsy7qmg64xisiv5scgcadaddur7qiv6t3yyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dwwnfgp43qjp5cy7n3ab6g5ubdxk4jkma37oykt6loeet7cyadtty5qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tgyvw6pui3apxlezhiht5ubcmbm6fzn5klh2fi6qcqbvqhhfkyhnejad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mbqmgrf2kvabejqmoh4kl5tw5fko5pphzmmlbxhgjp5ar5ret7qpobad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tsz2oqrfnyik3vtcx5rzubfuam3n5kapvkkagqr7yzxdxvdhehjxghqd.onion/demanor.lst.zip","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s5v5hvtk3oyxg3m6afgxeuwlasqku3adeosv7kwwjfvhf22vqiwotrqd.onion/ardlaw.zip","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://27kmvzlfn3dpb6s4zq3qknqpcbrk5qzhwmg5awhjmu3m2okgpd4pgrid.onion/oozooree.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://woed7o3il2jrxzczupntvhutc2ogs5otn6ekgoya6qo33qcuhomkhwad.onion/goolooqu.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qcncet2rpvs3t5lnvuzzth3vbro46snkylgyqx3igdnb5bv324nzojqd.onion/tiohaedai.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://to3odzfolkvhkj3jf5oo3qq5hvdycy5n5n6bi564yrxdgavnwv5znjqd.onion/eishohzu.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://epnsv5xaxnrks5yliq5wlthbmdlidkjddon3rx5llftx4ueiwfzdx6ad.onion/iviilumu.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x7ghos27bltjtfombanecwgynfk4jw53ewkhzfnb5f27qmuquxwzhyad.onion/elo.lst.zip","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x7ghos27bltjtfombanecwgynfk4jw53ewkhzfnb5f27qmuquxwzhyad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b26gczu5dbhaovnkp5c3ef3vdphqxj64z4nwzvfdabplbptgp56gsdyd.onion/ohtohcho.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://44ga7x7kicz2bbxaohdfw5iw6j7dgg4kyctwtf4kh6gsxifbah4jv4ad.onion/piehixieru.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q37z64a4j7455p6zcdxfpqrrgctmd46vaz2uejsqgxbmrcjbd4w3fqid.onion/aephaaghoa.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ccpgp25zc37xccprbjr46iurz5c5awhqxltm6xn7nef7dxpsyegwncid.onion/fjuk.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pptiuraybrwacfl5v2qmzknenqxwt5eojtbh5cxxejaq3oo4bidkv7id.onion/lwp.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wqse4qzvrtbg5o3evt2eexovcilxpvlsopwvpu7toimx64njqekzuqid.onion/hspass.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eddo6w66t6t4kribwjbxvtehtsny4g6j2a5gj6pzivivcu5nywhegtqd.onion/pass.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ejqsesb5cgero35i7ujerpuslbokhuwl3dqgsrg44bzamamccf7fw3ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qvqoau7353xe7wm3z6fzxn33q63ck7cys56wsbx25c22fnxyu4fzhnyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dhnsppqjaaa22lsqxl2tfhji4ca43743kubltnodvsft3hkvai77p6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vnsggttwhcofyeh3nxoynxtg5mk5xl4cd7e3c4x62aqb2rj4rfjh3eqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jaawqs6wu56n2adj7qrjg25dhcux2nislvjouffpzldj23e4y72akoid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/buddyransome","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/phantom","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/paradise","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/zola","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyclonis.com/remove-crynox-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/31766-crynox-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://sensorstechforum.com/crynox-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/crynox","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"proton.me","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/proxima","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kuza","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/20/g/nefilim-ransomware-shifts-to-double-extortion.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/jsworm-ransomware-rebrands-to-nemty-with-new-encryption-routines/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/jsworm-nemty-rebrands-to-avoid-detection/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/jsworm","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vandev","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/superblack","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://heimdalsecurity.com/blog/astralocker-ransomware-goes-offline-and-makes-decryptors-available/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.infosecinstitute.com/resources/malware-analysis/astralocker-releases-the-ransomware-decryptors/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.emsisoft.com/en/ransomware-decryption/astralocker/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.reversinglabs.com/blog/smash-and-grab-astralocker-2-pushes-ransomware-direct-from-office-docs","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/astralocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyberpress.org/arkana-ransomware-group-alleges-breach/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityweek.com/new-ransomware-group-claims-attack-on-us-telecom-firm-wideopenwest/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/arkana-security","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://vectra.ai/modern-attack/threat-actors/arkana-security","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyjax.com/resources/blog/who-broke-the-internet-arkana-security-names-us-broadband-provider-on-new-dls/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/arkana","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ransomwvbabemdnwl7lzgeenyfmmhskaed6jcruwhkvapsia76vttzyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/paradise2","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cylance","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/thunder","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/quoter","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/phalcon","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/j","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://w4d5aqmdxkcsc2xwcz7w7jo6wdmvmakgy3y6mfmdtzmyvxe77cjkfbad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.semperis.com/blog/hospital-cyberattacks-highlight-active-directory-security-importance","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/32577-crazyhunter-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/crazyhunter-a-new-prince-ransomware-variant","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threats.wiz.io/all-incidents/crazyhunter-ransomware-group-targets-critical-sectors-in-taiwan","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://darkreading.com/threat-intelligence/ransomware-gang-crazyhunter-critical-taiwanese-orgs","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labs.withsecure.com/publications/crazyhunter-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/d/crazyhunter-campaign.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/crazyhunter","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7i6sfmfvmqfaabjksckwrttu3nsbopl3xev2vbxbkghsivs5lqp4yeqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/faust-ransomware-a-phobos-family-variant","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.truesec.com/hub/blog/a-case-of-the-faust-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-060a","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/faust","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/polyvice","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/spring","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-april-29th-2022-new-operations-emerge/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hivepro.com/wp-content/uploads/2022/05/New-Ransomware-Group-Axxes-is-on-the-rise_TA2022106.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cloudsek.com/threatintelligence/axxes-ransomware-group-appears-to-be-the-rebranded-version-of-midas-group","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/axxes","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ymnbqd5gmtxc2wepkesq2ktr5qf4uga6wwrsbtktq7n5uvhqmbyaq4qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/ransom.win32.arcrypter.a","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/2022/11/arcrypter-ransomware-expands-its-operations-from-latin-america-to-the-world","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/arcrypter","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/xollam","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/proton","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/fakersa","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/silent","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hhs.gov/sites/default/files/trinity-ransomware-threat-actor-profile.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/2023lock-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyble.com/blog/in-the-shadow-of-venus-trinity-ransomwares-covert-ties/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/2023lock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/2023lock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ralord","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://novazzitmugtbjwuttc5hhsemkmvwh3iyt27oeeunu5mkw62qpfeykid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ralordt7gywtkkkkq2suldao6mpibsb7cpjvdfezpzwgltyj2laiuuid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ralord3htj7v2dkavss2hjzviviwgsf4anfdnihn5qcjl6eb5if3cuqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ralordqe33mpufkpsr6zkdatktlu3t2uei4ught3sitxgtzfmqmbsuyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/xelera","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/core-ransomware-a-new-makop-variant","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/core","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/targetcompany","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/enciphered","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mimic","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lokilocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/zeoticus2","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/gangbang","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.resecurity.com/blog/article/cyber-threats-against-energy-sector-surge-global-tensions-mount","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/antibrok3rs","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://antibrok3rs.anonblogs.net/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://antibrok3rs.bearblog.dev/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://antibrok3rs.ir/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/blackberserkransomware-removal/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/27387-black-berserk-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackberserk","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"1.jpg.Black","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/fusion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/analysis-reports/ar22-187a","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2023/06/14/anubis-banking-trojan-targets-multiple-countries","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/19/j/anubis-malware-family-returns-with-new-variants.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/anubis-android-banking-trojan-analysis","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/anubis-banking-trojan-targets-android-users","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/anubis","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://anubisyfkh5rixydjpoo3jqucauajz2juybrbtuglcppjj2y3eg3y6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mimic-guram","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ox","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oxthiefsvzp3qifmkrpwcllwscyu7jvmdxmd2coz2rxpem6ohut6x5qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ghost","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-050a","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/encrypthub","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/linkc","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xs4psqhvekjle3qwyiav7dzccuo4ylw2eylvd3peuqrld74kzzjzhcyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iywqjjaf2zioehzzauys3sktbcdmuzm2fsjkqsblnm7dt6axjfpoxwid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/run","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lmsxwm6hrd5osuefl6uia3wwnxxnlav2ce4d4nkjvuonb3426pwdmcad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vnoa7t4c3wr6himmurl4it3ctvgmm6munjknuztqlu4nbz34367vokyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cvbu44wmzzslykypqkk3utdvrrdenrf5knvyrshhcvosfxa2un4tqrid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oow7rehrxlzpy6vh3hezl2khstkpa6s7wx3iit74tr6xbjibupld5iad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nidzkoszg57upoq7wcalm2xxeh4i6uumh36axsnqnj3i7lep5uhkehyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rnsmwareartse3m4hjsumjf222pnka6gad26cqxqmbjvevhbnym5p6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/darkhav0c","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://afiocd14efgh5hu8ijkl9012m.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/robbing","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fonektibq4fbgergrorw43yawhz3qslkonrwc74j2h2kftcidmf6g6id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/tooda","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tooda.sh","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/w3crypto","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fdevb3qh24ak7wujqsf7co4z6fstm5qxvnkkgs62fayztjfjjtqqgsad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"late.lol","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/late.lol","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://late.lol","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/57154/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/d/kuiper-ransomware-targets-multiple-platforms.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kuiper","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/yashma","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/new-threat-actor-using-yashma-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"nguyenvietphat.nt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"md5","category":"Payload delivery","value":"CF2BD8EED988807E19AAB4F3DCB27DC4","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"qq.encrypt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"qq.decrypt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"fastmsg.info","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"nQq.encrypt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"nQq.decrypt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"SHINRA-Recovery.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"iliken.com","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/chaos-ransomware-hits-optima-tax-relief-leaks-69gb-data/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.infosecurity-magazine.com/news/chaos-ransomware-wave-attacks/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyble.com/blog/top-ransomware-groups-june-2025-qilin-top-spot-","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/chaos-ransomware-group-surfaces-with-aggressive-tactics","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/chaos","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://myz2p6mzvbawxggfmakgwshq3ohfk37zmgwjbft7ssggbf2tokonecad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qf4p6ul3g7wyvynkxawlu7ganvgbk44myl35jqfa3aroass33dbvmdyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd.onion/api/post/list","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s2godak5cr4bflmcmiqjgow2b7clgs7szgf4h3ofqn7lyh6mdpvei5yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://een55qvybeygshxbblvfevk6uzcs6lhpj6num7ymbpw7z6cehozszlad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bna6mhximutqknymisjbp277swmhf7gocambh6y62qmdtup34unjs7yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cdgi6zjox6zr5epk7k5rg673qduxy7dlkk7ws3n4vusspr5bmhx24aqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qf4p6ul3g7wyvynkxawlu7ganvgbk44myl35jqfa3aroass33dbvmdyd.onion/goosehead","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2yxf2ald2c67twt4663piypum2fu6yt4su453naxsdiilpd4m7pgu6qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://httj32vkww42kq3kjbsbuuv2izalkvswuyf5hepdodakrjq42ploe6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/27691-magaskosh-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/images/stories/screenshots202309/magaskosh-ransomware-ransom-note.jpg","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"WWW.BITCOIN.COM","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"site.You","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"buy.bitcoin.com","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"666.accidenthappy","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/kraken-cryptor-distributed-infected-installer/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/kraken-ransomware-distributed-via-malware-infected-installers/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/kraken-cryptor-ransomware-as-a-service/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kraken","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2teh35rkn63fvigugpqroctxol2yfn745k57jmk23d42fwuujpfpnpid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://74fwiwaeqvtuf6uddankq5pzq637zpput3qxzq36fcxkhltq5plcxdqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2lqlecl4q4hkrb3rl5p27b4hptnz7lqaaux5uca3g6pylpqlhqyafvad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ebcbyeua65jtsnbsqsjahurkfj6yndhcwnnfxvwwg4yegb5h7fxjc5ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2puszzzqvfv2eco7idbt2fznn2iwlsw27ns5xq3ad257mui2keakacqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kxntyq6yyfomjoqqya6px7pgc6mbfcbaejryxhiwpntcnlr7hopqj3yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yjsknaecbmhvrsagrcwqelpojnbcllt6v27vxebxhnotd3wu67onc5qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fk5c3gxraixjl3p7zacchn4jvew35vxo5xpedqf2qtlynsheqymampid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ab2v4xzffr24pdmswqzrbg45pwsget4h7eyd4swxewuqbxmlwcju7lad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3cxvgnwvbzzfm2abzxidi76uib53vsjudsavgzm4viaj26drkcdl6wad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cjhuttkivmtrf6itrmyoqnxw55isy3dh6u5ifc3fnhajp7lwn5deflid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wkqvktnmr2slazl76opbkdli4ia6gznhxln2z5wny54hf4kzjwgqvxyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ko3lwb6glib74kmol5ov5cphabwqmifb5lnjw4bvj75jpfigrfbn7gid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vmnnrqf3gs3kl2kfnxatughwmnlyq6qxzyx24ylyh2w36vw3gqwqjpqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mvr2bidstp52pkaybzccjueux4hqbkukuqiss6vhn72qwqruzc7awsid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xbupelqsy7lubogl6kdtdqguxoleehbxnuuqm2dos6bbmdwablpqckad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t3uouzfvsaqurb2rzoe2mkpetp54d7lgtl45ply34v5lugsnzysmkhid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zq3k4odlfpbzc5y4sxqgolivelxepceaakru3xqo4ll2czmvvtek2ryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://krakenccj3wr23452a4ibkbkuph4d6soyx2xgjoogtuamc3m7u7wemad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/malphas","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://[redacted].onion.chat\\nIf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.torproject.org/\\nIf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.intellinews.com/hacker-targets-indonesian-banks-with-ransomware-threats-366102/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.rapid7.com/blog/post/2025/04/02/a-rebirth-of-a-cursed-existence-the-babuk-locker-2-0/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.socradar.io/dark-web-profile-babuk-babuk2/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/babuk2-bjorka-the-evolution-of-ransomware-for-data-commoditization/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bjorka","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://netleaks.net/contact/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3lce6cov7sj7vovrr3cbanqoolhgfgqqcvjrtlzlqnex7esdz33mdoqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://netleaks.net/databases/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://netleaks.net/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://bjork.ai/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wki2kiikvycnowcygyz7p4svefhgwcu57ae7brd5waitbsgoi6yrfvid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ymir","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cs.beta.fletch.ai/p/d0glun","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://bazaar.abuse.ch/browse/signature/D0glun/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/31986-d0glun-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/d0glun","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/d0glun","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://33333333h45xwqlf3s3eu4bkd6y6bjswva75ys7j6satex5ctf4pyfad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hxxp://33333333h45xwqlf3s3eu4bkd6y6bjswva75ys7j6satex5ctf4pyfad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Desktopcxl.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sugar","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sugarpanel.space/advauth_ffma","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://chat5sqrnzqewampznybomgn4hf2m53tybkarxk4sfaktwt7oqpkcvyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/gd","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/darkrypt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://darkrypt.io","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/babuk-bjorka","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bxwu33iefqfc3rxigynn3ghvq4gdw3gxgxna5m4aa3o4vscdeeqhiqad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://57mphyfkxoj5lph2unswd23akewz3jtj7mb6wignwmyto32ghp2visid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gtmx56k4hutn3ikv.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7dikawx73goypgfi4zyo5fcajxwb7agemmiwqax3p54aey4dwobcvcyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/a1project","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"info-hunt.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"tr.heisler","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"skiff.com","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"m9SRob-README.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"README-WANING.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/deadbydawn","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/morpheus","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tinextacyber.com/wp-content/uploads/2025/06/Dissecting-a-Python-Ransomware-distributed-through-GitHub-repositories-1.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/balletspistol","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/providence","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/satancd","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mzg4llxp4kaf4qq5s4hlentf45rjda3mzev3j6hlh2endarc2k6z6oyd.onion/satancd-room","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityweek.com/are-threat-groups-belsen-and-zerosevengroup-related/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://kela.com/blog/could-the-belsen-group-be-associated-with-zerosevengroup/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://watchguard.com/wgrd-security-hub/ransomware-tracker/belsen-group","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://rapid7.com/blog/post/2025/01/16/etr-fortinet-firewalls-hit-with-new-zero-day-attack-older-data-leak","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-data-posting","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://outpost24.com/blog/belsen-group-threat-group/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/belsen","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://belsenacdodoy3nsmmyjfmtgjen6ipaqkti7dm2q57vabjx2vzq6tnad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/cs-137","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cs-137","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ABCDEF-README.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.anvilogic.com/threat-reports/iranian-cyber-groups-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.helpnetsecurity.com/2024/08/28/pioneer-kitten-iranian-hackers-partnering-with-ransomware-affiliates/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-241a","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/br0k3r","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://brok3r7bhcblynwpoymgarr6zwcy4ttfbhkhcmotz4lw2gcsuojgaeqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lockbit4","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitapiahy43zttdhslabjvx4q6k24xx7r33qtcvwqehmnnqxy3yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitapo3wkqddx2ka7t45hejurybzzjpos4cpeliudgv35kkizrid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitapp24bvbi43n3qmtfcasf2veaeagjxatgbwtxnsh5w32mljad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitapyum2wks2lbcnrovcgxj7ne3ua7hhcmshh3s3ajtpookohqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitapyx2kr5b7ma7qn6ziwqgbrij2czhcbojuxmgnwpkgv2yx2yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/funksec","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://funk45xqgrkrtej4743evcgv65oi3w4shwvjx3cvrdtqwul7gzkxuxqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://funksec7vgdojepkipvhfpul3bvsxzyxn66ogp7q4pptvujxtpyjttad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://funksecsekgasgjqlzzkmcnutrrrafavpszijoilbd6z3dkbzvqu43id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://funksec53xh7j5t6ysgwnaidj5vkh3aqajanplix533kwxdz3qrwugid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://funksec.top/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://funkyiazgfsrxrib6rnxbhkgfqi7isisfbqnwk2ycf7tpgfhtevlamad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://funk4ph7igelwpgadmus4n4moyhh22cib723hllneen7g2qkklml4sqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://funkiydk7c6j3vvck5zk2giml2u746fa5irwalw2kjem6tvofji7rwid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://funkxxkovrk7ctnggbjnthdajav4ggex53k6m2x3esjwlxrkb3qiztid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://funknqn44slwmgwgnewne6bintbooauwkaupik4yrlgtycew3ergraid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ykqjcrptcai76ru5u7jhvspkeizfsvpgovton4jmreawj4zdwe4qnlid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pke2vht5jdeninupk7i2thcfvxegsue6oraswpka35breuj7xxz2erid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7ixfdvqb4eaju5lzj4gg76kwlrxg4ugqpuog5oqkkmgfyn33h527oyyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/25442-dataf-locker-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/dataf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pg3n5bteiatjf6rt7oa4xhzo4sj736rifjmk4gtowxjljuwwdv6mccyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/schoolboys","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pnanlicgxkku2aonwsg2fwid3maycsso7joqnzp66wkfemzdk7ahsdid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/weaxor","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://weaxorpemwzoxg5cdvvfd77p3qczkxqii37ww4foo2n4jcft3mytbpyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/crypt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lhwhi2kmewfas6tk47psgvqyluz5iwgdll5g6jyknq6rvxxg6soqooqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"md5","category":"Payload delivery","value":"54EFAC23D7B524D56BEDBCE887E11849","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/toxic","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cwybfdfhstmmoaxmnz4os7qxdcomnp5qleslqb55vt24vh3kmyl6jmad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/leakeddata","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ep6pheij.com/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://business-data-leaks.com","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bluebox","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zu3wfrmrkl4ltqqnpt3owp3cwa33rqwod4gpe3ttb5o4vf2is2gzm6qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PaduckLee/status/1866748855053848886","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/pcrisk/status/1866752818939564347","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/news/weekly-intelligence-report-20-dec-2024/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyclonis.com/remove-help_restoremydata-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/31727-help-restoremydata-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/help_restoremydata","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gzdn6yjvmrujiqzz4wwuykrta7jtkv2fupb7aozwx7yxnxhj737v2qad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"md5","category":"Payload delivery","value":"b1e8b6c2b65d51893bbe61d46cbdb4af","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"restoremydata.pw","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/krypt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://decryptrrx2fojgfcof3aesrklj5obq7nmizyokq7ohzqxtwfcvtmwad.onion/chat","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://decryptjhpol6zezc72xb2mofmi6o7xlvacnrpbuiczz2sz5ljurg4id.onion/chat","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.eset.com/afr/about/newsroom/press-releases-afr/company/ctb-locker-ransomware-striking-in-europe-and-latin-america10/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/advanced-threat-research/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://heimdalsecurity.com/blog/ctb-locker-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.az/en/articles/ctb-locker-and-critroni-ransomware-information-guide-and-faq","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ctblocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tmc2ybfqzgkaeilm.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ohmva4gbywokzqso.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/luckbit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://luckbit53sdne5yd5vdekadhwnbzjyqlbjkc4g33hs6faphfkvivaeid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-gwisin-ransomware-targets-south-korean-healthcare-manufacturing/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.securityweek.com/gwisin-ransomware-attacks-target-korean-healthcare-firms/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/45115/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/gwisin","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gwisin4yznpdtzq424i3la6oqy5evublod4zbhddzuxcnr34kgfokwad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/tommyleaks","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xir242nunyist4d7ksfnfmhnjx4gvqbuzo7eax4o3abqjesbxjshh4qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/threat-analysis-beast-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyberint.com/blog/research/the-nature-of-the-beast-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/beast","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://brt2oxyj3pj5lwdyztcnhjuv3ufqisaw4osup4zzzfmvchxm4vya56id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iipl7n3txrysjnclu24deu2pbrkse5y5oiwqyvs6mjdxlisilqpssiad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gutatzqnumcmlfhq3txzz47gkhf7opozw2potunt2d7d2vne3apfuqqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sxsjteplangjoknelabsjdw6lqdq2g7ak5fkmlbhmj7sztrk2ono24yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://isnunjmt7nvxwe2q2xvynntrqfjga7qpywiwtol4rmyoycwrccjezcad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mq2yz7rgz6twml5tcmno23rlgp5v6gzqlxucalkgu2ssghsswz75xkyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://inqqzxkjfronl3fb5uazmveq4txxatykoadg4gtga3euzi2ffobsyxqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xzxvf4x2hxivr3q2ffzultcqiun5flwfp6fyoqtvbx3p4an4smefmjqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://beast6azu4f7fxjakiayhnssybibsgjnmy77a6duufqw5afjzfjhzuqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/invaderx","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/safepay","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://duslj3vgel72rilqlvvlo2qw6jybmvbcdmcm4n63kyivveeif6u2xrad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"safepay.ton","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oxly5vxvvhi5fv5vsvj3kvlqeprbijitycqisylaxzf324bn7e4qr2ad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dgcg5ncjab6scb7fnk7gx5php4lbpxjy2jjnu3apnkxyippqf6yhw3ad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wmgres25e43uwgebctgofo2qe23kf5vqevixiulubpovdglyizfugryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://crmbcdcdwoex6dzajbicgzrsuw2t76pomajwdpi2mb2babbfdgcc6xid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fcde4o7iquaspdbo5yetwqn3rfueet2zfy3wjosrc5dznyccwbiz6oyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iieavvi4wtiuijas3zw4w54a5n2srnccm2fcb3jcrvbb7ap5tfphw6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qkzxzeabulbbaevqkoy2ew4nukakbi4etnnkcyo3avhwu7ih7cql4gyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/termite","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://y4bdg56uaznmbptf7dgp5xn3sjyyh4qodqjrsbziqatnyapmiqqctgid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wc4mc3oupskb2c3q4ba6tlf6tq5mdfoevsgfcotbnbsr4tbqoaomftid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4xklh64cl2lymm6n5xywinfq4wlchgugvv5a77pm3pta34svnohwl2id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pqw3hepvky2pgyyv6dupvx47cm2gxzwop6dfei3i67dj76tdj6alplqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyjax.com/resources/blog/new-argonauts-extortion-group-emerges/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/argonauts-group","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/argonauts","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4xi5jklauqmjfkwxhs2a6q2d26v2465zfnccacqpz75exv2kzu5aeiad.onion:18080/chat/startchat","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jbmk7h6xlkedn2gg5yi76zca6y3jgdlp5wchlsrd7735tlnrmmvqe5ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyjax.com/resources/blog/contfraversy-in-ransomland-tor-based-site-emerges-for-new-french-speaking-raas-operation-contfr/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/contfr","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zprxx7sfc26rufggreanowmme5qqouqegr2efnko6erycquwvpq5egid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kairos","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cvfgzmrcam5efoqx4lkdejv5nb6icocsla2tn2dzw4b7wlyf4luz7fyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nerqnacjmdy3obvevyol7qhazkwkv57dwqvye5v46k5bcujtfa6sduad.onion/services/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://khom5v7vmc2nomkze64dsbyenn3wlxkewg6dbsvt5sujl2rmrtfy4oid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://whodusp3s2z6rnenxhv7scc2w5fzsse5cmijll2vl7fo6ezk45zssjqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vpj6dzqat4n4hwb625a4qjpuzd3bzrjgw5zlwa3l6uiazdwjcib3y6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pj6dzqat4n4hwb625a4qjpuzd3bzrjgw5zlwa3l6uiazdwjcib3y6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2msn5sp3af3iy2ozj4235ccsb7pnpp4tkzyxdpzutyc2sxb3mujicfyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://esmhbczpio7umfnxog6bk23q3nok5fjuik2dttegvezqngg2oqklo7yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://usqa5b33yyc2u6kqf5au64cgj64acl2umtll76qutlmu7fckw6kh6wqd.onion/files/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dngqgtcqcz5hgjvk4encs4vfyzucx3gtmov5a4eltvovux4nvazbx6ad.onion/files/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dwgxeoaqykd3zdkhol5xpgsqabp4lys4ea7qpl3f2b75b2sdsex644id.onion/files/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/ransomware-sheboygan-breach-notice","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/chort","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyjax.com/resources/blog/the-devil-and-the-termite-data-leak-sites-emerge-for-chort-and-termite-extortion-groups/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/chort","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/killsec3","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xo4o2o2ezgydykywn6zkyqx7toio6z5rzvmjyakgtgkk22vv7223jmqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ks5424y3wpr5zlug5c7i6svvxweinhbdcqcfnptkfcutrncfazzgz5id.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.infostealers.com/article/schneider-electric-hacked-and-blackmailed-due-to-lumma-infostealer-infection/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityboulevard.com/2024/11/schneider-electric-hellcat-richixbw/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/schneider-electric-confirms-dev-platform-breach-after-hacker-steals-data/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/hellcat","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hcatxn4ppkgmakaatrq6bsbhqk5ouhviygyx57gljjt5iseul5nvpayd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hellcat.rw","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r7i4vprxr2vznmhnnxj36264ofwx6extopdz535f5v357nqacifymbad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hellcakbszllztlyqbjzwcbdhfrodx55wq77kmftp4bhnhsnn5r3odad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/playboy","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ovcbyl77wplz67mdcilq6yq67eg56milg3xjehoiklbxrs4mondbklyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vlofmq2u3f5amxmnblvxaghy73aedwta74fyceywr6eeguw3cn6h6uad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/interlock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://stqeg2wjdbt55cb2iwppgvxw4zzjht65ebh5o5jxg6j4d5cojh6ofayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dpzt5br7627qhzh2uumvgawf22nwdc2bqxzwwmxo44qsl6k4bqylgcyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ujsgp44cddhfqhd332kbhe5g25ydsffdws7znd2kzub57qje6puxtaad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://aclcin5dix2zxnravkhxmdn65z72s6fuz7kvfunvvzbk2vhcusbc4iqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qd64buovx475ebnhgzfxkrw6acdjyh6xvcjrzs6dolm6vyrfrugjeeid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cw3vtldn5uyvnxsqxyw4yp26di2stbjtaefdamogxj6shll5qhywhayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jmpskyo5updruqhmzonlkgwylzzkjm6vc3275fqwvskm5ky4rsdrwkad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b52ol5cbixgaqqfk5omdh7lol6spbtjujk7wmeqvqn6hqgxgg57hbayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6cc3dxzg7x6cdev6pqhguslywzwy736fqd5cvuofpvkbnixcnt6vv3id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e7uwqmk5zxn7nbi2nidna4zxq5gbzrr3dlijo52gqawstm4uo2ry5qyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7y5shgihgmnmdw2w775ql4ehjou7ohcvodpqftvv7njbw7gquzzgypad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c2aekaij2khpuwifyeozvopddroh6odjnpu76i7vofb3reav6cqnyead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://moyaddrnerilo5hij4ipmawoueewraqqvohpxjhqa6pxc4xrinqvjtad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bmec5qflyyin4jj4zd4mjsvad7jmnba7bogku47bdzipyn2ixbc6qbqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2aeo5xsw4bpus2k7nkbb3hbcq6omha55nf6b7t4ee2e72rawl7zs6tyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lt3zyc6nxy5lstx4ug3h6p5nisme2pizl2trdrfgvjjfu3qiebie67id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jkuznpm776w65vltha2khrr46rogu7a35ervkatn53ia46ao6bnsttid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3co4y4cmh7c2wxuo5q3df3pzstqe3p4d6dbgiku6ulbsvjjqvtnrmpad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ccnneb7ydlbepaxzeqpztmtu74lklmwhcayo3wf4wlgexz7hfkmdplqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3xv4xxg2ljqvj3wcyzogktfmdusvusqdkapi476k3prt2q7basoejjid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4lippfsmsdhcv5z7w57gpimjaxbbrvd6rlsebaxn44mwwd7ck2vik3yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q5st6sooi4b6puqs7bahmqmep3ct4o3tei5eqwoo7sos46gqzqmdrmqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zouuiplz37jxpu75gjdh73rlrgfsspjmq6s5366r3lw3s2re64wlaiyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://adx22qbq6sqqtxhhkan2ohzvf7xzrqhqxmgqxnrr2qgzdmntmw2turqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3iw4b5sjfvttxp4m23vouzirdjfcnteztz6louulc7qzzzmxdevlarad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qh3dfeepsedjcointe2p3wmfrm7rvmpkc5cske726r5hzwm7g2daxzad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6dzghkscfds7uege2auedn7chtni7c3op6mlwfxeufzph7yebudeyxqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://efs3fkrjyvqsk7nugzteelo5i5jxoch5ziqhf37dzmmlmzzlymhawmid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3cpc3v57l7rstjtaelxgnlrzsolz7pd6ltsygjo2tjuonxteyaba2pid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ex55if4jgsdyi6do4gtyzpishq2tvwatjrhoclqcihxcsipam3uxrryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k6aw4if6phmqcdp5wzfdjfb3plmybzpkcssmgvv5nltv23tndvh4ewid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pcixe2pw5ho6qpkjwbrsscvdcpzfj7vt3stvyde5ii5wdlqgvtyr4vad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://awlcpawkphkrrhg6jhwoz5nnrhzz5kfwq2tuzmteyrosgfcpbkisarqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ixybueqla5otlp5qfud5bcri2qoyxxhujwtrae5dkxnuo2eof3oliiyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nh2kwgilfzi5mngiiqtcuoueh2oy4dkjq5cnfnjymueoj654fi7qtpid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pal3f65j4qj7b2hz2mlmimu4vhl4wz7sfdlvp3g2ry3qwk5nc6pbakid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eeguyk3ypl4afd4hqjg6hsb2wq2lg6wdesdbmdglrmnpx3qhnxuacbad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ihbpu7nworzao2klqeeahnz7wcuavltny3p2cmfkhe5tko3vl3zcowyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2tlkuy2qn7bfxyvbfpxqaqveoezctbrnk6yvbvin6dueiuk4rdoosyqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3ssy6kepkwajapmra262il4tnufgbujf2boz7odgigc3e46dzdqd6wad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hz7krqig75lgdzl7rtxynw26m3vornjl24ikeyqb5vagbae2iectorqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hu5zd7ek6glyoke5kfc4mvt6s3cmia6ebtqptumvbogzdo2vrn5e7bid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x2ol75zago3z2nrp7lnmbcwoq3okiexuwi456oe6jqurbprg6lljz3yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pgjf3dfkamnprahggbw4yojyb7sot3no2glnbfwyzbzqbnaislpv52yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://efgmr2vxwynrn7vlemidwf4ffwl4vljsb4eusaz3bplwk3apthpkpsad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c7bgta4watnqu64jnfgp4tzvhfhxgwveqnes65q3mcu4f34xvn7rumad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://f53mekzwvscxejfqxtikrzcmqnd3bt5i4d7odvh62sir7eqhdwwjntad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fbvrolfvadyhigunc5hfw5hextwqn4lvq7d5ieeivcizsxh3avn6dryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x6obl6pfmqsasvwj72hr22s2mpsdaklwkoa46zk3h7kbkcznu6whdmad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3y5p4cq7bke5exre4smsgueqzfwdy7u4z3rp7o3dgxm27lhsx6vqraid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://24nmjyf6g5otaydjtintzmqv3qme3fnrt62ui2anqdz2hmxnwps4e2ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qfxx5gxyh53a32itguxez6dqcsm3vkrron3nmxhzkn3g64qld5lijoyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mpyeixjqjufjki2qg7dutvxk6tjjzv2jf7qc63bljzfqrtbjcdktziqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vhs6omcvvqdtmgae5cvpy4jfxfrw2l4b7e64j7fn7xeaqeppzab67oad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zsjvoqymwx5gdwntsrrk3pvnkfyoxy3knhoxitpdaobxznwc5iwcj4id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gobj3ph5sj332iithgescrsejiszhaey5l4ffwnou4nwanbcf37phdqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://f4fjja74gn766x5fwxqepl4aa7wyzuu3tj6fllt6oy6j5e27zxwskeid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6rv6jkdw762q7md7ryqi2ooqmv54ajlnevxl4ozgdvo7p6e2msndyxid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wp5yyng6znkcsijil5w4bug7b6uww573ut3czz3amjpfdusnuu4u5kad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pzbd27cw7pkctovnmfaoeldjf32bc63mwqwhcxcftkqntest2bkkuaid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://glsvddrnd4qu56uhx65mrepgaoer6vtfr6q6qgsbpnml3b3fm2h7lcid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hhzt3me6rtxg5rwjbikojbxioosmiprsjrd25ovjhxirx4ocjdwuoqad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d55ahmrs2mbfcmframropdz4epz3is77ex2fbkbowhrqtxv7knunkxqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://viqh6qmehdkpn7jrfhthyejxtg3gd5hg4bch7sjetvkdaipeu3k6anad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ycgykop5f4te6yaptg57ze75kgnqo6u2e3yyeo3hkjgjxakjx2g5ksqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vecdwhichsjnv3x7t5b4o2hk23iwjurmcp2wrwd25jp3smvsth6e6nid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u2q76zahlrpgvktr3i2j6o2emzcre67et2kvz43kj2gbrhokc2othqyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5s2rv76limdt3eelmoh2vw6xovckjl563tjdifplvyxezdchcyn5xxyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sogw6fz6swsg42esmor63wj3iijpmoydt7sizwgzf2k6na6nglqt52ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://si5km7k55oggbea5xwls3bbypmsmuaamr3ejttmjnodcb3v4r766uzid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://siveyggnpoei2ehkmov6jri265tlaeyxfvlqnwrsgawgwmia44pmvcqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sv3tk3wcdkwednk5rxpz5ejxe4n2cvwx62rct66qjaukkpmpuovgwhid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cavpp4bldfjrk42bb3ter532fnfp3qjtnizn7xh62b3j3zat6jmuluqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zvcj6cc6qs3zxk25uq4wq22cxu7gwu5zsevn7jdizinoomem34vmvbid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u4d4ep4azlkdl3yexoe3dqdod4be3coupi6ksvdjhvisyx5imeec2nqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://h3am4jted6s4r7ksbpdhlh7576oyfqrg5vz6ekgjqxt23gbnnwqj3uid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2pkcf4khxmekivwcdaciw745cgwjzvmsubv5itijvwlgi6koesvsimyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xkx3mnwnnq7pxv3n7aj73ks3ktsrd2cbizkdakh4kcwz4um3cqgb7lad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ojzzeir4smqznsfsrg6xu5vcpsx4z2ue7yfgk7zf3tiqe3cp65mxe7yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://of5rslzmymbsdny4iyq23xp476s5i4wgxnq3dkasq4ttorpk4isf4bqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zgqemwdpqhfcykdanocr3ietnribz66mvot7xjbjc3flz7x577los4yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bb2cul7lhepsndibwkjn2ngabetiwtisx3ctcrdq5hpr54oqu66vjeqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://77tolkryntdehobn6ewnykd3cdbd5vkaf7v4mbycwnlykxxv6holl4id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4uc4rp7p6u4qsizcjpiyif4r5jxt54rejvs2qcljtnqfogiovtpfdpyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kjmofzzu4mhhuprggcdfex2zdgzwrtkn6d4ead7zgfh36vjrm56zskad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vnka63n2nkyrsiigq5mvvvum6ch6czbb4liumk2gvicw5pts3a2ffwyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zwvr7nt32hari3532hmqp6eh65ajiytpqjn6iyfby3relsnebdhurcyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pqb54aeitnoiikcsourdmnpawuk55pa7w3a37dyyii2yrqh2nrx6qfid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mdwmuf62db2xmuwsfdfsu54dek5amtuig74rvhvgyysh3tbjocq72pqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://v64ygsm7lhc6atz5tbm2xubb5qxzt22abdkceanirbavjqvkximxbeyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nfx5jpjpyzshisp2kerg23h5vyckzca7nt7psfbp7oo5jlfbbbqthtad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xg6f26wud5ah7dirviynwjd2r6ue6d2qgxur6lhva4heh4od26cnqmid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tb7u2kklhck3j4wlf7d32p5s7dbiear34rew4dpebljyl3xomkce4yyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r6bldqhpune45yj6eeafxmrhszjzgijtoxgw256zpe44tqnj5popbaqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qj7qf42blj4a26uf5irazkxbivtutvg4vgkd4zbzbtu4nkipwkdtcsid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jqtid6srueyxf6vwllcjdqip34usp2pulacs32wdo3moayl7r7mexjid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rz7tnory6tdtd6jtyav7giryrvitrzryt36qjpb3fznoy6qbo44i3yqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://socqxduah5lbzgyuhg2qn5nikufg2taerdjzxx3scwxbng2haw4nyiid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c2ru4ewkanyqud25xp3i4jctkw3pdmo4kosceyzwzwx6dfkj43oqq6id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ff3sx2vy5bpyiso756gndde6bt7i2diqzlwz5augagvkyykevy4326qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a6lkcqjlxnlnik2h2dy747mnhz6vlnpzwdgy3k64zmbhu7h4l5xdq6yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4e44wmx75wmu4s4w362udyi62shlwf4i3svoqyarnnwcnnbs5x45h4yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dnwvgf7jzohu4exrokw4wphxtd77wueiswgvtgzhqihvituzzjw4coyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://smfqmccqa5go2vm4ern426rcc2med7einerpt5unpv5zr222fwmz6jid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5nfm2urc2cwnr6ydie2airqozhggno3dagswnndb4efh4d4w7adapcid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2yhjemwks5pkrev5mzwo6cgfqvz2xnrvka2nxursjadn26p3o2k64ryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yzyeh2yjj3ku7lgricfbg7vbhc4fy3s6icoccb7272tsoz3pggrek7qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dzdzs6kv75adyeowpztwaih5t3fuwtccgdgvdv3mmhkh2lbxuznaldyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mt6vixiaaupvpbqfft6r7kyvumlpiim5k4j26j2mpvoskar4keanuhad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://if6cf3llwqht3bs2glotrlsj4ayowc4pipadzbf7bkztln5ykifkjpyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hm5c4dgtsiieuxnbaieinkokhcwryspk5xzqknm53ocahyxaddlfwsad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vubcpscmz2hveptwsv3voi6l3blgior6jk4kxe5zwnz23siofqwvw7yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sexquqf4dcwtgv2spjguu4msvawaxrmlmjfiyciuthhtjmwim7i6b4id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://soyjfzmmhadt7v4xugqhhl55kiebrjprjypwwbcun5nehmdabquumiqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://y3zfr23ubg7zvzdlo2incm55ro2ybtmzth67eklxpxo55aux2jiqpbid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4k6hj4ash2oo5svymxxrsycex3mdv5dqzom5rlyoojpe6map2lqgmqad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ph2ilpfayyumhbetpdu6zovwy4vvm7qz3puh7k4zbre7bsf4e4ym5lqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b5yuydwoxorp2qvirovzavbhpj72lcisv5unwblohkb6443u7m2mzuad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6oqw2koek4nbmbb7ic3y4jr6scqsypg5en4h6mcqyrgg3jkny4sgaiyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c4xaaynebochyp6ccvxi2bzbvncosdhqcb65cjuqwgqcljlul5gbrhyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dnyyuk3nevegj37tnv3xav57c5twomc7uqsfbjlkwto3p4spzfop47qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xqcx7b57dd5vrqllokebwuvub4hk3viktn4lsgyt2bg67oujd42xolqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vdnoyjrxieoikuqu3rpathtejvgl4xc6laihepyoyhw7tmuyxxhtvrqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ir3oqafizlapipdyrebrfuk5bxd56zqjemljvfkeb42nzpxvkxwmqpqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bt52afulf6zsk3xhzceam6ukipw2wrzpfsizlizdcootn5bc4ewzr7ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbqgjosup47uopyrlvbylzixcp7l5rsrxcdv3y4vy23cczcftsr6imad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u2qvcxl65guk4lxi2lyxq5zwlgnq7ojahihr4ipl7a3wcui6pvff7dyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nz5rdh2alikmxiyojqx52yhzxdqfty3jwtvcybqajxrkbtsk36jy4aqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fe3klmmbb7upoybd45ayjkxebqxaxukleu2w56kgo67rcnrxlalrxdad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rqkmahiz55v6bgogfgyni5h7v4sq3bgayycpa6u4c7if7kpvrylcrmad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://63dxcqyjooi55s2x25aqsvrykywmmaaoxj4kc23kdboyxyng2zqtkbyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zdn5uv663oiffbrloxalsdl4v3lg73elrnuso47rbuavu6bmhqvd2wqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5hiynrduugrjbzxluostnxmitaer62obvfyrfxnqkdeog2ejpxhzuqid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://key55aknlvgxs57kapodjw55ww23ryxbwfgwki5334gs5ok73wntdmyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://af2o3nw2txv3u2vfwntytytw73cgplcsaf7zccrg3xxcwzapu3sgydad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gd2cx4zvobqui6ssbbroferiv6oxlqyyy447aqpp2socxvvdu5rooyid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vdo2l4ujgxfcucbhnzdd4745sbbd2vnnkj4csyf5blds2qomguubx5yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iwdzb7nnphh2rffdygryptldmr5ip3lk6dejfwn6qlbtvyipqxzbwdyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cbmeu74emtvhqr7cwbq4aaui4qw4f2kui674fuoeowwd6oem33bzf7yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6476eeaclqfjhnlusdwcui7i5mqxmo6i4evxi7jhqxemx2s6rtucxead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3zzis52fvjbhoo2i5gyrmoeofqdr3m45jyvltuamxzktt77grsuczxid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ernx4wj3gzhlqxhlrsrsfxe3hd275uny7w3yorhbgwp7jlsxv23rolqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5eyzyzb6boe4dud4pwcuyigd54k262xf53z6zqkxs6gyzcfhoj2utcqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ivaoowg6juugqyn4tfpt2ilmwx3ea47c6ijxwlvgvrc6pemuwdywn6yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6mwjyc64rnkht3qc4bv7svpufmbvm3k73vekxgdlsbqzx5toueq3ndyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yp7yctliltdy3mdrdd2lfvcjx2xgcxrbvycje47jn6fbceurgznnapqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://523gzulwswe5tfevqlrxvqqh2fxo2mwrs2irnjel4mtu7qodgdu2ccyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xbgiykmt3v25qkspndphfdktiezfeesq6t45ewsrizid5s37ljgs25ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z6xr75yrgbry3a7zxc734sac2u6libikshm2j5tsbrh5geq7ilik3nad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ad7tx2oyln5g6yk7turvhjxhqvunfucuiq5iwzc5odlomft7tvysxvqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k5nuvkinhjd3nf75zb452xl5oxtdhg4hucmui5n72fou3frw6e25v5id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e762chqol5savlrfqljepxwtozrxxwarkuyhqps2n34tm3rliff4beqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5f7erlowczufe5cntt37ljhibswckyyxj4wrtuepdyygvooozkqpciid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gxtrbmin7uses7lo6ryg6zdik6pevsjhk42zzlos7dbwpsfrqd6osjad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5mk7t3hpdjei4ezymeog3kfsjmfxghvwr5ekerdilitafolstou5vpid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gmgcrvr2piu5wl7eh7vuw3cyrunksox5d4zhvdkgd3kbnwbgvrglkjad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hhmbi4q4sy7m7oyfrpjkxparnrrwijna3ncucu3vwc24v7xhjvst7nqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ljurl2gqwtgfqzk6pkz5ggtdrdrpzpzzkdvf4jhpkk33dnwkcsmdi4ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7hhhjnxeps222bydmavgawgw5mzkdnduuzifpobycjwsdryix2szlnqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tpwgxrocjvlonhrfjm4jx3dore2u4brxfj4ikt7iba36c23svthhf7ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k6oor2g5bfvdxhxr2g6fczu3iqldbzyavydk56lh6z7ex7n7wqg4eryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://65bhkrfbqnfjgcsr7456luzjauw5nikuwxradlysivy5wbttjikdhxid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k5pmfzuqwxr2uhnskktjicbnzr633zejupe54yginljj3mgoysfwe4id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tyrvuuh5tvrvk4x6lfxrvgabqmzpnxehelmdqztu3vekujcknvl2ufad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zmdmlidqqrxbkyqkqttbsbticjbofjs5uzwecqvdxfadvsjw7mp5kjyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sjd7ssbiptl62jktrwc5yffsh4llljx7hswfltnfkttq47gdjlpknxid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hvhidyqcyj4dozqdxuongpcs2yffjs2ojhazrncqi5cr4hhx3ljopiqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hmrr2zllzzxxrdqi5ktjflpga4skdnxm4wvzgkkl72apofvczmsno2ad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fkdhvlseh3xyeugsu54frnui62zjrfpeb2v5rm44b53iopcr3h4flxyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7baltffgfltbjh26fd62h2ieeomdcpro44xwkdqipbn5dtuklgkigkyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://74yeft3x7wvqnscbzfdljnvnmflnlib2b6mhu6a3arc3vvpi4qbrt2qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://53pkw34sr5aohkkpg4w3nz4wpsqod5mxdqer3hijrz2btv2pe3vncgad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z7yjie5fejolxvscc3lralybnhynajewnqinjfdasoqa2mt2ixjnelqd.onion/index.php?p=","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hsthebgwlp6xxnhgmvmgukyzxuyaqkx5uqncg56wib7byonddo5k6myd.onion/index.php?p=","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4ep4zkhqqg3kihqlbpsppld4qvg7c7llotilezqr6evbazqbmcwu6fyd.onion/index.php?p=","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sya5wcoyib7rozq6cjrdmrrunucqehkuzxs6rkrkffukkn5urq6bv7yd.onion/index.php?p=","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://soqdfmnocwg47ixineyzlhyem5tx3fju4hadydwob7fk4oyldxhju4ad.onion/index.php?p=","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hp4fxytyky26q3kpgqlhewhrazaag5wg4jsaiwxlv3lkd7r7rmsamqyd.onion/index.php?p=","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4awnzgndu5u3bb6vne2vixizdftkc4mdlz45lnrhjgelzm5ujywxmuqd.onion/index.php?p=","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zmqolc6yrdgn24w7eaaf4pfm235x65zbeggr4byk7og3crhcwn7sqeyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://australiancybersecuritymagazine.com.au/new-ransomware-group-sarcoma-targets-australian-companies/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyberpress.org/sarcoma-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.securityweek.com/circuit-board-maker-unimicron-targeted-in-ransomware-attack/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sarcoma","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wrzwt7o2e7p6ziag7aq2yy2o45sd75re4rpnbelpkhtj2dpka63c5fyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://skicexsnlbspjnbfxgcvjvzmlrgz2aaxexxoy3stfw4klrwnimrofnyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dqf6l7fvqkqbwxqncznnxojdjm5bvnnqxxfnktgdgrpfbm5b2nyteaqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mdliyoqm37i6ze4grykoa7mc6tltrjfvr5mffhvotrf6hsi5mwsx3myd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ob4kfkvgqxbiddrhzlq2yhlyfpdmnro4yptt24drsjvcekczjjaf5myd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lo52rld4cl2ezr4cd73yxn7ru2fh3dtqtmjzjuraquv7bdubhabvkkad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xcvwsc3suebephhxxffjp5odqwspdaylgsyoxc3pdwjmnnl4yhtjrkad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://obqwjnaur6r4lpwjbgmalazy6j5d6fgliimdlipjvdomhbodm2lmidqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yjri5fg3bw7gqw2c7qgx2ytccmfrghwqyuavsneih34tph7ywuwj2did.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zncifh3szqf6awg3o33qyoi43tzjaakcjmmhuytii5bsl33wwblt7yid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sfhvr7ecppro35ch6vhrzgwtdtv3ehxem6p2thnwlgursr5vdre2nhid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dj3t7qdgyopmjnvjvni7kdfne36zlq4uic5ajqrh45stquvxcwtdc3qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://f6cwflfjehjl6hosqy7jnkefhddnk7u3eyqn4bjrufmkle53tptxr3ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rzsqkmwfyprkqslslcf4lscqk7x24xzbxamm5jcsqqhj3vrvkdtp4did.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b2frnffyioow5tbiqvehe2ncaxdss2tmw7bvt34cwbdzsx2upbfhbzid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rup34myhoxqzm5m2jcstdwxl2wgjvournnyiysghyef6wjdyk3ets6qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://45k4wju2hwdywn3bsgs6mb6izppx6ghq5w3abcp77jz36xnu7sirltid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zp6bziy6wljpkg6i3uxzzcxyajodxzoc7acf5egb2vhzzrot23y3mpyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5q3lywcjrujw3vao7cz3ruqd57ugfdcu3qiisklpqillvuidl5wiqlqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nfh5wuh4gvbai237npdu672xmx2di2lo7pcwu6th2a7kzgue2fnhhdad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hqzjmm4qg2q2utn2e3yqt5lsnrabjmi5m4o547v4jp3pi2hwp2tkunid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4tgkspsiob5zg7vwqmmbquymoj3sacpx4x4qixvgzukjfen4ck4s6mad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://enfxn727mx4ue55zgbjkogn3lnb57e5ed7bcooodxsajzsp3dyo5xeyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://73jrahivyj7cydl3qeiauwm4fkz4f7e4d3deny6qt3cgtwxmkj2vmiyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qccbb75hak6ze6rsm344rx73lh7rk6caha2hvleyopejhtgagxjyioqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sbgsnuet6t7kle4tfmgsvgebaqgxab3lrslg6vjeabphzq7jx5232byd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lq4acyymyobtq7tafyspo7zlm4bwnmpyyknbtb3zefq2zdy3xxiu5nad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cgewcqt4x7kb7xgkfu2r3yv5wifzvpx6tojonay3kdgs5tqpjvkd5bqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m7k6jgadomd3nd2mor5sefnuowtwktfjvzihydx6zy2tkohv6aatr3ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://isxttzwtr7havmbj2qmyb7stwmrds32ye42iwc7kxj55adbexdnbfoqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nzqvpyyznsn4c3ubidcpywr5iqtnjn3lkcsafnjtsmozowmbjforgeqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tbkqp6pbl7uq2ymiii2jqzbre5igk2xtaruzm7fcdtstmufsssekukid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vysjfhy5gpr2f4p6amiamjo36emgbyh3xelsxg6sudisdfwtfor4rjqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3fdy7qukqwts2j7w7lks75tueaokjsmotcshzmxjqeojca26s3doocad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xik5pf7gejiffbapos223f4q7l5pdwv6xwag6irgkltx2lu6wfnglaqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zgu66qoreyw4tx7bmtus6gcz7at5ufiqhgyswfnprbwvpcjw4mows7id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lm7o3nfplejz7jibisw7wwrivlmske4rq6vofvbncl7g7jflvd3ubqid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3mwyz2wt6b6zuah5y3eyjmsjkhaowiv6ejqodt2ly4y4rpwcggii65id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://krxmjef2yd7dwmxbgghooskep4kcecxtqqs3iu33evi7dvr5oc3dpkid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rlwqssdty3mmlxla2h4iviv32qtig54nxw7ww3wt2bmxp74a3qmo75ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://f22licvnajbisahwc73y55se6mgmvxuups2mp7t43jgs4yj7dp6igqad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2fcn6dfc4li6kdt7dhqv4rpnmao64txxwcniostcvw6obdw74hiqtkqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://areaucod7knfvyl2xbnezcucezcwr4iku5psrt74zthoyqegdzqsxzad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://y2vv2zvegnvv7uwr5saye4enthgq3ghlhomu5a3nshgwih4phn6qusyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qxbuog46z72pycrwfaedafqy5dodyrt46ucfs4p5vaaigxtudtwerpyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hpugjgammwixig4kpti5r67ofjd4qrgkjohbth2irq4nvcv3m7s76tyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lhc2ghpebf2d5w3qroiphzjnwwbi6oyigt3aztgghy43q7j2vnu3bcad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g3adubh3fjsy5ezrmxmy4wxt7dvkhxnkd5deaac47mryvkzvzcf2tvid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2pxacmry7fqmbhkuseo2l3rxmyw24ctmengat7hlavlgrcixbepz6aqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mjlfzles4bszxnxcjktdu6iujjc7bhui62fc6s5z736jjsaq4zcq4cad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sarcomabwgzv7ogiulwqfmlul6mjcxy6o3owuld4lqguvevf4kgp3lqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p6b2xarot2rng6v6unlb72jtydw7tklqtyrsrhg6jdr5gaass5uk2vad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mx5a6zo2vzhnnuazxz5fqwacwd7wnkbxziwty3gedipkbvfn3ngdniid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://amffvuxv5qyi7fwh5cfoehkr4yrp3ushi4qzxm76ahiwro7dequcoxyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r33gr3wmjrsyo3t5tc6j3yzdtsjhmyzd6xielw6ceu2zr3najset5iad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dyr566jtgcsyk7si5gn7unygj3pnzgxfwvlureyn3dfi7g7r2ve54zad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://j4swv3longylj4ljjdny4yino4xwvrbis5ouxg4anlg4el6kjku7dbqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uhf6vmrgiqsvytiunb3tustswyhc2nz5aiax3viusb6i2v427pncylqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tszizx6qdi4uva2jbfg5z2mhdaqh3iduk57obi7hg4m6omta3aymrzad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://67f7qjjoez6fnnrjuqzg4yqjiowvjbe5y2dhmjkiwubtqzj3isc5joid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sgwmhbj7y2hehzzkt6fwvj23gjkzsvvhae2f3haavxjbi35tibnhpayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://plvvaggo6jjl2wy5dixn2knj4kuypquxfauijigke6qtx3ixjfitglid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ykg6a32ed546jveyot236w6cst5xahji4bhnxx4qv6b7wdqrwa3rhmqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pgyarykjxofanc7x37qx6am6me4geeebiqh76fslda5jshhup4yljvyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zrqe3dtolmluwzbwgktss4habzra3yv67kc35zhoccyj57xf5kuo4ead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://riuxxxbufgx5z53gww432mf5jvh2o7mfh22hvmpdw4ksutd6dflj7byd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iz62i5obz6mwixyjwxggbw7fk6wdgmmy4ancvynpbqqmgwpnghv3rdid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://igqsxlg2ndj7xmaepxtvkisacskrb3mbhlcgymis42h6l6qyfyjyg7id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6hfobqn3vj2yyjgvgkklftppf3una73dn6am7gpieohkryzg6avr5dqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bpcxhnyo4rvobiiapjksmzog4lr7gchwfoygqtphzfspbsxdp2lutcad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wphvg3uizhfblnuuwyz35nhfpgz254lj3iwd2jrtl2oce6qvmlwpl2id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jdphsfcjuyog5cgtjdfsxluarkvqy5rw75kasoj6kuihga3bs3fwgfyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tzmfdwducfvlh6ie4juo6ovgft3qwxgf5q7dxca57fqalpn6zsed3lad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qhzy4ur5atch5orjkd2h3x34kwqbswqzqnllaij4crl3v2mnrj7aouyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jq6vxgpnjfs3ue2wn7ve4bnga4ewkcetpvkmz324se7mlqjtnrenkqad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lqlkfdi2ydpzibk4xpikfvae3bjdd4lsodgwtpunxfc6abkexsg5a2ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://n4axoeoemdqamjhicytqnebburiwbmvviqyltoqtljoancodgijw32yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wsl6ouwdqk62yhddt2rvy6i7jzdegbufklfp6hdpgxn6vmwqlsqy23id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mtd2ltbdnsudzaneia6i6xgwkpn7adxfuesqstrreyqxlgxbxejpojid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cqjqlbmmfqanj6ctywkmgzi7iythgc6atu2xgjbkk2ccr465gizolqqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://63qnrvuxwl3jkzqik33ppgvktytzy5vasmp5yyhkv4mzbv5enuc5pqqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://herbgxwb46z3pikyy6h6wckbjebg4ytuoijqceu2wsse4nh5tyuqqxqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4eahz4i6cjqychvmiyqjducmhu3pep6l52vaw3ik3nizzpt5writuryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zaie6jcetdtqhi5epab45wzginog4kuo4sx4nwr4ydkdby76b5ri3xqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g7vfmyo2xvt4uwoypgb675rcgxokwdxqevmx5ie5qojqnkuvnuudemqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pcgkekcyyzl465rqt4mpezjkjdkoxgb7c4j6nbb6rn4gnw7zme24lrad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rsrcywwt7b53kw2lsioilnfrrs2lixt4nttzpcli74fjvfk4kqbfh5qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ibrdo3v56w6veyp6moi7iaadtk6o4qa6eyppc3svinph4vx5qrllpzid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5ka4wjkv3qulsn6gtfzyhumafgupipu6rkfezf2tw2doveamaqqmxvyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hh4ueveki3serlpuvt63lp557z5qhlfwlc32bclw4x53dmt3ijoewmqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t3ym2cemf625rd5slz5ifp2jz2ldntmlbn74i5joebg6c74fmnpmuyqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i44esri5nzpdcanpgflcrlxk4tmf7yfpxkcysha3gblsuiswyyxmi3qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lq72f4y2gbujxypmicycfpmmtv74tazt4h6szumrniuvgxwkwi4ykcyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zyzmgujsdh4xjmxjf4j6riqn4s52jfpiurcpabk5uxfitmz4pusaueqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cth3pse7mszuess3jeiftdawcqcm7cvwrrx7hiwi7zxzh55jvh6f42id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tfeijfoxmvqcoqjz2nvgfblxge27fyiy2k2fshiiccyrdz4kfiwaziid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ufwlfce4qkiqsda7e2mhaibgyyi6jfjhu55j7uoq6bh3kmue7pc34iid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4x2dnydjwfpa4zgutwqaeqxd7tmdz452ttvvq5pga5eqgppi2uu5chyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7h422j3rpt7dxoeijbzn6xo7t43dmaisl5t44mcsf6ulbj3weg6doqyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yry66r4til42vxubkqpy5wo75mshv7pcaqtbg4rzl55bs55yzav73uyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l2atrqqwpmgdr4vzae7ufgulirsklfk4xmierg4ihdxborjkpyuz5lyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6v3lslpnsfae4rfghnl473u4hp7j6yyu74pipyks54norp4filkzjgid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fbrmzvj2c6a5soanvuw3qi4dpnt3rcgte32nae4qegd4vqpnjtrwbqid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qysbb5qdwpxsimtrsbehqc75q4b2lw6m4imtnswgmbsq2mw4ulvxevqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://twm7i3mxyydc2ew5ppbmjiz6rzww7ze32t2ecmznnsywdccwatzjxead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fijqvpzptg2sxavr3s6vw32lx4xdfa3i2oedi4574qo3apqyhd7srwad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4b2njxftjecmzgyafn46dcyibnv3mourddcfq7qxdylkov4bisjl7xqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tg6cr3uyeakbug6jt4oeaxbcpu4urdpm7ksk6uk7sdwg3walnqcwftqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tr2w7zxx2clrckh4mr6aupyennkngrz2bfuohpdzeifajgeqg6rtxxyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ycgedgigkqoeabmpnpwwbqojcgldekrjraaeeo4litevj5bvp7dtmrid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tlntayu7wbtcqxtumbqh4x2vzurw7ybpuhtozusbxuqggcwmnisd7vid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wi5q5npnch6fy5y7m4jtjznrydzyhtp6ik4j5swrdsehdwtvv3akleqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jck4dycheanyy6zrolymheurxak54o53lzg3hfcz7ao35hs7fewsaoyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7usqkx3whuqipzsolnctey7xgszixv446vam7et2qas6xmuxtjm54pad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6nwhpuwtf4onxvr7el5ycc4xwefhk4w6q6rbn23oe2ghax2x7nns3iad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lpp4aze237qkkursbtesd54ofag6te5i5lzpee5a3buhq4v3uwtxnlqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rs3icoalw6bdgedspnmt6vp2dzzuyqxtccezmta2g5mlyao64len7dyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nf5b6a4b4s623wfxkveibjmwwpqjm536t5tyrbtrw7vsdqepsdoejoad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iiobxrljnmjwb6l66bfvhin5zxbghbgiv6yamqpb4bezlrxd2vhetgyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pauppf2nuoqxwwqqshaehbkj54debl7bppacfm5h6z6zjoiejifezhad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r3yes535gjsi2puoz2bvssl3ewygcfgwoji6wdk3grj3baexn2hha2id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://modre6n4hqm4seip2thhbjcfkcdcljhec7ekvd5qt7m7fhimpc2446qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://55lfxollcks2pvxbtg73vrpl3i7x4jnnrxfl6al6viamwngqlu4cxgyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lyz3i74psw6vkuxdjhkyxzy3226775qpzs6oage4zw6qj66ppdxma2qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://icmghe66zl4twvbv5g4h532mogcea44hrkxtotrlx6aia5jslnnbnxad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ngvvafvhfgwknj63ivqjqdxc7b5fyedo67zshblipo5a2zuair5t4nid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://54yjkjwjqbm74nchm6o6b4l775ws2hgesdopus5jvo3jx6ftj7zn7mid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bi32pq7y3gqq3qacgvamnk2s2elnppvevqp325wtk2wo7vh2zavjcfid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nitrogen","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yqiaekirp7n7fkp3bwx2nfxm6zohhaa3ct5xvdqsxsanxqqwoyltb6id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vz4ybjdqhtm753rznnwx67elvzhbcdkqk24g3ytnq32h6qpirigkytqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://j56wqkcxzvuz25wzypoxua3fex5zfuc3emkhw4bemtiuikt46dwma6id.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4fklgnaegkdpfgaa3rxr3x4xujq4yi6dcuumxikrquzar2m3meiqxwad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6lrsxvqscxtznb4fhux5u3vbslbanxjzxzgtokjtfwaitxe4pfgfebad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ws6uapok34o3uvn3v6nru574urlvlbn5u3pi2xzyg765vpv2fixcm4ad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ybe6nbidsn6grrnhx5adksp2sd4cz7povuuszhmliir5p4th7inmexid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://55gqddfwtzfcuxwgoz746tas2djoiai4lbjvc36kq55prehyvedee3qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zvdlza5tjyl33mbx4k7w7t25ve6e5c3ve3nmfwqlygl6ww6s4lmsu4ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7o4vytbuk42nuucim5idwgsg3zqkocpllqpykmrdk6zvs75ne7iwgmad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xqsdbtrtmufdyiqnkrkvosec4gqappf2egcptzqppjtqdevsoadakyqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2idvzxbwvzbxhuniw7kfaimcvtqazmn7nmuw7codg65cshwwsvnpz7id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bxi2cepk57dy3uhgwqd6dri6jtuqe7btay225rn6xkvvgnp2cvjvowqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nxarphaf35qp2uuosaq54m3a2s5kt4svpcv56mvz6r7xy6na7uo5ypyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bf7dw4n6zne6rbgjlpcsidphpk753nkyubipkym5t4pntgfyb6clw2qd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5xmd7pwpk4flmz5o2hbyndpkles5klmwbpxbw4jitzjnbhn4wkdktvad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6blfnoe24tfpal2kmacphkjmzph3oghjdznsgkf23lmvjqbtgrmedpid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6stzturcvnli6ilm6f6vweiymchi6lboc62u7ive2q7hn5hbbbauvgid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://whdoefodpz4jjpwr5imipdntkh6kdbjazhx2zvdhcbmrtuxs6f3iwnid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wjwbqeuni4zslbm4cduvo7uwyo653k4gdx2x4irj4zkrwyerksdcxryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vkl3xfkp2vtpdzk7ohock3w2oiwwtvgnwbwvurrqafh5nhw23h43dbid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://awrfq7pjydfp3hwbsun6ltxrrzths5ztgxj7i7ybx7twjrdvzvxkgwad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z4tonbkjybcllsvd45smpkqkk5uaspmlnvmysrkxt37wuudijvp7k2id.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sqnnhgqr4iiwnkaih6vspyxmebz2vvjv3uybmjdynw6sne5plilunhyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://67hvtslok5a4cwjxfmidbgbunsvckypf2dwkpxg3y2sabar5b4jidmyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hzyp7n436ecwo73xvrgnf5wmbjewszwut4h6vz4fu6f2oqd5zfcd7sad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6a5ib4udgwlkyl3zzeyenedcb7d33j2vq7egpqykr5457uiskeu6zjad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jzl4bylm4bng2zgmeqw3lx6bcbxzb2hulicxneuosq26sshnitrcvcad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2u6njk55okdxvrup5feu3wbhyxvlqla7yuj2oz3xkzz27yzc66vcirqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/embrago","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/osyolorz","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hackerosyolorz77y7vwj57zobwdeuzydhctz3kuuzr52ylzayvxuqyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/orca","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/soleenya","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xzbltrroh4ocknyi7kj2ucjuw63fhyy23dh6lplydl545d33kbygw2id.onion/home","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/valencia","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6doyqxqqj36vnedtt2zwxmngx52mgyp7brbrtwkyd75jgiolocoybgid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://x.com/ValenciaLeaks72","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/helldown-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://hivepro.com/threat-advisory/new-helldown-ransomware-a-growing-threat-across-cross-platform-systems","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.sekoia.io/helldown-ransomware-an-overview-of-this-emerging-threat","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.truesec.com/hub/blog/helldown-ransomware-group","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/helldown","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://onyxcb44xvqra35m3lp3z26kf2pxrlbn64nbzvyvzjyc3uykzrwcjdid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.helldown.org","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://onyxcgfg4pjevvp5h34zvhaj45kbft3dg5r33j5vu3nyp7xic3vrzvad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/radar","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3bnusfu2lgk5at43ceu7cdok5yv4gfbono2jv57ho74ucjvc7czirfid.onion/api/leakeds_u","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3bnusfu2lgk5at43ceu7cdok5yv4gfbono2jv57ho74ucjvc7czirfid.onion/awaiting-publication","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://radar.ltd","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/rtm","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nvfutdbq3ubteaxj4m2jyihov5aa4akfudsj5h7vhyrvfarfra26ksyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3wugtklp46ufx7dnr6j5cd6ate7wnvnivsyvwuni7hqcqt7hm5r72nid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nv4addu4insb7x6aagdv6r5gvxzczgfje7mmecsjonnrvsq7ulevvfid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lynx","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxcdn6yh5inxdqregzgm674qlbwzrmvozmejuercv2zq3nlugifoad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxk7rmhe7luff3ed7chlziwrju34pzc5hm452xhryeaeulc3wxc3ad.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxjamasdeyeeiusfgfipfivewc3l3u34hyiiguhdyj776mh535l4ad.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxhwtifuwxs2zejofpagvzxf7p2l3nhdi3zlrap3y2wsn5hqyfeuid.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxbk3nzrnph5z5tilsn3twfcgltqynaofuxgb5yt43vdu266z3vvyd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxaeddweqscykez5rknrug6ui5znq4yoxof5qnusiatiyuqqlwhead.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynx25vsi4cxesh44chevu2qyguqcx4zrjsjd77cjrmbgn75xkv626yd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxoifh5boac42m6xdoak6ne7q53sz7kgaaze7ush72uuetbnjg2oqd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxroggpujfxy7xnlrz3yknphqgk4k5dy4rhaldgz2hpxyyy3ncuvad.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxikczcyposxfz5a7hxbqxilsrtx7zdzwmhk5wcb5qoatbv2suizid.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxdehvlvrrtnhtpuy6bhrxffzvl5j7y7p3zl553slzq44lcb2jzkyd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxcyys7c2np3b3er2wo6sufwoonmh6i3nykv53pst336c3ml4ycjqd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxcwuhva6qzlnj3m3qrcl6bgvnxpixg5vsikf53vutdf3ijuv2pxyd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynx2m7xz73zpmlm5nddbokk6a55fh2nzjq2r5nk2hbdbk74iddqfiqd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxad2seqpyu52lr5v7il4idasv23535a46s4bj65b3v7t5y6u5daqd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxcdnjg43re373nltauhdqfbau25mwawsg42h4lswfe455uaznilad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxchat.net","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxba5y5juv3c4de2bftamjkbxvcuujr5c5wn4hq2fwmt66pxb7qqad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad.onion/leaks","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd.onion/leaks","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd.onion/leaks","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxstorage1.net/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd.onion/leaks","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lynxblog.net/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ransomcortex","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gg6owuhu72muoelkt2msjrp2llwr2on5634sk5v2xefzmobvryywbhid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/adminlockerransomware-removal/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/22722-admin-locker-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/adminlocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lockdata","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wm6mbuzipviusuc42kcggzkdpbhuv45sn7olyamy6mcqqked3waslbqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mad","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cymulate.com/blog/september-2022-cyberattacks-wrap-up","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyble.com/blog/arcrypt-ransomware-evolves-with-multiple-tor-communication-channels","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/ransomware-roundup-bisamware-and-chile-locker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/chilelocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7wa2bi6grhbu4opt5bguga4g63jsxiy3ysfbabh7dbyk3niqxlsburad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ebljej7okwfnx5hdfikqqt2uqehihqv3yns3ziij5clqpklwb3i2cxad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2022/07/14/holyghost-north-korean-threat-actor-uses-custom-ransomware-in-attacks/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/us-govt-links-north-korean-holyghost-ransomware-to-lazarus-group/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-187a","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/holyghost","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nullbulge","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nullblgtk7dwzpfklgktzll27ovvnj7pvqkoprmhubnnb32qcbmcpgid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://goocasino.org","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nullbulge.com","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nullbulge.se","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nullbulge.co/blog.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.infosecurity-magazine.com/news/fbi-dismantle-radardispossessor/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.reuters.com/technology/cybersecurity/dispossessor-ransomware-group-shut-down-by-us-european-authorities-2024-08-13/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fbi.gov/contact-us/field-offices/cleveland/news/international-investigation-leads-to-shutdown-of-ransomware-group","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/dispossessor","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://redhotcypher.com","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cybernewsint.com","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dispossessor-cloud.com","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dispossessor.com","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e27z5kd2rjsern2gpgukhcioysqlfquxgf7rxpvcwepxl4lfc736piyd.onion/back/getallblogs","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cybertube.video/web/index.html#!/details?id=0c3b52f6e73709725dc6e12b30b139d9&serverId=2be5e68176ff4f8fbb930fe66321ab72","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e27z5kd2rjsern2gpgukhcioysqlfquxgf7rxpvcwepxl4lfc736piyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vanir","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6xdpj3sb5kekvq5ulym5qqmzsv6ektjgvpmajns3qrafgxtyxrhokfqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/pyrx","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pyrx.cc","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c2mdhim6btaiyae3xqthnxsz64brvdxsnbty4tvos65zb565y4v55iid.onion/blogs.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c2mdhim6btaiyae3xqthnxsz64brvdxsnbty4tvos65zb565y4v55iid.onion/b/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c2mdhim6btaiyae3xqthnxsz64brvdxsnbty4tvos65zb565y4v55iid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"cloak.su","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cloak.su","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cloak.su/indexo.php","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/not-a-good-day-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/good-day/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/good","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://47h4pwve4scndaneljfnxdhzoulgsyfzbgayyonbwztfz74gsdprz5qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.waterisac.org/portal/ransomware-awareness-%E2%80%93-new-ransomware-group-%E2%80%9Ccicada3301%E2%80%9D-surfaces-connections-alphv-network","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.morphisec.com/blog/cicada3301-ransomware-threat-analysis","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.truesec.com/hub/blog/dissecting-the-cicada","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyble.com/threat-actor-profiles/cicada3301/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2024/10/cross-platform-cicada3301-ransomware.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/repellent-scorpius-cicada3301-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/cicada3301/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cicada3301","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sia5sekp5vokknfigbnef53mrb677lm2vy42wgnespkr5af4z4y4stad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cicadapkh4vg2qh4qcoelszhftota5cdcgrwbjcesdyiwjwmsfzgobid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://leakshrlgof456tiw4ww5moiqlnrcork7q7r3cjgmsvex6zazpluhlad.onion/ec49pw6bi8xc2mk3j89kkiaa4ikdrf4wnq2nas4cseciagbw5pq63th7cqajky3c/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ruzislhpcuvfzw3t2xfqu7gog3gs5j2u65ysaq3ybqkzri3hjddaqgad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5atqn4dwosjauijzj445mm7t6bqrcvzlzcylpmpnx243jxvlimyb6aid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yaoehn32c2s5pwsuzhaa4lsu2a4seycpwyvn5gfz3bn4i74t2jo3frad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bmfyfxl74qb6rsukgwymv7e22ua4uvhszsamqwx7jmj57qkamxwlhbid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wuyfbttjjzsmr5ghl5hoi75ytse3bwrqgk63c6guv3lhw7hwtxbgveid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uds75egfqi7mfpxckf2un742qsj6rh3kfrydqaldwgkrqp2a37lk6fyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://osd6tsgegts2xaqo3o2hrpqatwlslqfyc3msvyksad4iucauif3oqqad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hgannromwuui7n2jvphpteposc3gioqkuo2ncb6fzopasgcq7ixcjeqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zf6bl4dczp5z7uaba2lhm5wrhrpflwvzsx2nhf7zyf63tpsfzc54tbad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cicadafhqpjwm2sblkfbuwn7sglbibuejr3m7fildpqpjv3hghlhb4id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cicadaxousmk6nbntd3ucxefmfgt2drhtfdvh7gmdeh3ttvudam6f2ad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cicadacnft7gcgnveb7wjm6pjpjcjcsugogmlrat7u7pcel3iwb7bhyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cicadabv7vicyvgz5khl7v2x5yygcgow7ryy6yppwmxii4eoobdaztqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/synapse","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ugoakjk3v6hop3epjhdgn4num43ndb5glgixhraeg2xm455gxqtu2qid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.reuters.com/technology/cybersecurity/indonesia-says-it-has-begun-recovering-data-after-major-ransomware-attack-2024-07-12/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://wazuh.com/blog/detecting-brain-cipher-ransomware-with-wazuh/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/masked-actors/brain-cipher/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.vectra.ai/modern-attack/threat-actors/brain-cipher","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/brain-cipher","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/brain-cipher/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/brain","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x3nb7qcygpem2j5xzstyzdtgzofzkwkx4eko3ug4r73i6uhcgvyffjyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a4vbe7yp4kluped6khuhpr5nmzshiimx2jt5j22ozriiq6ngsm3fcpyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://emdnfl2fv32jhssxcbxlo6dzg2at4d7qbw2md6inz63qzdfgyln5cwyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3fg2gfwrdks46drwvejpgpak5klrflclsjjo35dxtqfk3poeez6oezad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mejouwrwja4iou7myj34rqi7cixyhn7vsa42e2n2dhxzc5mmkiaki3yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lhsxojxowgtwdqlryl72d2v5cpgqv3sll4d47yyqdisersigvfbl5uid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://psv5ejeysrncs6ltu4pkjyazswcmw3atmxi4eg44a6luudin5ufchcqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://upiqcdsgvh6v5owteasjzyxbj2xug574dj4fctthehd7zjq7wmuxbwqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://inzk64xcf3sm6qzkehmio7piwhkslhnab3rlviniyg7alcgsxvy7kcyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zijgmuqjzb6dc7pofxhtaiz36qqyg35lhutybmzaz6whzgei2casjgid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6ft2dfh26wm3w44orpjcgviutvfp25ez2iyh5ego5egvfmifrws7vvqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3frnhzcnlkjnw5q3tm6elzizinm2k3bmrtf2xwqjzpcxzeqwn2tv6wyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zke5xim35cfolmq2h5i5sfmcoxr4pbpkfjwtq5lf6o4zo7avfcvnb5qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://braincgksuixxkpkme7zlpkh7u47oryxx574d74ws4eal4t2mxyahbqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jgkgqztfmwk53wlttsjo6i3nmwtzoch2oi2bocqzb4zmp6kfspuiaead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hdgfvxxkepllbvqvk7vrudgwq55tg4joo4xpajaa3nv5gzpake66bnid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q226mkoikzgyu33jin7ox3qo6tea7yhlgz52p5lslpj73edtocsz4wqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xangddavm54rgsju7iceahxztbqrcflzunffwbaswwhhftieygc4j3ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://as7fbsjvifse52ek5qnptfgvkduvvnl56adb3jjgk6k3p7bisipvotyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bgpeqy3d5svuikeaueitix6zosg3pzekw77viulnucsiqsn4sjr65iyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ncyg34lipi3w2u7yvxl3swr6wj6lsoeix3grrdsn6nmcv4r7vntanoid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tahr6kwobsi7fj5j3hoyzxr34ipyiyuv2svhteht5td4etq23bcx7tyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ixvarmokkir6t6fzpn7prussp3ulys66aeivrhcvrmfowqi2gi2fgryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ubetdhmgnry4jk7ya7gh7p4hm4c3c57srkw62oc6hjmvvvkrqeybjjid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zv27q4tjvqxelm2imgztfg7gtl3v56oqabe77hiufqoqilis2dgcdsad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oe7kcuvnulmdzir6zkewv5p353kc7qjf5tyqxfxabhzsm26pji44elqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lhdv4ydjx5idzvntdrmcbwsh3dhdi3ww5hoz3ws2d5q5jlfewdacx4qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5v6tgs5xyuvl7kpg5b26e54kddlxdvktep2qmglawrohksv3qjwvw7qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pzghjpkm2liszmvjsttflp475zqxgrywjhr7xagc4bqfb2a7aw3qysyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i6b4r6blgmm3r62zj42qxn6bvcbcrslcg6b6uwqws6xhnxz2howbhkid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yt7beb7fj6xbh4dndrlyvl3gn4ck36qn2oqheiqjs4bp3wspj3wgpcad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4ldgw2wuidqu5ef3rzx4byonf3y7rdnh43jiw2z4sbtjiwic6gkov7yd.onion/c/lgc2Yxua65agt4XMOMkQKJjsdrV2IzYk","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p6wmotxzvg34tdmpwm4beqgrcyp5iys43snkccsahnw74la3k3xx6pad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mybmtbgd7aprdnw2ekxht5qap5daam2wch25coqerrq2zdioanob34ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"extension.README.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/trinity","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://txtggyng5euqkyzl2knbejwpm4rlq575jn2egqldu27osbqytrj6ruyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sensayq","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ppzmaodrgtg7r6zcputdlaqfliubmmjpo4u56l3ayckut3nyvw6dyayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gmixcebhni6c3kcf5m7xxybomaphj7pizoqtxiqmrz5wsh6g6x5s2wqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/wikileaksv2","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://assets.kpmg.com/content/dam/kpmgsites/in/pdf/2024/11/kpmg-ctip-fog-ransomware-19-nov-2024.pdf.coredownload.inline.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.areteir.com/static/FOG_Ransomware.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.securitymagazine.com/articles/101694-fog-ransomware-group-uses-unconventional-toolset-new-research-finds","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/d/fog-ransomware-concealed-within-binary-loaders-linking-themselve.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.barracuda.com/2025/04/29/a-closer-look-at-fog-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/fog/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/fog-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.kroll.com/en/publications/cyber/fog-ransomware-targets-higher-education","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/fog","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nw5zrjqarckmsf22rrgo5yooelpnn5raxhesuhrpzceqibmjwanbbaad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://44dz7r5uduhihaks7m62vztthp5s7thokbgeida7usm4rvakriuvk3yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hlbqbuy2bo3onn6h6eq7pbci24kughiaw4rkxrewidnqma3hwwgt2ead.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xbkv2qey6u3gd3qxcojynrt4h5sgrhkar6whuo74wo63hijnn677jnyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://xql562evsy7njcsngacphc2erzjfecwotdkobn3m4uxu2gtqh26newid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/risen","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cqqzfmdd2fwshfyic6srf3fxjjigiipqdygosk6sdifstrbtxnm5bead.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://o6pi3u67zyag73ligtsupin5rjkxpfrbofwoxnhimpgpfttxqu7lsuyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s2wk77h653qn54csf4gp52orhem4y72dgxsquxulf255pcymazeepbyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/locus","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ugn5khvt4kitlivv4ddfh3lb6mdhn2ud3ximcaypy73hxlk3arj2goad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/el","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4ozbomcjurd64vgeblkoqeqirvawi3dddswriw6qespscmequmqlshyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zdkexsh2e7yihw5uhg5hpsgq3dois2m5je7lzfagij2y6iw5ptl35gyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://26ubgm3vvrjawkdyfhvl2d2nhq77nu3zsagbih4yy2zgau5uv5ivfgyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://panela3eefdzfzxzxcshfnbustdprtlhlbe3x2fqomdz7t33iqtzvjyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://panelqbinglxczi2gqkwderfvgq6bcv5cbjwxrksjtvr5xv7ozh5wqad.onion/Url=4094dd92-0f91-4699-8328-fdb7070a8230","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://panelqbinglxczi2gqkwderfvgq6bcv5cbjwxrksjtvr5xv7ozh5wqad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dataleakypypu7uwblm5kttv726l3iripago6p336xjnbstkjwrlnlid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/hunters-international-ransomware-group/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/apos-security","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-new-face-of-ransomware-key-players-and-emerging-tactics-of-2024/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyble.com/blog/top-ransomware-groups-may-2025-safepay-devman-rise/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyberint.com/blog/research/ransomware-trends-2024-report/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/apos","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yrz6bayqwhleymbeviter7ejccxm64sv2ppgqgderzgdhutozcbbhpqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yrz6bayqwhleymbeviter7ejccxm64sv2ppgqgderzgdhutozcbbhpqd.onion/rules","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://apos.blog","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/meow","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://meowthxcf4tm3rujk4bsjaoxd2ghmjx7vi342hz6zdu3lfyeykmc4wqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mops6j3iuepvarl7ackf2itjkt4in3xkcbupnhy656byx6m6hnxkbgid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ikjht3url3tvx6itf2eghtrmwlmjfywz63ymnxghwwyhflcxnqffhvid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://totos7fquprkecvcsl2jwy72v32glgkp2ejeqlnx5ynnxvbebgnletqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://meow6xanhzfci2gbkn3lmbqq7xjjufskkdfocqdngt3ltvzgqpsg5mid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://dig.watch/updates/darkvaults-slip-up-exposes-link-to-lockbit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.threatintelligence.com/blog/darkvault-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/dark-vault","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/darkvault","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kkvanuf7on5uglvdhihy627w5pxwcmhl6pxik7rwef6y7crt6wj4hjqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/f/embargo-ransomware-raas-analysis.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/technical-analysis-embargo-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/embargo-ransomware-new-raas-on-the-scene/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/embargo","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dr4zejrunmmijebc4jhz6xwplapeltdqdchvbvikiwitvrtjedcezmad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bjy6kwjxxepe6v3vjlxhir4qzdpl7jvwvxua6wvemyfm44di2cxdd4qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yunznlzrpp7oa45og6unujpp4t3f4m2sqh2b4vuhct3kmbxxj6lwqbqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://n56t64ldkhzygjk5cqa2f3r4xxjqzaftusjy56z25qcnun6ab4cijeqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gvhj726josrtcuig76yfme5x72d7xqbevgsqm26ua3qcmskxddnx3oid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fvbobs6fcm5lske2xhfyx5sazn3i5cbxrbdyozoio23ouhnmortg5fyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rdur3c3dxhjjpfxebaiba6fuj6lqrcdtqfzengynkg5ptyelcclgvdid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://clqt3b3ldzxyemjrkvgsm5so2tyus7f7i2ia5qvikt4623srq5w3d7ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nbgvwttzh35irjtnxgeaydqob6ixorgabbufb4ociefv4zklyppu5lad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://22g3uiuyqqa4txxuyvzmlyvlou4crrgfvgnvodrv3wrxcedtvjgx6aid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6cs2fy7brjjx3fza7ny2vyhbkaxtn6rdx4p4js2lbgyhke7z4aslxtid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wsw3zgmaw32cjt4j4iwwpg7td7qgrh2fp2p34pvhupyqke6ilepsnqad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://olpvpdu4dotl54dereuembantzyjqzftjqj2ovvlfgcvw23qknuxzjad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://73klffkonzmo6csfca75k67rniemcvlc2ydnfnkk54cqnkmdk2yqxqad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7t635vqx6zm733ryjj5jm6hnavlw2it3umi3zmbq6gd6nhaeaylsbsyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3kt5ouf4qxdkuzsct6zp3jxsqmtaqjsun3uvfdwbeuo2yizjp73ripyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fanr4dyego253yx5pmbc7krct6qzq3hqfrchvj5fafiwalvjijfgsmid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g7hva5likuonhljhh3sp2nvg7pezpu45vpxjccgihevwpb4fi2napqad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rlseptkjo5yt2c3m4ov7hmhxmb2uia3cic3ohq2u5tmb2uv4enovhfid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7jkcp27353enwfwdemqgsevyjbtz5cxv66n5ctfgd37h2mdxbhhiluyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://orxo6qmizqa43suoox3xteu6645y4zf2bpvnsutb2yq3n2lpprw2x7yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kk3puzzmu6jfzll6sllchr5olxf4bg4tl7uyq7wtiqqpntkreya3qxqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jolfnfw6lmcjsppgjfimhimqt2t7viybk67yc5zkxip6fxrcgo7mv4id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tamvd5fdyvpekhaf2sdg5sum73ra2abc4h2iqihijpvw4hythnlmuhid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rngjexyyyl5mek5kg2lkxilqfef5nr6bpa4u24i5ei5hb3ydsh5drpid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vh2wkazjlflm6pvwtvw2fnztu3dcw4346lasvikzeg25yhx6bjvl5pqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p474ku5ehoex7mfsbdenppakbb4twvrnvggjzhp53xw4z5qq6glm4yad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qk5nd25xdnygqrey7al2tb3xop5brk7kxua7xr2zrgftzked43bku4yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://usu2gxoiijvnswhfymd6ucjjwhtgqby4c4ywzvnrtw4i6mpgppvzpsad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qrthxx5hkttfl3pk57eou6ddqi34pxsibxvndq7vt5pblqbaurkmxbqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a3kvb22nuhfgaluy6uzufrjn3azzsu7tylszdbyne3kiextdmxz4nnyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5ntlvn7lmkezscee2vhatjaigkcu2rzj3bwhqaz32snmqc4jha3gcjad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://embargobe3n5okxyzqphpmk3moinoap2snz5k6765mvtkk7hhi544jid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ec6edgevw2lzqy4ipafpbvjuu7r6ugqbljqokl3pvecc6c3a5ix3wgyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a3kvb22nuhfgaluy6uzufrjn3azzsu7tylszdbyne3kiextdmxz4nnyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5dw7bszmidrhpoltqbqmpixpz6mvgez3mr6xc7ktval2glrmbxkwopad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7watkqnnuwxvlpgy5gaosgqy67nve3jgpy37xobqngmswz3vuvde56yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7lxwbzlkpjyuahuvngwwkc4mycj2a4flh45ksqjo2ezfdbkmxmlxikad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z2b75lk7xf6kme3zfvlmdmpwiaansnkcuhsojd23dgub5md24fhogcyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4q5tsu5o3msmv4am4dfhupwhzlyg7wv3lpswbvbhcrknr4ega7xetxad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7watkqnnuwxvlpgy5gaosgqy67nve3jgpy37xobqngmswz3vuvde56yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3o5ewrzhqoyodfs5kll4cjxagdfrpuu474panwobm4im7ejfpaux5jyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://embargobe3n5okxyzqphpmk3moinoap2snz5k6765mvtkk7hhi544jid.onion/api/blog/get","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://y6kyfs2unbfcyodzjrxadn4w5vyulhyotdi5dtiqulxbduujehupunqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2nn4b6gihz5bttzabjegune3blwktad2zmy77fwutvvrxxodbufo6qid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://66ohzao6afsv2opk22r2kv6fbnf2fthe7v4ykzzc5vjezvvyf3gocwyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zo5xog4vpvdae473doneepetidh36m5czdq2vyeiq3lvqhuel56p6nid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sbjthwyoxfuxq75b77e2hsj7ie67m3qicfnuikhuabwo3sikvrzyaxad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wg55rcy2chmbpeh6pl5pftnveac2lqfxbletrtzanfjhhmvcjnn5tcqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oftm4u5cfl6wyadj27h3csdxfvyd7favssxcr7l7wnswdsrfedxswxqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s37weqmxusvfcxkoorgkut5v7frn27zftdb6pdjsyjl5djg6oxjqjbid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i2okedfryhllg6ka6aur3wnxcxdaufbuuysp4drr5xoc6gvqpcogejid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ufjoe7fdwvml52oin7flwlqksvp3fcvfyh2kwsngt7j2yf7xou52w2qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yj3eozlkkxkcsprc2fug7tolgtnllruyavuyyar3yzsccjdgvu2bl2yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://76yl7gfmz2kkjglcevxps4tleyeqnqhfcxh6rnstxj27oxhoxird3hyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5ntlvn7lmkezscee2vhatjaigkcu2rzj3bwhqaz32snmqc4jha3gcjad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.scworld.com/brief/handala-hacking-group-asserts-attacks-against-israel","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.splunk.com/blog/security/handalas-wiper-threat-analysis-and-detections.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/actor/handala","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threats.wiz.io/all-actors/handala","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/handala","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.handala-team.to/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://handala-hack.to","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/money","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z33ua54qzvzyxtbe5oghqyvxfs5orftqlws3w5ndrtsvmaldcvbyf5ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d26nwzgwylb3no3ar3rt3si3e3ujzndhp5wryxxlr76wba5snhap3tyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l4wvjhcng4klrah4gldyyvo3x5p5o4frzbvwdhzqa6vkg2chistqj3yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://md7a4mzsppjuaw4zczoojpo7arqrlnmhlqoo35ttrc7l2lpeiblx2yqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pdndkkg2hu4z36yhrbgtycxf52iodlh5os4argm2ooia4ypwgnvlzgqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xq5t7xwptmpoxzjkns7wfbbr43zxedm6ygbfsh6bp6lipvyhzkfopjyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://client372kkzvqpgniqp6r5rqkg22yrlhstxiaxskeowp2hrperdelad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3w3uuz4vze6wdwxrebn3oaavft47xtvghl7qcmpqclgojr44muaigwyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vkge4tbgo3kfc6n5lgjyvb7abjxp7wdnaumkh6xscyj4dceifieunkad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z46mj5ihckzwf2ons46ceryjwyxt3ctrqyglmre5uhnipvoepaciulid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p6kxp556kkcbjdjsg24g3edmvr7v7ujecuychw4ibvqhl6wuomnrgbqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wzu6yixpcohxeeunakzqf42dothwikt3gvtovamxdm6rfl3oe6smywyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://au6l74lej2qvwrvasdyc5ta4g7jdshjwkzbi635g6uztld2n2fcacyad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://moze6ryu3ev65tgmssb4sckagkgfzmjtsxg2d6xrjjua2dke5lagcxqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://26kbddrpm2xfjg4unow76xyvrffwh4usqjhsqgalf4h3diiujy75ngqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d2vda7sp7rxuizyduwvnvccs3giddkwgglj5ecgrmdpu32grp2txjeqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lhzaw2b2xn6lmtoioiswufyvjnrghlkmhtvwgsrsjnnmj2ceu56popqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jg7qeqdbqqordr5tazw5zc7s2h4sk2pt2hx4cxycqrcwr7vtpmreshad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vycmr2wn5nqhkpla62mqe4vxh4fgdbc5id4g6piy4mvbjnb4mp4t25yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://372bkntomuk4xmevyki2gvpzdsm77xkhp4z6sctugcogqwgpqj4xkjyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jioj2j5k53vrhtdgvjmeijgkdxgwadzjacywnybjvqftbkqpt3oy6cid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nhdmgcysxuvvmd4dqwqisxumirvcj6xfhahuds5z7qgj7qlr3i73nnqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://742srdwxlwiu75kr3sbf6kzwjcxjwezvpi3s76ignhes3vqacvh3e4ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bolfkdkjbdig64ieqixpyhmquuadkm6nzohutbkfwgzftd35kipy45ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qyk5o7wcgocwebnymjusnc7siyetwl7po26flw4e6hhg2xiue7brvmid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l7eupjzxzfbsw7nxu7wu7lj2lzr5ulmyuyd4neyasbdmvzcedal7mmid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6xkylzxoxpd6bnl5ymhr6hysaoe3bsxzxhxpydhv22fmnt6m5zrlpvad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://clientcuworpelkdwecucgvfhp5uz5n7uohsnokndrlhm2zkntyg3had.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blogvl7tjyjvsfthobttze52w36wwiz34hrfcmorgvdzb6hikucb7aqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/free-decryptor-released-for-donex-muse-and-darkrace-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/i/new-donex-ransomware-variant.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/ransomware-roundup-keganohitobito-and-donex","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/donex","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Readme.ID.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tox.chat/download.html\\n\\nTox","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.torproject.org/\\n\\nWrite","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g3h3klsev3eiofxhykmtenmdpi67wzmaixredk5pjuttbx7okcfkftqd.onion\\n\\n","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ransom","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sewo2yliwvgca3abz565nsnnx3khi6x7t5ccpbvvg6wgce4bk2jagiad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ransomed","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/22493-insane-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2021/11/insane-ransomware.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/insane","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r2ad4ayrgpf7og673lhrw5oqyvqg4em2fpialk7l7gxkasvqkqow4qad.onion/Insane.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r2ad4ayrgpf7og673lhrw5oqyvqg4em2fpialk7l7gxkasvqkqow4qad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nv5lbsrr4rxmewzmpe25nnalowe4ga7ki6yfvit3wlpu7dfc36pyh4ad.onion/Insane.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gfksiwpsqudibondm6o2ipxymaonehq3l26qpgqr3nh4jvcyayvogcid.onion/Insane.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gfksiwpsqudibondm6o2ipxymaonehq3l26qpgqr3nh4jvcyayvogcid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nv5lbsrr4rxmewzmpe25nnalowe4ga7ki6yfvit3wlpu7dfc36pyh4ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/zeon","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zeonrefpbompx6rwdqa5hxgtp2cxgfmoymlli3azoanisze33pp3x3yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/knight-ransomware-raas-targets-multiple-platforms/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/h/knight-ransomware-raas.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/knight-ransomware-rebrands-from-cyclops-targets-windows-linux-esxi/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/knight","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://apem3txac4a74co33eceffd3yrfsufhebdzjc5zvjlie53wius2gbtyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vdyummkrwpjg5ufzefpsqlei5jgfulgci42fjraslavxeegsodei2tyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r6chas4skrvna72fg5ui3cqkke4fnpinsskvlo57aiolrrdb3r777mqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uzfrntnmwojla5v4w3xvpxerjg43kuzqxmtspqhi5qclwtof5ibgonyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3r7zqtidvujbmfhx52sb34u4vwkh66baefmqzlbqpcnwm3krzipy37yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://knight3xppu263m7g4ag3xlit2qxpryjwueobh7vjdc3zrscqlfu3pqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/noname","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6qubpgkb7vjd6upivya4ll2xvzkx6zdj5bfwfo7qqm4jd3cuv4nwg2id.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitvyq2uedft666b4ezxfvneq36jagpov4shitftjcoro7pjlsqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7tkffbh3qiumpfjfq77plcorjmfohmbj6nwq5je6herbpya6kmgoafid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.lockbitblog.info/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cryptbb","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://basemmnnqwxevlymli5bs36o5ynti55xojzvn246spahniugwkff2pad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/u-bomb","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.techtarget.com/searchsecurity/feature/The-mystery-of-the-75M-ransom-payment-to-Dark-Angels","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/dunghill-leak","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/dunghill","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zroxb37ghsh2xkwrkfkyz65jmuv6goaltcqxohk4syziahgjv5zou5qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sldltcn2d6mgtp66vgmvjptdtwgqyyewsjgwkzjybq3x55plzw4tefid.onion:3452","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r4znrcbthzjclilled5yyrjy35gagoyfwvekiqih7btzrchvqdmgviqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p242scyqdujesnozehk4ecfshk6i357cjywv3vzywrera3bndko4pgyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://5kvv27efetbcqgem4tl7jsolvr3jxkrbmn23rcjzl7kvqycxuao3t4ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nsalewdnfclsowcal6kn5csm4ryqmfpijznxwictukhrgvz2vbmjjjyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p66slxmtum2ox4jpayco6ai3qfehd5urgrs4oximjzklxcol264driqd.onion/index.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/rancoz","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ze677xuzard4lx4iul2yzf5ks4gqqzoulgj5u4n5n4bbbsxjbfr7eayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/jo","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jos666vxenlqp4xpnsxehovnaumi4c3q4bmvhpgdyz7bsk3ho3caokad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/arcus-media","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securitybuzz.com/cybersecurity-news/arcus-media-the-rising-ransomware-threat-redefining-modern-cybersecurity-defenses/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://halcyon.ai/blog/emerging-threat-actor-arcus-media-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://halcyon.ai/blog/arcus-media-ransomware-displays-novel-process-targeting-selective-encryption-and-recovery-disruption","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/arcus","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/inc","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://incbackfgm7qa7sioq7r4tdunoaqsvzjg5i7w46bhqlfonwjgiemr7qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://incbackend.top","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://incpaykabjqc2mtdxq6c23nqh4x6m5dkps5fr6vgdkgzp5njssx6qkid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://incpaysp74dphcbjyvg2eepxnl3tkgt5mq5vd4tnjusoissz342bdnad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://incapt.blog/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyberpress.org/ciphbit-ransomware-attack/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hookphish.com/blog/ransomware-group-ciphbit-hits-iptelecom-gmbh/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/27862-ciphbit-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/ciphbit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ciphbit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ciphbitekvxj27jmtw5sncirfrhxrh4cw4a5qw7ef6o4vqfy4habxbyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sonarmsng5vzwqezlvtu2iiwwdn3dxkhotftikhowpfjuzg7p3ca5eid.onion/contact/CiphBit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ciphbitqyg26jor7eeo6xieyq7reouctefrompp6ogvhqjba7uo4xdid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/b/black-basta-cactus-ransomware-backconnect.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://tripwire.com/state-of-security/cactus-ransomware-what-you-need-know","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.kroll.com/en/publications/cyber/cactus-ransomware-prickly-new-variant-evades-detection","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.barracuda.com/2024/03/20/who-is-behind-cactus-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/cactus-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2023/11/cactus-ransomware-exploits-qlik-sense.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityscorecard.com/wp-content/uploads/2024/01/Whitepaper-Cactus-Ransomware.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-web-profile-cactus-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.kroll.com/en/insights/publications/cyber/cactus-ransomware-prickly-new-variant-evades-detection","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cactus","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/wp-content/uploads/2024/01/cactus-ransom-note.png.webp","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://jvtxo5gdcgloguty322ynfnpqkc2whe2jauc7ucm7bzmgct3k7ogr4yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://truysrv2txxvobngtlssbgqs3e3ekd53zl6zoxbotajyvmslp5rdxgid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://acfckf3l6l7v2tsnedfx222a4og63zt6dmvheqbvsd72hkhaqadrrsad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://vhfd5qagh6j7qbisjqvly7eejqbv6z5bv77v6yuhctn77wmd3hjkyvad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/qiulong","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://62brsjf2w77ihz5paods33cdgqnon54gjns5nmag3hmqv6fcwamtkmad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/trisec","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pkk4gbz7lsbgeja6s6iwsan2ce364sqioici65swwt65uhicke65uyid.onion/victim.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5qmw6mv5ucbeskd3rv6vgn5dqgsuectmtqvz4paukmvhtlazzkuxuwqd.onion/victim.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5qmw6mv5ucbeskd3rv6vgn5dqgsuectmtqvz4paukmvhtlazzkuxuwqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pkk4gbz7lsbgeja6s6iwsan2ce364sqioici65swwt65uhicke65uyid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://orfc3joknhrzscdbuxajypgrvlcawtuagbj7f44ugbosuvavg3dc3zid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://orfc3joknhrzscdbuxajypgrvlcawtuagbj7f44ugbosuvavg3dc3zid.onion/victim.html#","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6i42qq2xdu244a3xp2c3gjvcwtp3hurbajesfnsuga2v3frf6x7ivcyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/i/play-ransomware-s-attack-playbook-unmasks-it-as-another-hive-aff.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://chuongdong.com/reverse%20engineering/2022/09/03/PLAYRansomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/play","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://75tkvxemb6zpyk3fbl3mwm32jklc2sdjacb3kazrioamopbfn2w2z5qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wannafwvcfarw5dmjfqv4trxjtut7l4cguoirpennale6offik42a2qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://v5da6357wpzzqccy46ikdwe7zfeayh7kdfbhrpas4eli4w5qx44i4tqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://v3zgtoh5etfeuvhtgdpiejle4mzy7gdvoygildytlxwoay6qvrkixfad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tahgzc6zcq4dxwsdfziwdaljmdbuqegpoh5sfng7xmux6psih3epa4yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sa5g7pzkbhkh3tthniumj7cz7ftdx7upengz4iq3mnwubiotrhn63had.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://redchanpj427pbextcjriae5ottv4cka7cdrpghauzrwdwkobxdbpqid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qqtncwvlhyw6doanyykioeqit25jajjr7srelr75dgpn2bo3ovdsu3yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pastebitl7cxnftvpyczqh6e6kaeyfdl2sodgeckrsl4idkfp5mqgdid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lolipornqyecnhtrddt54qhayeownl5g6i5yadmwpnmbpek5mo4ks2qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lesg437bhmubeh4fas2mgmnllsfgj2mnxvbljv32myzmj2adfctuyaqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gyv3gai4l5z5cecfqhnff54iq4ezkd7wbivxei4dobhty5jnbbtxecqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://courierccomf4pnkbr2t2a5pvpwnbzc67fbnpt6ncbhyqj5opidhpqad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ceyt3r2mcygr5ep3gbjxasj2vjdcb3jxql4ywkjqz6jy3t37gvw7byqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://btdigggok4d4pz6e3gdvj4ghdnmzhwctuff2jnh4gfanaqsd4omj3oqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6u4fttcz3utppij47uzvuwuh7twvf35c6j35zbjyaar3l5nuiqg5ocqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3fyivvhqricced46pa3xg7tzp3cr7zkca4ig7jbetcw7zs5ob7i46hid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2ebzdvjkfd5j6jjgm5cnxzk5v6c5pyaaylmzluy2h6v7esatqngswjid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://22rob5wgz7e7fskszzxvsyv4kuoqen62cui4wwoyjtsp22y6oescfhid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://whfsjr35whjtrmmqqeqfxscfq564htdm427mjekic63737xscuayvkad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p2qzf3rfvg4f74v2ambcnr6vniueucitbw6lyupkagsqejtuyak6qrid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b3pzp6qwelgeygmzn6awkduym6s4gxh6htwxuxeydrziwzlx63zergyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ysknyr5m5n3pwg4jnaqsytxea2thwsbca3qipi64vlep42flywx7dgqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hbwsxlq3uzknabg2blt7d4mcbu24oriklji36zdqsz3ou3mf2d7bvoid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://doz7omlqqanryonvil4iuj65shzcv3efupqwubkza6553wnekrrd4uid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6jb5avmh6rvcb7vcux7kaivnzpqcrfg4ui4xv2co5vmspgrwll7lkkyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a4gbdvoorwn3tcqijoedvdeukqaqwc6t2kx4gh3gm37gv4p37evvzqad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4xo3cicwo2rhpwr6vkgwt7mqg4oiqihsmoxwlmklf4sjoatkdqjtmcyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://v3r6g4q3b2jpqusznecxexr5aqi42vy5ts6jy6fu3strecvb5c2woead.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gpph6awu7hqsmzmr5sihusjoscp3itwtk3b4i2chwspmka2ikuqcwaqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mokcrzbitq2gc5qcpxcbce43pawuthyaoazl6iz2xknj53ebyb4r4eid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://giix5r763sbxmu442tmwfb4thqbz4i5ppxcqsmnnlqnm2yiezv6epxqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xixkhm6inbg6t5642t2pjafsjsh3eaonpjysdcfvr3zvadlqb6nhryad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iejj6bywviuecjwi3kxanzojqroe3j3phzgplvrdzcicimtcw6xgk3yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kri3lez34pbqra3xs5wxo55djldtsekol6tuqdjqecqzga6dpnjqruyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z7u6dkys7b2aeibvklxga7mldzrepoauiuniqwfhdadkkwwgmv6bqhad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sm2gah7bjg6u2dfl3voiex6njh2kcuqqquvv7za37xokmbcivsgqcnad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jnbiz5lp44ddg4u5rsr4yebbpxa3iytcsshgbqa4m6r6po5y57h6yxid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x6zdxw6vt3gtpv35yqloydttvfvwyrju3opkmp4xejmlfxto7ahgnpyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://slg7tnjb65swwyaebnyymyvo73xm36hxwugdsps7cwcxicizyzyt2byd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eppsldmcnv3ylabsx5srvf36wnk6jrowg6x4unxclv55rnu4kf5436yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://37wb3ygyb3r2vf2dt5o3ca62zlduuowvkkwjrtbcgc5iri4t6rnzr7yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zi34ocznt242jallttwvvhihrezjdzfgflf3uhdv6t3z23hhcn54efid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ipi4tiumgzjsym6pyuzrfqrtwskokxokqannmd6sa24shvr7x5kxdvqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k7kg3jqzffsxe2z53jjx4goybvxu3a557kpsqakpwi6mrvfgcdo55tid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/wiper","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://discord.com/invite/jjZQdDNnG","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/la","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://h3txev6jev7rcm6p2qkxn2vctybi4dvochr3inymzgif53n2j2oqviqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://et22fibzuzfyzgurm35sttm52qbzvdgzy5qhzy46a3gmkrrht3lec5ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ransomhub","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rnc6scfbqslz5aqxfg5hrjel5qomxsclltc6jvhahi6qwt7op5qc7iad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ijbw7iiyodqzpg6ooewbgn6mv2pinoer3k5pzdecoejsw5nyoe73zvad.onion/blog","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sres5y2sze7lqkk5s4ahns5lhvc7nr5hqy5lchbxcvhaty2hnivdacqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yvst24dvz66unqqes6se3p3flxyzbtohaz6faknu5ne3zzeq2jumpiid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://y2hkrrb7aba2pgyvpfzqj3vlhbw7e2wj2t2wvtlmkr54yqz7p5ghnfid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xznhtihjpaz3rwcgwqrv3jipbbivlg5ttsdqoet55xe5a3nbxi47jwqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://red46f427ed4ogc76gscsqrytpdh4gy5reh2g6dzjpbm24k3ns2t27qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ljxmkfr6kl3ovwgkxycdrvvdf6tk7qdhgowcjkpsiocg7j5uuhmszyyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l5hzzorh57w4wp5va4ouye77x5f2apqd6rvvh3tb2a7vcenn6c5a2fad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kfvsqtlnfa5iiweywpubtqk4c2omc2vu4hvy26mhanaahtvpifzuxlid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i2agsvbyoy3viwel7ucjqtzcq3ocsj3jqqew5wlwpxty6uxd455qkoqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hjs27fuzq4j4gzshhbakt274eewxv2qdwmeugjx5eepwoaecczdkiiyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gsqxzyynjegp73imth5p3ug4etgbehd3pb72e4zmiro4st3s2nlkmgyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fmcrlb2t524cpiiqiudbvdjmgvaczix2o5y5uc3zvi57niiyl467qgyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bzfp6qfir7bfqjxnpgofwvfzoyca7kmcsfliot5zzfsas6oofwo7zoad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://biurt7anlhkncf2t3dvvtlszpnnyg3oiksyapcikxostz6zfrh4csvid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bd3atkmicmcif6mliquqdxltjq6mxvagw44gealayp34awtcx3ywlxid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3ysbtsnhldlijvfdv7hwkr2gl3op2d56puspeo4whs6p272sde6fq5id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i4xita2momkw2jitqohbqgomjxqp53pyvgv5gbogvendbx3ucnynekyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yszafmehxkoa7hrcay7cnyogfrmjqc4grds6innadspii5oz6fneyzyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vhxbjx4iaeqgna22kqt5ajlqi72vbm6qcjev3efgr5oiklgptvjvjhqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fvixrjsdk2adazfnz4mrdvr4eznm346fk33y7nos65bdrtmfvw7f5vid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tjnt7x2xodhthwrfnabhloogoo66jrgohgzpta22uwbqznsvrm5tu4id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://toq7bk6abkr6lapwj3k22ffu4ud5jpox7jbfgzetpz7lxb427katstid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xdg53hbpwshgtbfbm6m7nv3ckkduo3dfdwdearcsvybfb3qaf4v7suyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rmr2kgq6vzifnyoaz7jaxdx5t6gsxurbakah5bafatsqldtt2mwneyid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://brclvwefzszko5xrlan7pebyliqdkv5cw75xksrxp772urjytkko5fyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m52fl4estv4lmcvqhssh7mb7nsygiwe7oybhjhny7iuzrzwulq455eqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nr4jw2reeta2u4n2sq4sejjudllir4yfotzf5d4p3wn2ep6ddomtxxid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://445ouvbxlevrxm7phyfr4au3ritat62zl7cwvrarvonrwmququordayd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pod4gkypkd6kykwoht3kioehhpoh4k75ybdfoe6q7hqbphrd77b32jqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cki3klxqycazagx3r5prae3nmfvxmwa34beknr3il4uf76vxd76akqid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dd4djzr2ywfcox3zfvpkpyh3b657hsdwpwv5cfkmdfde2lr3fpz6spad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://davtdavm734bl4hkr3sr4dvfzpdzuzei2zrcor4vte4a3xuok2rxcmyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vqcrizmr7757hjbamfcb7pei2zv462o4ypi2djj4xvy5ax7f2b3c7bad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://shedjytnmsdgyey7ho7r52leod3plffhe3yjmhyxfxxivnunnmw7coid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ransombgegc4e2vuq45noxekkmauikzt7qu6ab2rqsthdyxdpdufbqid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qa5qvqhtuzlyzrrgc7dkepyj34hb4psf6hk7jmiyn6cef7fxajdleoid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://crylcxzmkllsvq3qgh6gmeg3abqcyliepqza2r57o43gsfwomibq2cyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://7vy5mydtkf4hqo3g5s4v7skmyn2xdh4mxg3xgtcqnequuospqtsmutqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xeuvs5poflczn5i5kbynb5rupmidb5zjuza6gaq22uqsdp3jvkjkciqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://an2ce4pqpf2ipvba2djurxi5pnxxhu3uo7ackul6eafcundqtly7bhid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mjmru3yz65o5szsp4rmkmh4adlezcpy5tqjjc4y5z6lozk3nnz2da2ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.scworld.com/brief/dragonforce-victimization-on-the-rise-report-finds","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ft.com/content/22cb54ef-1611-4aef-b671-16316280e3fb","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.reuters.com/business/retail-consumer/ms-cyberattack-was-carried-out-by-dragonforce-chairman-says-2025-07-08/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/blog/ransomware-groups-evolve-affiliate-models","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.barracuda.com/blog/dragonforce-ransomware-cartel-vs--everybody","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/dragonforce-ransomware-gang-from-hacktivists-to-high-street-extortionists/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/dragonforce","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion\\n\\nSincerely","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.torproject.org/\\n\\n---","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion\\n\\t","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dragongo.org","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dragongoztkdfmnd7jkchznd3fvkpdmeh4vhbt6p3usrlsoy5dw2bhyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fsguestuctexqqaoxuahuydfa6ovxuhtng66pgyr5gqcrsi7qgchpkad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dszmdx3jr7vggdaf2c5k4qunt4mxclelhgbtjlgewlkmlnfpsnsg3sad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nwtetzmrqhxieetg5lvth7szzvg35gfrqt23ly46vku56oo7pkueswyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://73h3lxn24kuayyfkn4t6ij7e67jklo24vqzqdhpts3ygmim7hu6u6aid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4wcrfql53ljekid3sn66z6swjot725muveddq77utxltaelw64eikfid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xtcwd3xmxpggtizn7kmwwqeizexflkkyqsytg2kauccau6ddsfa4gfyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dbvczza7nhwdb5kdvkzjtkrcvwnrt5viw7mihutueprvajy7rxhwq6id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bpoowhokr3vi32l3t4mjdtdxfrfpigwachopk5ojwmgxihnojhsawuyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2yczff6zyiey3gkgl5anwejktdp73abxbzbnvwobmrwkwgf3hudpyvyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jziu7k7uee467r2wt66ndrwymmw7tsmqgcqi7aemcaxraqmaf2hdm3yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3ro23rujyigqrlrwk3e4keh3a3i6ntgrm3f42tbiqtf7vke47c6a6ayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ewrxgpvv7wsrqq7itfwg5jr7lkc6zzknndmru5su2ugrowxo3wwy5yad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eogeko3sdn66gb7vjpwpmlmmmzfx7umtwaugpf5l6tb5jveolfydnuad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6dgi54prfmpuuolutr4hl3akasxbx4o34g5y2bj4blrvzzkjemhxenad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zsglo7t7osxyk3vcl7zxzup7hs4ir52sntteymmw63zvoxzcqytlw7qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.quorumcyber.com/malware-reports/knight-ransomware-report/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cloudsek.com/ar/blog/understanding-knight-ransomware-advisory-analysis","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://wwwMicrosoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Ransom%3AWin64%2FKnight.ZB!MTB","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.kelacyber.com/blog/cyclops-ransomware-gang-unveils-knight-raas/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/knight/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cyclops","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wy35mxvqxff4vufq64v4rrahxltn6ry33hjoogydwti6wbqutjaxrvid.onion/clients/chat/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nt3rrzq5hcyznvdkpslvqbbc2jqecqrinhi5jtwoae2x7psqtcb6dcad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://rewterz.com/rewterz-threat-alert-crosslock-ransomware-active-iocs","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyble.com/blog/crosslock-ransomware-emerges-new-golang-based-malware-on-the-horizon","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.netskope.com/blog/netskope-threat-coverage-crosslock-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/crosslock/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/crosslock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/crosslock","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://crosslock5cwfljbw4v37zuzq4talxxhyavjm2lufmjwgbpfjdsh56yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://darkreading.com/threat-intelligence/3am-ransomware-adopts-email-bombing-vishing","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://sos-vo.org/index.php/news/cybersecurity-snapshots-3am-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://quorumcyber.com/malware-reports/3am-ransomware-report/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2025/05/20/a-familiar-playbook-with-a-twist-3am-ransomware-actors-dropped-virtual-machine-with-vishing-and-quick-assist/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://tripwire.com/state-of-security/3am-ransomware-what-you-need-know","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://security.com/threat-intelligence/3am-ransomware-lockbit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/3am","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onion/api/show-more","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://threeam7fj33rv5twe5ll7gcrp3kkyyt6ez5stssixnuwh4v3csxdwqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ulkvlj5sirgrbnvb4hvbjo2ex2c2ceqe2j4my57fcdozpbq5h5pyu7id.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/team","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2nyysjgsfhnwizvbhjeklagbdbjz2z27meao7asl73zcqpb5cr4n4eyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://47glxkuxyayqrvugfumgsblrdagvrah7gttfscgzn56eyss5wg3uvmqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ehehqyhw3iev2vfso4vqs7kcrzltfebe5vbimq62p2ja7pslczs3q6qd.onion/auth/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tesorion.nl/en/posts/lorenz-ransomware-rebound-corruption-and-irrecoverable-files/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tesorion.nl/en/posts/lorenz-ransomware-analysis-and-a-free-decryptor/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/cybereason-vs.-lorenz-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/meet-lorenz-a-new-ransomware-gang-targeting-the-enterprise/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/AltShiftPrtScn/status/1423190900516302860?s=20","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/free-decrypter-available-for-lorenz-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybertalk.org/the-worst-outcomes-lorenz-ransomware-a-new-double-extortion-strategy","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/lorenz-ransomware-attack-victims-can-now-retrieve-their-files-for-free-with-this-decryption-tool","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lorenz","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lorenzezzwvtk3y24wfph4jpho27grrctqvf6yvld7256rnoz7yg2eid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lorenzedzyzyjhzxvlcv347n5piltxamo755pzqpozh5l47kj7mxueid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://woe2suafeg6ehxivgvvn4nh6ectbdhdqgc4vzph27mmyn7rjf2c52jid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/slug","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ra","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://raworlddecssyq43oim3hxhc5oxvlbaxuj73xbz2pbbowso3l4kn27qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hkpomcx622gnqp2qhenv4ceyrhwvld3zwogr4mnkdeudq2txf55keoad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/malek","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://195.14.123.2/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mogilevich","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dkgn45pinr7nwvdaehemcrpgcjqf4fooit3c4gjw6dhzrp443ctvnoad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://zerophagemalware.com/2017/10/13/rig-ek-via-malvertising-drops-a-miner/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.arbornetworks.com/blog/asert/medusahttp-ddos-slithers-back-spotlight/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://web.archive.org/web/20200509171721/https://raw.githubusercontent.com/fdiskyou/threat-INTel/master/2015/GlobalThreatIntelReport.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.drweb.com/show/?i=10302&lng=en","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.threatfabric.com/blogs/the-rage-of-android-banking-trojans.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.threatfabric.com/blogs/partners-in-crime-medusa-cabassous.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/ThreatFabric/status/1285144962695340032","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/medusa","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x4tqo27mrr5q5wobpuvw6rowmbclwe5h62etslydc6wnona73pmqwaid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://762a33bcwneu3i6m7g4unj7xoyvl3nolnbeqhm4jfap6d7uczj43mrqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7aqabivkwmpvjkyefonf3gpy5gsubopqni7kcirsrq3pflckxq5zz4id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hm2hlugduzuxiya5bgrsewfxmrzxbmslvg3t42zdzsorcn2nyfbrh6qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://medusakxxtp3uo7vusntvubnytaph4d3amxivbgg13hnhpk2nmus34yd.onion/227098164ef1fdb119ef537986bbdf24","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5ar4vuckm3k7osdlzskqkaqmqr4jjpmdikuotmlpkrbsxx7ard3xetyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uyku4o2yg34ekvjtszg6gu7cvjzm6hyszhtu7c55iyuzhpr4k5knewyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://osintcorp.net","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://62foekhv5humjrfwjdyd2dgextpbf5i7obguhwvfoghmu3nxpkmxlcid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kyfiw76eol6ph2mq7pi5e5tdvce37bicddhai62qhdc5ja6jdchz4qqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dlmfciajg5s4vliyo5dhs5jyzhi2xr2fnkebul46lpf4xudtqiue4nid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/shadow","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/space","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb4v6mf3ki2ovid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/malas","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://malas2urovbyyavjzaezkt5ohljvyd5lt7vv7mnsgbf2y4bwlh72doqd.onion/posts/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/trigona","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://znuzuy4hkjacew5y2q7mo63hufhzzjtsr2bkjetxqjibk4ctfl7jghyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://aeey7hxzgl6zowiwhteo5xjbf6sb36tkbn5hptykgmbsjrbiygv4c4id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://znjkde7j35jed5qqz3sfiv56v6hyfkbluke5ypi2su5vhx2nruswjcad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zp6la4xdki3irsenq3t7z7pu2nnaktqgob6aizlzjkdiyw6azjeuhzqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://krsbhaxbki6jr4zvwblvkaqzjkircj7cxf46qt3na5o5sj2hpikbupqd.onion/api","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://trigonax2zb3fw34rbaap4cqep76zofxs53zakrdgcxzq6xzt24l5lqd.onion/api","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/paraguay-warns-of-black-hunt-ransomware-attacks-after-tigo-business-breach/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threats.wiz.io/all-tools/c3rb3r-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/c3rb3r-ransomware-ongoing-exploitation-of-cve-2023-22518-targets-unpatched-confluence-servers/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/c3rb3r","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c3rb3rnow2alp26exjwlrs7puvftcxqywmpqedlierashbqikyxgg3qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://j3qxmk6g5sk3zw62i2yhjnwmhm55rfz47fdyfkhaithlpelfjdokdxad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_dk/research/23/h/an-overview-of-the-new-rhysida-ransomware.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hhs.gov/sites/default/files/rhysida-ransomware-sector-alert-tlpclear.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/rhysida","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rhysidaqho36b6i6mvpmy5di4ro5zglovtxixrirky6q3fgack7q5uyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rhysidaiqemmlrvn2jvncdwhkvuiv7s2iu342xnrpeynxoe6r2dtjfyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rhysidaeoxtkejwuheks3a7htk4zn3dfuynt5mqw6oawlcx6kcxjdeyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/archive.php","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/losttrust","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hscr6cjzhgoybibuzn2xud7u4crehuoo4ykw3swut7m7irde74hdfzyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/technical-analysis-cryptnet-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cryptnet","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cryptr3fmuv4di5uiczofjuypopr63x2gltlsvhur2ump4ebru2xd3yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-web-profile-abyss-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/abyss-locker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/ransomware-roundup-abyss-locker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blackpointcyber.com/wp-content/uploads/2024/12/Abyss.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/abyss-data","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jdr3i5np2nyfaa3jut2wnbymrb7dceunpi63no4gvcvr7wrwbqff2wid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://co57gakeanqglrzvpyt2lltalirl3y522hyjxah3aqv4pidlzwdhzwid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gzpjpapbvqcom6yrjnijfyzspfb7oyqt5xni4uxapwfsddw4n4v5wqyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l7f3ny5yedcm7zhgxzy34mihk6jvgwg7m6qj3cqw4nvky7xv5wttegyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ah73jnvhuoznb4n3srbtspsgrdyyde2xszywcjryjroz4wixhwmdrjad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vnsggttwhcofyeh3nxoynxtg5mk5xl4cd7e3c4x62aqb2rj4rfjh3eqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://euujzkwziy777bg4oyiks2x3s5cxlydao6jhpilzdjmjohja3s4v7jid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://toczr6bmtfbgardwgcgbeqntumkxi3y2tsfbcstybf6xknd6cm6e32ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7lpodmzejui2scqfojx3voadc7fgrt2igww6ipjtnztfg6hprnmel5yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://y7fupmz3lx64ilnyvxbu73xigzdtc6fl2aee2duuf546duoo4nurv2id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tycacxbqdhohowofueufbnekscyomymoxbr4wlim5cqpfv72z6popcid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://46vfmzfh3uxc3ojn6z267jmiytfhxzq4x7vvnqtycu5wa6hh3jl2hjyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yehbrr7tnzrcpcq2fglrf73ug2jqhgngxnyv3clyhrswdwmg45p7fyad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bgifgvekggqjfqx6x45e24vq7nm6in54rk36fo6jg4qf3yvy6lfisgid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jqlcrn2fsfvxlngdq53rqyrwtwfrulup74xyle54bsvo3l2kgpeeijid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s5v5hvtk3oyxg3m6afgxeuwlasqku3adeosv7kwwjfvhf22vqiwotrqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ub63kcmphxbm3m64wwhuznbxfap4hlgqtauhnf4rvz23cdnrqr4towid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zngbsq66uwem4qzyxpqb5rjo2xebnbwdku27nhmquryx6ljnbbedhiad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yuhflx7yjk52jedcrtb3ne235mmykqfwc6jarby7lxxgv26ep7x4qjqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ieelfdk3qr6as2u5cx3kfo57pdu6s77lis3lafg5lx5ljqf2izial6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gvzbeu532wwxqze3v3xcxpsbhpvwusnajzahi55dqklbunzgjp5wchad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wpefgvpyuszr4vg444qed734big233itylqclte7usszbdbfyqvb2lqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2fzahjlleflpcyecd245xe3q6tczjkwzcm4fbhd4q4bsun45y2csyayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cfev2mvlqooohl3af2upkgu3ju4qcgqrrgh6sprfxkgh3qldh2ykxzyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vmmefm7ktazj2bwtmy46o3wxhk42tctasyyqv6ymuzlivszteyhkkyad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://udugclljnfcx34amtpddkjggmkfqci5xnlfef2hqtxstufulo3pvauid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jtt4lqatjtrj5hxxi33dczkluouf5wivzdmy4v62dnhipk6ixk5mktad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mflnjnwfinorxxsgkyfel3fqanbtbbrl5k5mqqjwmrf7o3jc6a4hy3id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nka6xgyyu77ksb5xmmovp4en2hrkg53mfq2osql526oe7nybnlggfgid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4nsmlpz4qceow7bfrmarxdqaj7chcqobin3mzb27uhscb2yvjs6j4xqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kceqbaoxmx2czutxty3mq35m5mv46dq66hpszrhbhduj7uwhu6ax3qad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://frheu6drsqpehmuyrdxdrfu5bzqwxps4zlmnuxlcnxskwxcwqsyhwxyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wflff64dxxqvfhd7poarkvkphmibdjyyhv7h4zqo5m52ggsgncmbrbqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2ikvareyuw2wjnc4vb5yteq7d2tkg6k3gevnixzqtkn3cpvej6ajj4yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kn4spxunete4ddz7375i2wpnj4vvkir7wdmcg2pc5yod56lmb54nbayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3pb6cefz6hubgyb2ph7ua7yjzjpxwapbbp5zomz7xmvrjhjfykjwu6id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wyz32kscr2ythqpyjwqfxcaxn5576fdurr7jag44gggnmi4cvhykhvid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cuft7z2xlfogrtx4ddqnjqyerye2qtagksow2fip4xbb5iw7dsgtvhqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2j45tydxcvm44jbyr6krhx77rzey3jtif5qdjak2gik4usoljvvhqaid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l3yeoyhnphtymqua5env7qitedmqv5ahe7waxgndwa64z2c2h3cjjhqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wka7ma7rzgmzmtn65dhv5zp5p6e3uv5sydnns7xsf6kpf7noukhchhqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2mhkqjcw4auxop7auchz2iijcbj63qccwodtokofbb2ul5oejkkt6xyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jtjz6utbmabwcatyomwxaeum7ey7nxs7yooqflxhctnksjqsnammonqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gmxnejtsg3uiwopmnsooxbi3p2nukwemkvm7bg44tgbbnuuuyofqjfyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t7ogwvu74a6flssns55yv7zw2xvssqbhrdbxqrwbahumyzwklnvqayid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ufvi7hpcawesdklmommeeq4iokhq2km4hay3dwh4rirth5xaomle35id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3ev4metjirohtdpshsqlkrqcmxq6zu3d7obrdhglpy5jpbr7whmlfgqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/raznatovic","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ransomed.vc/market.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://f6amq3izzsgtna4vw24rpyhy3ofwazlgex2zqdssavevvkklmtudxjad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/rabbit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/killsec","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kill432ltnkqvaqntbalnsgojqqs2wz4lhnamrqjg66tq6fuvcztilyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/werewolves","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://weerwolven.biz/en/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/blacksuit-ransomware-a-new-name-for-royal-gang/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/blacksuit-ransomware-a-former-conti-affiliate-rebrands-and-evolves/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/f/blacksuit-ransomware-and-its-similarities-to-royal.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/black","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://weg7sdx54bevnvuLapqu6bpzwztryeflq3s23trgbmnhkbpqz637f2yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5bol522hpd3yknxfct2o35ilimxyo46licxxitjvajtvcedltfrj53qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wxqhwn52dnzbrtqeywg35jfvzbpwkw7edlxxoil7ag44plraezw5z5id.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wjdnuogx3mrnnutshrx7nbvjuwqfxnrb32rifaozygwdvs325s75keqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2yxf2ald2c67twt4663piypum2fu6yt4su453naxsdiilpd4m7pgu6qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ng2gzceugc2df6hp6s7wtg7hpupw37vqkvamaydhagv2qbrswdqlq6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vm2rbvfkcqsx2xusltbxziwbsrunjegk6qeywf3bxpjlznq622s3iead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k6wtpxwq72gpeil5hqofae7yhbtxphbkyoe2g7rwmpx5sadc4sgsfvid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ybo3xr25btxs47nmwykoudoe23nyv6ftkcpjdo4gilfzww4djpurtgid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://betrvom4agzebo27bt7o3hk35tvr7ppw3hrx5xx4ecvijwfsb4iufoyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cyfafnmijhiqxxfhtofmn5lgk3w5ana6xzpc6gk5uvdfadqflvznpjyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ro4h37fieb6oyfrwoi5u5wpvaalnegsxzxnwzwzw43anxqmv6hjcsfyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ptsfbwx5j7kyk5r6n6uz4faic43jtb55sbls7py5wztwbxkyvsikguid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qjdremetxo2zpli32exwb5uct6cjljyj7v52d5thn7usmj5mlyxdojqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nz2ihtemh2zli2wc3bovzps55clanspsqx5htu2plolby45a7pk4d3qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c7jpc6h2ccrdwmhofuij7kz6sr2fg2ndtbvvqy4fse23cf7m2e5hvqid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"README.BlackSuit.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/noescape","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://noescapemsqxvizdxyl7f7rmg5cdjwp33pg2wpmiaaibilb4btwzttad.onion/archive","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://noescapemsqxvizdxyl7f7rmg5cdjwp33pg2wpmiaaibilb4btwzttad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://noescaperjh3gg6oy7rck57fiefyuzmj7kmvojxgvlmwd5pdzizrb7ad.onion/login","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.europol.europa.eu/media-press/newsroom/news/key-figures-behind-phobos-and-8base-ransomware-arrested-in-international-cybercrime-crackdown","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.axios.com/2025/02/11/fbi-europol-8base-ransomware-takedown","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.eye.security/blog/8base-ransomware-investigation-uncovers-surprising-insights","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hhs.gov/sites/default/files/8base-ransomware-analyst-note.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/ransomware-roundup-8base","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyberint.com/blog/research/all-about-that-8base-ransomware-group-the-details/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.checkpoint.com/cyber-hub/threat-prevention/ransomware/8base-ransomware-group/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/8base/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-8base","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/8base","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://basemmnnqwxevlymli5bs36o5ynti55xojzvn246spahniugwkff2pad.onion/contact","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xfycpauc22t5jsmfjcaz2oydrrrfy75zuk6chr32664bsscq4fgyaaqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://92.118.36.204/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyberint.com/blog/other/cloak-ransomware-whos-behind-the-cloak/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/threat-actor-interplay-good-days-victim-portals-and-their-ties-to-cloak/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.halcyon.ai/blog/cloak-ransomware-variant-exhibits-advanced-persistence-evasion-and-vhd-extraction-capabilities","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.thaiCERT.or.th/en/2025/03/25/cloak-ransomware-attacks-virginia-attorney-generals-office/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/cloak","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cloak","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cfmjv7md32ovswerbaqvxtlznqk647p5coqghbrhyy6euexrffyo6zyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://67cw3reg2revettu2xfhaaaxhoukctplr6u6mhzri5x6uflet5bq56ad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vir3qwnhwtdriaejfsav6fu5y5ikqlyp5ml345eenlk4pxgabqpf4iid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uss2a5zyeth7sop57zhgqcyafmnbkmoknps3i7anusze77zppp4bf5yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://heac3upmfv33scnkeek64dqdx2cblv7z256aezluyvgtwsxi2o3coiid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xyy2fymbdytltylyuicasuvw7vw3gtgm3cvvjskh4jnzfg3gp7dqgnqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sclj2rax5ljisew3v4msecylzo7iieqw25kcl7io4szei4qcujxixaid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d2wqt4kek62s35hjeankc75nis4zn4e5i6zdtmfkyeevr7fygpf2iiid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://37izr5yow5d673agew22miyy3inbqncuv7gfp5372yciuzvadqef66yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qx2b2on5phkj4jczfpzfkb5cuhxn7wfqbgdu27pmxyzamoim3jqff6qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e7gxrudyx2o733zlernyqqv623wyky5teor5xhnnx2g6dt4vf6jwn2yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u66kitj46wmr5onijbbkg7cq45crcs66c563kyqy6klxm5c2nz42ujid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ztqugnw4upfmd6mu3l6sdz2mfvzxzouhwgqqowyjeedgsmz733dqq2ad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qixf7fqw237ikunw4ey22jsc4deltducf6zn4mq4ldyqab3ij3gehlyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ljrswxeei4isir3s5i7xmlzpx6sabmkgd7mvjrimcqwu7rqpn7bdjfad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jrmayo7rvsx6sbv36djpdge6iwuem67dhccpctera2ykmqr6kplhayad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cii64fki62v2mudocjvgarzlmnpqrfp6xb7korapmdd7qmjpnccgduyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hmxt5u75kj5qxqjqhckgaoda6zndgxcazleersyioat4iuq3ldgmkcid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pbbeck4xcy3jzbu6lv5db3c5n3n44wngmpb5jj3yo4px32mlznziwbid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hsn2e745m36crxj2gmnrp432vbsyarhwvq3fgcyus345dp3oqlrltuad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qyywpuxysuur4exynwwwhu6nbd2f5vpj3h4tjbltfhwd4blamd4fppqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://occwme3xtlnzk3nlhn5ewsgodswrp6pysmmk7kcxqgj4hyiwkhoqcuyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://am3mzzguimx45wxywpukvwf3gobt3r4bidxzntjpsmqqge4s3vi2vvid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ziburuf5kh4phq5i6nmukpke7uruflhlvfexfmjwiwgghapz6ug3ajyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nbfxtlikrnicuht5yvvhlujpnh3spzjmek6eujeyck2ws34yytxjdhyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a6gq22ngckken4xksz5ytl66sqeylh45ktke5pnbzfdksw5sfum5lvqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vsdp5gqwrunytxw4f6dbxznux66aaewlwyenw3rantba4lwyzbckgfid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l3bbtg2p2gp2x43e2nngzkf7ab52k4mef3saowrl6m5notkts7p2vfyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b53cqorlo7uftd3ymxguwnn7rfoz54ryoojjqxowdsaw2bahvuppntyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ey2eak3vq5zbeu4s56m25mm4kvszy2is7gyjs6tsfzmhptbyijkzn2yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://necnstpnzuaovjocmiuv7ned7bstczit3kkvotqxl53xo5rfohndlvid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://piatupks5hai3oafo66xlj2eg2fbzjqy2j7gy3nyhqmnthlrwvrsolad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://puzhh5aykks65qneqantprbqjt6k5bnigmwqwv6yvkxvkfu4ivva5mid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vicjwr6abknvcfjomocyb3koloidahc3hidwt5sq2ytwk7yepwfzlsid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://glrw7ip5gz2fv2njbiqfvg5uiwavllw5zuixko4yrpj5hta7fjwqpjqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jpef6snenchj3rxgugsozky3i34q66vmcoqy7neyu37xxiwxrad5doid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7puvv4qtcrigzbxshqibkpibzbmrs6thb7s6uf3tisqfp3t2ddpp66id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6mw4yczxeqoiq7rgwnpi75qxsjd5jykuutpatflybodwlckoarhfdlid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lulzsec","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dfi7ynmrugokn4fgvpbz5unt4d6k2i5abyez7wnoxxa2ifaw6s5puzqd.onion/TOPDz/data/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dfi7ynmrugokn4fgvpbz5unt4d6k2i5abyez7wnoxxa2ifaw6s5puzqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.nccgroup.com/us/newsroom/ncc-group-monthly-threat-pulse-review-of-may-2024/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sos-vo.org/news/cybersecurity-snapshots-dan0n-and-arcus-media-ransomware-groups","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/dan0n","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/dan0n","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2c7nd54guzi6xhjyqrj5kdkrq2ngm2u3e6oy4nfhn3wm3r54ul2utiqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=hgz5gZB3DxE","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2021/11/threat-thursday-karma-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2021/08/24/a-deep-dive-analysis-of-karma-ransomware/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/karma","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/siegedsec","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nv5p2mmpctvyqdyyi5zwh4gnifq2uxdx4etvnmaheqlrw6ordrjwxryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mydata","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3v4zoso2ghne47usnhyoe4dsezmfqhfv5v5iuep4saic5nnfpc6phrad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2id7ik6lkd3jjjjlaarr3wckrxidp3bgl2jn5nhqciouk2ehuyakdiqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ot3vo3od2pajc7ymxdk6wimur7j7pgs2agvqlzyculowk3yoxzene2id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2id7ik6lkd3jjjjlaarr3wckrxidp3bgl2jn5nhqciouk2ehuyakdiqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ot3vo3od2pajc7ymxdk6wimur7j7pgs2agvqlzyculowk3yoxzene2id.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xszpovfd3q52omk5larjf4y7rziov2oee4u4amcm32wwsxc7ublmdtid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mydatae2d63il5oaxxangwnid5loq2qmtsol2ozr6vtb7yfm5ypzo6id.onion/blog","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/red","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://33zo6hifw4usofzdnz74fm2zmhd3zsknog5jboqdgblcbwrmpcqzzbid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2023/231103.pdf","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/hunters-international-ransomware-a-possible-hive-successor/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/hunters-international-ransomware-likely-a-rebrand-of-hive/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/hunters","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hunters33dootzzwybhxyh6xnmumopeoza6u4hkontdqu7awnhmix7ad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hunters55wwmd25ycahnbn5xh45hvtwbmby6ly4p6qee5pughbyrajqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://huntersinternational.su","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://huntersinternational.net","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://toznnag5o3ambca56s2yacteu7q7x2avrfherzmz4nmujrjuib4iusad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/metaencryptor","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://metacrptmytukkj7ajwjovdpjqzd7esg5v3sg344uzhigagpezcqlpyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.salvagedata.com/blog/darkrace-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://petikvx.github.io/2024/06/20/darkrace-ransomware.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.helpnetsecurity.com/2024/07/08/decryptor-donex-muse-darkrace-fake-lockbit-3-0/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/be/threat-encyclopedia/malware/ransom.win32.darkrace.thcofbd","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/darkrace-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/darkrace","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tox.chat/download.html\\nTox","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.torproject.org/\\nWrite","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wkrlpub5k52rjigwxfm6m7ogid55kamgc5azxlq7zjgaopv33tgx2sqd.onion/\\n\\n","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lambda","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://krjv3wondknwdrlvzp6ktqcqkrlvpme2xjt3fu7ojqpaqgl3sm33bdqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nn5ua7gc7jkllpoztymtfcu64yjm7znlsriq3a6v5kw7l6jvirnczyyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/hellogookie","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gookie256cvccntvenyxrvn7ht73bs6ss3oj2ocfkjt5y6vq6gfi2tad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/zero","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zhuobnfsddn2myfxxdqtpxk367dqnntjf3kq7mrzdgienfxjyllq4rqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://otx.alienvault.com/pulse/6719efafaae058b238f9ca50","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.vectra.ai/threat-actors/eraleig-apt73-bashe","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cloudsek.com/blog/unmasking-media-hungry-ransomware-groups-bashe-apt73","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/eraleign","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qku4reiyfcs2vqq5tow2uprhyqhweo56lrgs6457svr3ej4ton5frkad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bashei5oy4zvmf2letnupwhgprdkjyssm3zxj2oyr6wfezkf3elehzqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bashefe5uezp2jtxpk24b2pyfnnfyguicgrgqufgu57mfluegotbeayd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bashedl53memptddxzb4kr5mnkzse4fmhpqeq7jb4srndswar46nofid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bashed52orwi7qoyvmcfkdnuaogta4inpojfd6cthzkp4qpsq64ux4ad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7bbqrijcds5sgji3kiwo5o5qgxfgoyufykhzfdo6xl3qbdes2e7tdyad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eraleignews.com/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/2024/04/04/akira-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/akira-ransomware-now-targets-linux-vmware-esxi-servers","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/akira-ransomware-attacks-vpn-appliances","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/megazord","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/crocodyli/ThreatActors-TTPs/tree/main/Akira","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/akira","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion/l","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion/l","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion/n","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/yanluowang","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/free-decryptor-released-for-yanluowang-ransomware-victims/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/yanluowang-targeted-ransomware","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/how-to-recover-files-encrypted-by-yanlouwang/106332/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/albertzsigovits/malware-notes/tree/master/Ransomware-Windows-Yanluowang","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jukswsxbh3jsxuddvidrjdvwuohtsy4kxg2axbppiyclomt2qciyfoad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/xinof","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/xinglocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://itsecuritywire.com/quick-bytes/xinglocker-spreading-worm-using-mountlocker","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.izoologic.com/2021/06/19/xing-locker-team-ransomgroup-is-on-a-roll-they-recently-hit-sharafi-group-investments","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x4mjvffmytkw3hyu.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3klsbd4dwj3yqgo4xpogfgwqkljbnbdxjryeqks2cjion5jj33wvkqyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yk7erwdvj4vxcgiq3gmcufkben4bk4ixddl5j2xvu7gurtdq754jmiad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z4cn6lpet4y4r6mdlbpklpcrjdruwb6kiuvxn6gsiuoub23z6prlx6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ibih5znjxf2cqgo737xmooyvmxhac45wd4rivh6n5hd7fysn42g3fayd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ikrah6fb4e6r2raxkyvyoxp22jam5z6ak5ajfnzxutmassoagvr2bhad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tpze4yo74m6qflef.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qfgh2lpslhjb33z3wsenmqrxcdragelinvcpowlgkbjca6yig5zloeyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hceesrsg6f5p4gcph4j6jv6vl4mkmaik735oz4r45lgjfyedsxfoprad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://duxht3zdnb2dmq34o5w3tyzpy2kgylidnpaxsn2a7lcxoofb6hqmu7qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zckdr5wmbzxphoem77diqb2ome2a54o23jl2msz3kmotjlpdnjhmn6yd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vsop","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mrdxtxy6vqeqbmb4rvbvueh2kukb3e3mhu3wdothqn7242gztxyzycid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vicesociety","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2021/08/vice-society-ransomware-printnightmare.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ecdmr42a34qovoph557zotkfvth4fsz56twvwgiylstjup4r5bpc4oad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tahnytazh47jpikpajm2so2jdsjrkx6gfcu4p7bu7u3vfarnpvshgeyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xu66gzit6zp22qvixpenlxu2ok7vzrpqvgkuupkiukpz47va47ewbwad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wmp2rvrkecyx72i3x7ejhyd3yr6fn5uqo7wfus7cz7qnwr6uzhcbrwad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ssq4zimieeanazkzc5ld4v5hdibi2nzwzdibfh5n5w4pw5mcik76lzyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ml3mjpuhnmse4kjij7ggupenw34755y4uj7t742qf7jg5impt5ulhkid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vfokx","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/v","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/unsafe","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://unsafeipw6wbkzzmj7yqp7bz6j7ivzynggmwxsm6u2wwfmfqrxqrrhyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/unknown","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://darktorhvabc652txfc575oendhykqcllb7bh7jhhsjduocdlyzdbmqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/stormous","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zib7duoiglvzvnpjs5faly6bio4xhwiby2lupsnxrkjnx46gmwdfyrid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6sf5xa7eso3e3vk46i5tpcqhnlayczztj7zjktzaztlotyy75zs6j7qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://h3reihqb2y7woqdary2g3bmk3apgtxuyhx4j2ftovbhe3l5svev7bdyd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3slz4povugieoi3tw7sblxoowxhbzxeju427cffsst5fo2tizepwatid.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/spook","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sparta","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z33da2c5d6t4ekkv4pxao7znpc2w2m47llzvg76g6xxgyd5wqqmfrtqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zj2ex44e2b2xi43m2txk4uwi3l55aglsarre7repw7rkfwpj54j46iqd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/solidbit","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/h/solidbit-ransomware-enters-the-raas-scene-and-takes-aim-at-gamer.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sabbath","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/sabbath-ransomware-affiliate","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/rransom","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/royal","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yef4xoqj2jq554rqetf2ikmpdtewdlbnx5xrtjtjqaotvfw77ipb6pad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k6s24pz55gtvtzzpg4riv7zb74vts425bl42zrpmice5ud3a65itj6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://72u5vd67xdff354hhge6wjuvsixxwo3c6bvrdlqstgmjfptpbzwrsmad.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://royal4ezp7xrbakkus3oofjw6gszrohpodmdnfbe5e4w3og5sm7vb3qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/relic","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://chatc46k7dqtvvrgfqjs6vxrwnmudko2ptiqvlb7doqxxqtjc22tsiad.onion/?auth_id=","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ranzy","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ransomhouse","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ukdtdlnhqd5s2vjf37ppentd665fziy6hx7vo2teprwkankxnncurbqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ec6vufhtlxgi3anptyflknb4kpylrooxgxfxpt4ybeklxvhjyzo5hiid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tpo4hhd2vlagaekjrahueakxvmjikfrxrxjev43cnp5gb4ljq67s5did.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t6pz3lfor4iiryloxvbcjdweri5wlapz4trgejutgfmjywgmly3tkkad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vnlavzuaid5livo7pvoi4vrzumxdjij36j2g42y4scawz5uu7rvbb4id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://djgo53imoatb7pnuxfqbzyztlvs6c7ukxsisqmoe3akgsnm4wpftj7qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vc6vhxxlg2tzyjr7zxh5trlpg5wwdmmk4olju3pwwwxkhc37xepjcjid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zq66s26zmbealswy3q3rffiu33mokc454knfajmztn3gdg5cpzgnjtqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://da763kyxwe3mf67gui5tb5igvpnt4w6cps5svrw2wkizyrzqgamdxtid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k3cjkwjpizsevar2u2nlgcufyvm4qrxt5tbl2jj6ec5nrburotsi2pad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bfyonafayb2cufmvuf66sap2ht3inp4kfnfberiaoe5wrrep6mk4tmad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s62ttv3adgplyinn42qetov7zrltff563qncpm67cwz73fesw7cw77yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3kn2i4ojapdjbq6jmty65h6g3b7n7a6mvjco64fqlyrp5d4aapewshid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://532czmzrh6qmtdlb5qgkx5h7k5sltwnfvesz2r4mz64aalybgkctaead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g7gg4zgd2grbrkdlibnnjzjvvnrwnwbznalxle3q5dzrsxsjoihiwsid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5vjjiplv4jgrmfdgwcusmvezy575qsg2jpvsc2327lq4qckuwthwksad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sstqoba32bw5mnrwm27rbkiap37g2y5qjcmosuhph5nuu2ffvn66jjyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sdt4obvwnm64vfwnes45flcmumrec6243kukweocvadcyxhgzlabfxqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q6galqnjt7urxigo5niyj2u7r3lyon6vgjl2u2w2vme4gdqits4rcgid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6odtogvgsoxe4jjyymtdezascllx5kqtirvd2v74344xlqynzhguxdad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vxes6h3473wxne3ngbm7qufqz7yrfnqytkmz2or4c3lk56at5n6c4ead.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hunph22c2k7etozzdipkmgxzvcfn4boj2imlbtlsw4eiqi4hl7laksad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gcktgfv5brwdyzwykxwgbfhho3oecbbddgrzr5jpzwn44q2wssettaad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uvfooehu6f2q3wcccuffagahp4w7qbypjjmffseqypjgorkqpuwql4ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://77uadf5cgivrz77fvnbbrhcvgckimzrvogqzxknhlfs5eoq7lpipu6id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sv2rykeah2bm7vz47l5k3f5otbptgyyeooalayn57p6ncpwbehbk5sid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fql4rjc3cojkhqxebgivm6wwimlri5muxlgb4g34sroeghg3bsc3btqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6mrsgpztpbiqvfh6atsfsdmecpicppol3tukrgot3n2kgz4k3gmakzqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xwgvbowiwiscowkagkpw4qjx62li4z4lhzkyyzhda46kcanddxlrn6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k43uuv3dxxbilh66glvhmv6ym2xkggn743al22e74tb2v2fcq6sbzpad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mbarp6qt6kpkuruwkwqrxqbizna3is3mv3c6ocjrrwxl5ndnkhalkzid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x3iaxenhnhfvezxmocl5ijtkeiom3cchwks5ecvtv6zzkf673rdtetqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nkqfcj26xcdfjezwircbrmlhttr4rbnybsa3wycnpf47g73thbhc3lyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3bqilvjhoamv442irjwdd7fkdvhfg2uw6km4msvmv6ho3lw5crk7uwad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://am7c55v7dmhdbfjyydxf6ccp2cluypvszxmcbdnkpu5vpsp4xqkh2ryd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ecg6r6hpb7dzutga3jsrwm3z2jfvxbkncx2ftfw5eqpbua573s5esaid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qbopuabaqyjdcb74xe2pwbvqnqdzvdvyiqhho5optgtmxinwmrhq7qad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4626donogy6tdfvh6hwuwxvpyni3uwwx26v4pp7eswp5ipwqgpuidyyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cusz5oqgec5a7wsoi5rxv27oswfliropmc2sg5tov4mc7ozkbxsj7kyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://skbpwl43abthuqxvoy5mzabn7lj4afa64xhpbuw2i4k7vvqvmbotw5id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yqotxqmc4gjofhiyp7wvhwqcbc3cszrsvjt4n3uqq3i3pilxhmdxtzqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iadt27m7yxkouefkcgdettyepemal4jins3htxkhpvhl7w2dgapprnid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nklp3mw3ne5h5ndzo6l2riesmseg2wcbj2tgethqmrsknly4q23ziuqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vvocdlrov5pc5ej5iuba35vfjehegbdcgnthkt5xr7acekjb4l7y74id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vwgq5uld5govh3va4ybcda47cye2wd2jnaqy5si56qm3t47dtafy2zqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ns7ed6yloo7w5p2lh3mg5bcmkv3aip6wwn7kagb7pxouetm4ymfvsiad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ajs5cguwcrm7hocjyswds6hm6hamfrp2zoqfywq7or2j6yvycfo2mpid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qq4kljefxqsslnl45bxho57meuwpxgn2vdgonlzhmlebnywhst5fupyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tl7m4jpgd5zrrv5lvkl33viucmgztwu6vvr3wqqb7pvlp7i2mavq2jyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://am26uhnrvhikyekz7h5qgjhv6x4arnzpcr2tw4wxqdg7hw525xs4o2qd.onion","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dbxgloxt65pvn37ec2of3np4rzo2ksgntxtxbpc4q3sxiur2aiohwqyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3wahjydjf6min3z67a3254l3uoftkccvn3or3itdppjiz4oogceuy6ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cwywajs3ounh4rioelodfprm72544iokpmttlbitzxmjgqoummdpmqid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rthvusw7vbnulb27tsiacrlewiykoda4wvefeshtsj4bx53o4j6mfrid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://naurcsrhvsnxotv5awcsmddlcwgv447fvolmkyo6gfgszvtofijd6oid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nlqnxzqixcwazwyib4bft2m6ikjrtihh4qgdtnmpmbi3meio5jj2xsad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cqwdv5rxut5l3blbeg74ddfo6ya65xsxqan7vawffdng6ynd2kulfkqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://secxrosqawaefsio3biv2dmi2c5yunf3t7ilwf54czq3v4bi7w6mbfad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zv7u2tclxajbgae6ba4jkisnkfkts3lk7lxlypmuqktrk42qmo2c7hqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k2xhcuvhwh5cyua5vwa4xjeyvyfatzkrh5yn5kc5munvglzge4cod2ad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kinkwgtp4sfj3tovixjlvsklktjul7v5o55lkf6cgmlnugqlletzsxad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6ibv6c5n6orfgzpt4apgqtrbr3ot2ninpbpi6hwolq2lzcgj6lzj4rid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://43xvcojnfpqlbjxrbuuulyh3xtqrkl3qboi67xxd4jsigmpccbhxcoid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l2abuimje7jrypvv57p2ihf36rza2etoobyvsddgxqrsssn7tyb7txid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yj2xh4wxcjncsgj7642jzky7uf4mrjcp6zrcdgxylxbepyvgv4meljqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ozokx66qqmtvjbkbkudtfnrfy5euwug2gbekqm6ug42j76knmtzcrkid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d7akeguwmrxmrg7tgzx7a73mksq3zpcjjk2c4jibfhmvrhhd6oprsfyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2xipgq7vsu6d6llgg4tr4wxwdc5tbmmtx3jxfax3kx2dorkcnzsimwqd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jt772jtwpfrluifvz34ti43kfgv6lz7bgiviwopl73slo6a3wetch4yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nxml7szv4m3hd6gtjjg62xejyusbbqvmb3thfwaa6wimablrzuk7p3qd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lc6wrbsdvaayqkhj47bjkj7mfnaiyvsnufmdnkhai6de3uxhu6bssgyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://utijlj5t2xamyekjr3ur7vpdnttaqit57fher2nzibih3nqil75jhjyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://n7f7ic7islqbyw3vzans3mddgaooirbf4i75tvsfvxjvni7vxanwczad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uiecrea6byqjfppofxjcku2rjs6qxeqblnc7ljveopbtd4ih635saiid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iwtkvmhwx7g743ytqj6yiibbb33a3ycezssyn6gai2hny7b2ynez6sad.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mdpkohdcvgyiexi4yihiufdi2wmau5yd6wjr7rituvwntifxuh43deyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vokr3ancppaevval5hwpqpm43szyj7nysfoxqfsrc274jabs5m2227yd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://w6kf2ktnbzx3hha25snxdwg57ydqdskzcs5tdrdztajb2vn7jk5hzrid.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uax2s63op7lboqhuxscjfiwcea4retnus6z2ph33cd44dyqdsyosj6id.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2ntyvlixm5zzhn2zgowgbbu5s6forpttomntefg5dapivr5qwokkyvyd.onion/","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dfhu2iceszxurn7lf5mb5xhainmb7vulpizncjomtn4w5j5cv3pz52qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rivdgsucnasob3iiux5j4g4ybqz6flxgx2vz4h6i2wfu42hbbmwwcuqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ib3ru7m66tg37w6o7zxe4upntw2p7236c63wb5n3beeapiuor535vhad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tlr5h3my4jyvwgmyrvu2oadls2o3f377cz2bqnu3g7oaycofiweqjfyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2f7k6jhxwbpiyuomb27eywzollahlje2xph3t5wckupkoeluantatbad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x3rx5uqoohqzfcnq3neiqwunb6eh5yc4ybu26nxwqqltclkvdvwbprad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kp5amzgfhwmpn26vnmx7h445x4xb7ofaxitonovt6mlewq5bpawkq7id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zz7ez3cgy6o4eehu5bc2cs7t4jvq7j7duragx3pfrgnafxui7l2ybzqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7izw24yz3udwtvfoq4lshv2ibow6jahx4lojoxsdt2nkqzzpr7osoxad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://374ydckkglmslkqy3coatm5nn2rk3hg43lgci4wrhizhr47zfyfbdead.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fmrsmdsuokgzj5oujoqcod23gnvkqptg3vzbcqz6vw2ci7gonigijuyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gomf6ssy2bgsxlfbawncxdydwa4m76i4gzbwusmdwepuamx46uu6eqyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qiu5vqx2k3oyq3aeyz3pieh6g6yjzo7l5zofidxfvnahy3vgb2vuy6ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2ynd4lgi277los7ykngk3my3rx3ehitx4agrpomrilwjic4iqisbikid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4hmvksa7vw5x3mytrguzcjxvj3alfbapxaekudmiigpztqxxv7dynnqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xbpdja46coptbjt4a62lintyk547q54k7gubekbtsyqxivie4vln7syd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2yce6tllc6xin4kucqr4aynscfjsg7l7pgz3pv7rat5o3vjeruxpknid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zdgj7z7dhmn5xgtrj4wh4gsf35hzst6blunfm3xf5iqpq6msiluxmmid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jhtym7doz6dt5xdq4dd5wuhmyaa6dtesv4lrnasb5scwofguffiewcqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yiqfcld3loz7rh4kcmxrf4azyeqa7sonfyxqlnjjbxmmfxhzbm2vsjad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tbgdp3msmgiddu7yhdo2fsuhlaggcoj3oez7wdmofznqm4dhevpekeyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zlwljlbtakummd6biufuvljgqwbpvmrftd5kjtzxwjtn27jdzeahm5ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m5ubrfq5bgwcckdxb3g3fcughlfntzv6kcvhw7bdkqsx7johtljefaqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4dmex5fuyap32y6lkpglp5cy3ivoua452o57cezsxhfdlnhgvlw6sxid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4s2org6ns4uhmamkr2tshq6f6auusktjjdoo23rskwhxfdlxlnx5rnyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vksaeydmtcfee2qiwbdxb7lijqtwxzy55g4ft72vjvmjvxyuppskdwad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oxbwvjzd2oc4cb4jkrnpwbuvabyj2pgmoh6q73jsuq35skfbta3p3uad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4sw54rh5et4adx7oj6sl2kqkra243dq3dyhlxmoyt7vez6vncufv2gyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tgcj6ad5dqmuayc7ldm3zw4bz3hx45nf54oe7vqtfs4hai4wsgbnseyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://obrze5nyt6pmx4ptffqliah7hxqb3je6jlghg7ynoy653nqvye43koid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7kobff7iod6tmnyjgoqc4o367ufky2cvda4knnlvo2hakdzy4v4gffqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lejfkugm7arhigu2vhtcursl564e73gjrq23upuaccuafbj73rgbnfid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://77k3qrvleqx3jn5mx73fpmhcfpk3pdrjs7tkgaxcsf4ojgizfhvmlhid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hqvcotd73c6hjfc3ogukvc37jgs2krmowyposqudq2rodtawmatxpyad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lxgnxg3cdv4uq2ps4e5i66bykvol6rw7bsvr5chdpksusiqwhyx7cxqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ftgvamayqmlyjkpf3dosoyfafbfpxxtxagsnt45sqauulckwupr2guid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uzf4tt7buqhj5xzb7jnnmsd4wtufua4qyzjgjf4sn2vwniiqz5oi5lid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pi25hxaofhsoxjh5g4e6iqcasoynlwygevqkbemzaalkyxwpgk77tqid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gxru2ucw4yxkicwdiee6wpqwkogh2x3scfcnhcgb4lcyo4uid44734qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://enppltlenqakx4lyekcz5xmlhybemrii7l4gjnijs2mqvwr26jp73fad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jv2txdk66t6ijaugve3kte67yuahfaebrivy4okuqqvriaagsvi4pgad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://py5fgtglinssndrkrnbwgwjzxlsxl5zbyr3ypdiijgsllht2smznwpqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mo3nqtrrrvguce64bvenu25uciry7buw2hzke4wxm22jhr57zmsj65qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ondvd45cnciqs7fzu5ewm5li2ib75bppxjaapcyilceauq5xpmzbswad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pol7t4rw4dymnyruiqkckbeul2xxntn7x3sek3yw553pxbwag3n4eeid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xf7e5nnpiemhu6lpb5f723i4amgshhj33ny6c5ctbdjtc5duwtortoad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://atpimkcvvlvyizwazff6r5ioq6nnb7txijdwvlq4i6d5b7adx6c5egyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5aidibsmc4wt5l3lw4k5wtfqopbckllb3pntw7xw4qiem4a3eeacrlyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kcikcoor63fa4qw6gx7yp2jxnvxbsxxdwd2znz72izt74rpdjfha2yqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vxpudlncob2ouf6pnic5khdwdb3j52ersb636c4xm3s2p2wxg6vyi4yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zabhu2tvl3elihuccjzl4n35m27smgyxc5zkbgz3rcewjn6tjt2ihiad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://otxn2ad3ypniexesajgomjnpwbkdjdit7uii2zv5v4c4u76r2rnlrtyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://texnb5y3cjaf2srwfjkafdzznqc3idjlncqiiobhq4yzlqw6sgvbljqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dj7ww4rxmvy5vsqxqn557p3nzjmt64q4fg57tteono6ezzm3nsmhgpad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3vl65cye5nopltxxds73drcjddfq5wxwc2o5sm2rq3gddbs3ce7vn5ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uiw34f2i7x5lz2l2r33a23h3q5h3dzvrmwyz5m65uwdgkdkappn7jkyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://74zmq5sfydbci37dwwqd3ybkosw7wsuq5ymmc3fvyely45mtkvamh5yd.onionn/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cxkk2csneiefspqrv75vw5766sw56t67tluuekk6mm2k4f7vagh7qbyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mc2pt7cfb4p3xojzsmyzt2pe7chobgkbddpdqxdscks6ttbki77xl2id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://j3pbdpnbkib7evm4rhzq64vdxqd3tfgr2x25v65hfefmlukah5nfpeyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cwiukccdpixacamo24wkdkv4pgu62xtnbfuvauvqr5zjcr4jg2w4dcyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4bzbm2ifa2hffdb5celerb43mdbqoi6hcso3b2y4b6stdiiu2dww5bqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://scuj56wenkc4oltbf35mxjqprwpyw7hfy4pwfwb54nfjs2ukemfodnyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bqj4qln6jluwlsa32qjen2wlpgnqold4hgpkxny4x3vtsiecvdphwtqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://agx3kdwbkrff5csgkuf7rl3uytbgraqyb5kmr2ltp7pnza4puxgsyeid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cdalrbmvj36y24xbejqxgg6htzcgrbyf52ikoqgjwxvf566uycawa6id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kd4zqe5ao4wio7shv747uszayc2xtpvoxirs3pnm7nrld5462jzf43qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oplhizp4lkdxmrydoz4ixngotsqialrexmuficduihuktq4777tlb3qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lpx3qaviraf2k7uozkf2qi47beenvt4dwyr2f3zgdwjglyywhtikiead.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rfbka2dt27wyuzymonzzx2zeaohx7sejti4gpihhc22hv74hya4h4vyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ggyosmcjq5vw7qimqhn2bf2gbr5zhdqmrfl35nnki6q5dmvblcqsmhyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7yrwf73tckb4mtt2kms4qc7nr7rzghu3jdzycm4w4qq2nwrybi7hq7ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uv4sykhrapb2t3mnhw6imkbdym4fh6vstwcdsvbtzrvdwzcd5zzlylqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://omdcwhef4ztuwhdiv3dbcgz2iyh2yb3gkkbusgvegbyjcacctahpxryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uvl645c47e5bozdzrrtjtm6pea5oltef63tsewz5ucmubvsj5i7meiid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://57yqe2tksgsmmwaqrxf45uaqy45t3hxu3dcnywjdks6lhtfztkpx57yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t7ezcjqq7h24gwswhyde72x4gkqxsjeyt2fxz44kcls6ipm4wd6bmsid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blofpgq5q3talt3y2w3y6r3focrtrk7ugmwl3e6a4pjuf5t2tivkxbqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3nr2abdugd4mqabdmhialw3nbhol2qpywsphkocrhp6f7yxp3cps5iad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hyinn53atxthbme4n76ry76jiaohqd6uk35jwni32g6dqtqkaejgquid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jjgql4ddcs3hk5ptmfrpjriplialbjwi5a4tekffbfzv6n6oj5bmklid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oujq7kjgzj4r3fyvsb2wtz6bxycrvawqdtj6zqgljw7u4hwqsak34jqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pnhyueueqsog3gbjuq3o7ixqbcdctpqnzv4uujsg3j76nt2bsm2p3rid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nw4f4x2gix7y7y3nizwj2fnf5u4tqy2mwej62r6tdqye4s5ogrtftuid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://swnoxbuqfh7dmbqzaigqllkkljspipnvft3a4offxh3m5zwxg6ob46ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bffujdbkhxfs2y63haztye4txuqgbkttmtxuxzkrlnruyioak5aoohid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://aw5q5nzdok52cgprlzik4n44qstoajrlbixqqukqqcennjyas4x4opad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://helc2q6kbiyz4cwegzlp5anigkbjsbowjxrjxv3j27rjbvycgr2qd2qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vopa354z4toilkjn4ileaf6rinkzn2givaokvj4yguq5kbiqoulxnzyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m7vtnbsgctdcsccqmpnmi6igg3pcuiliqqqsq6uonkzg4blpa4eysiad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nuhnnxg3owawo36mwdffyblbzplhthfswny55mh7yhbxq74en6jihyad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q2bwuip5xq4qjn2vyevprcddhk26cigyqfqfu6yki7korjys2rposaad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xlirefmk3w2gsk3n5mkddinbfdatk6lhi7fj36knubhtoxiaqyus44yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ge74uts2ybu22kzwahiayovxelbq5fwhywl73agev5w4fef2e5ikplid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gfkngfw25qwhd2sn43x7cflcehk3bb7v2uifjndr2sc3k2abhqs22rad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b4k2fi62ctrid4k73itusuvcz5x5yczk27bpqdrsvwu3nl5mnz5dg3id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q2injs6dqvzemu2kkfpk7u3lsrcn4rddip3h2a7oc6uqwq6vjnduamad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zohlm7ahjwegcedoz7lrdrti7bvpofymcayotp744qhx6gjmxbuo2yid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xw7au5pnwtl6lozbsudkmyd32n6gnqdngitjdppybudan3x3pjgpmpid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ransomcartel","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cartelraqonekult2cxbzzz2ukiff7v6cav3w373uuhenybgqulxm5id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u67aylig7i6l657wxmp274eoilaowhp3boljowa6bli63rxyzfzsbtyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ramp","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ramp4u.io/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/qlocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/qilin","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://of75lswvbla4iwbokpz7cyhypje65c33smpxozel344a7tyy3nyw7iqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5sgebn2tata7qccie4vnxnb3bdrm5yaced4n6a72duojumm4jnjx3nad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pkq3dcon2m6k5pikrgt25jyakx2mud7z4xxa2nbiywzdsp7ea3bpzrid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ppkc7hvvwou6dba7up5i3gapxrexyhvcvqfnuch24tbhyw6aabus76id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7wv4zsx2dghwf5cnsryruzd3cljpqoa42c2t7oz6rtwzrunohmda6pid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7zmcatunkz7vfylppn6u5rk4mwxkabce5obklzb4nhd5rokf7tamz5yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t2yo7hhysohycpmkyum5z2vjmgrvp5ammbdgbjiwygth3qaydwidfnad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r2yitibhyvqoriwjc4rfmk32pcjtjdlniqybylq6wdzeips26mhc7sqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wns72bruvywwz6oqpzhgngywqpe2tfsqphuzvg2kiynu26vtodp4bmid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6odt2nvero37jb4hotyw7kxqzbcxsjj52e5iznd44rzos7c4se22erad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3rac73vlekbbxtfzpkro4za2iifqd4r4vixk3ox5hjgielwaoxzed4ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://72bdcqjz5pqlcsh5jhvwo33nnegwcvutchigxfptwnbh274ppyge6tid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m7oqr6ud3smibvwihcewdrd3725zufalfo3wjsngwcmyfursgdk4p2ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bogjlybsedwarit7tf6lri5rpovue3jqthwc5jwlhnilylzpn6rxx3yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://aj6j4fuwulvqccdlqn7zo4hwnwwg4mghvqinqq34c4sh63oigfjwvxqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://opwi7j2c6n3v3uztpqadrcyvrnkdhkmjt2qszmjgvlmhsthmzkr5rmqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cttuobz53jm3i7h5ueopjbzsgee4lhligw62x6uwm2nnu6ypgjijooad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pbsdmkdyz774xa6zdydqqckx2ov4vaiy2l3ynkaz7jvuago7rmayngad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3cdubz25xu4qa6vbm2z24wwcesazlz2fkwdpoiclsm34f72xyze6zvqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cv6ow2w4j55shqukmuvuy6y5vu7peezv73etmmpetdf4sxtegvghokid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5we5da7cyjc6ajznlxm6nb2z6tsrc3tpxwtdvfjlcxeiadt7cr6dquyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5mlkomvedkknnnz24ujloyc2nng3ptbygtriwdnwfzfgvnk4rumrxfqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6aqz2sigsr6qwwfkw2rexwap3hq445skkqdhl5soq6rww67cg6s5d3id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wqh3weavjwvuok76ffue6a33hvvnzjelmx74z5ptb6lgmg7ky5ayxgad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://btqswtq6f3hsftand7czaq4nur7kutaprvbau24d7jxtq4g4zqueiqid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k4ed6sjnzwwogc2gtbbqn62bqr7vxezpa5f26au3iekntgmmedmep5id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sqlr34glt2wwomsxynb5xs6oxfspsxqmpaog5ipyilxjcnq3lsygdoqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://irn47vggbnbmykomwrrmpspdrjt4k2sezbw6pvu6dnw6isfrhvnfipid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s3suplpvzivdlv6smtbz5t6ygeptq6buyxi4eerxisxdw36rusu6u7ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mpazkeiwkmp6cmlrr6tthjlbxiv4dx522szg4m6w3btmmm4q4qcddnid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4irxs37itbvbr6xwbdvwok47zouts2t4g7oswq7hzmydrlctudm2alyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wteumafxv4frl5dcdpedn4cczmdpng4i4zrgx54gup6sh5qtydem3kad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gypxk5tpahoboxwtgcugc4dysnpavesfjtvhkmb2emwga66tukqxivyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5gyqtm5s7nywuglrwdcolddvwtjz2cxwlwjfzzl54nhlvy54oyyxrhqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b24mgd2odcxgnhtcuzv65okz6werzn5jj6elwjnvkxqyk46q4i7wybid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xlmxcglxvrjbh7pl45i3vxclc2ubmupg4ocpyvbv4dydujjt3n3h4iqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xm3ocoxwvdxhazma2jlo63a5gx4v6pq6glziisnr2yfvhdrbftfznrad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mgeu63cg6hsq2wuqpax25syekvhn4hunvgwv5gkzl4t7gsfs4negdpyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2b53yjyng6hywq357sjfeln5d5qc6booypyaa4balftuaxvzkaom5lqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2llagsjwp4scv2egnz6ngocfghybzpovkfpfcan7kexro73azsygn4id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://clriuchoqbykvgsxn6zv6g4lzirhjtocyhr5p6y65yjwpui6h2a7kdqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pqbny7o2ssuxjl2gqymko53i7zwkctwss3rdcf7zvdpsc3mf2u4wdjyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ud4jyiep6nn5fg23stkqgexnukavfi22zr4odfwbk342rtforzuqtkqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kjx2gxjvkodbxwhnynob3tfs7vvgepmystregon26lhjqj2owzixowid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://esnpzpzm7nuqqxuzws7h2mprqr4nvgwapn4szhrpdc2ncbw7tusateyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yvbus6jhvq3d43blp3kmgurr7b33srejop5laqzfm3pwjs7nwfc4opid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lsj2i7u477aufbucozhvnsgm6m6pmhethtughyy3l7ol2xd5drfjyuyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://va6nlvckdptcqg7lstgz3r4ngw2pgl5mwdg4lxlocce2e4py2vr2ceyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://djmr46jucdawayh3hvx2nq66iyt5h4xk6tctb2soynylwttpc5o5ivqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wqtn7sael2wpscqogrfpef22frgawqeaoryjavqtbwcelk5kg2dszdid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3rim2ptavbrrgga2gkva7y7ds3rns3umajsztkirsf3zsz7pcfhbegyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l3uhnb3ogkof7qbf2tjwuix2llkrdge4ulstj3xf5zv6b65wiiwu74id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vfssj4t2ccjjkllnxh74nejtaycfuzgbqn27svdwkkmi74wwtn666zqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dafroyuy5o5gv6zdvg6z4e3nuz3soar66n345sbvnenlw7o2fzw4kyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3a6qvawccboloqyj6w4jozpdeaexvmioqfb3qqeugfm75r3tzyroukqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4zm55zisi555jxttutlsqfgarupllviiruvspk7mywd4btitnc2g5fyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3vqoufzccyzfnzk7v7eaw4r2ycj24vaiagh2oj47u5dyosko4pe23bid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gse6ahazqyjfrbn3okepiwwk26vod6ejqnrottisvyilyk7spmm74uyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7etv2zdtriq3ghxhckzgrflekrki3tgfjf73up6uobq5gw7b4oybutqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kqgjcecichrspy26dpzlagb3iz3dvwz7n52rtxrmizcg626pxexf6wid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cr6ey2trir44myajh7pu4ljqlefmd34kcgjwdpu4y22m4ivit66wl4yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dkeb73ishuf4puox4gscwtehindvjphujpcrnkfadbgmflxfjeaorayd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://min32ui6aqaf42bwizkfw5cxjiaasmtfuochi5npzwi7vljhcv2xbtyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7i2alg2nifi7tmqpzonijlvgg624wibkbd2kjliyvqggs3pbxnpgrkad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fdinjg325vnlkpwlmlezv5wfvj7c4zrkwnjcult3k6wzfbqnih3xs3qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cua54ykxywaymhcdvgslphln35vhtr6zkqhlv2mp2awh5wwty3sscnyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5excxn43rfuvqn2enr7j4vibhwqf6abfcy257kxoy4sukttkwmp4rsid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gezok5g4gsp6ig3hcezfzv6umz2fvx644miypojibuqxswo5saebweid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://y2twi4ccpkncrvcmnpaxaifcbpfd5alspojjr7ezrmfns7cgi73dmgyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://til4f5awnrznpjvlu27kjjbjzviphtvyq6u5krfldlm4u6strqnwjiyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ge536nltloszz3shnaghdk4vaxsvtpgcl5iasxnuhbavenmnhjubpxad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://icpia46mmjp4t5oesni3fhorvyb734xv2cglw77xt3ktkckmjk2ivmqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ni5pahrlrklkhiiqbx7ps7pibhgqhyhdd3wbnvyi7iwxbtkyzvcsnyyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gsw7dnxebi43efyuoookcp4vp7xfppecrrak7wbynzmmycz34xo3o2qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bxobwadjcfjmy2af6qu45tvk37ya6r6sltwyrpvrtkqcwti33tjtyzad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tumx6e7wjzstctfiypww3ej2qbt4nnkhlvdklfxopj77n3k2wu2usaqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tlnhajcnrni7mgfmf5qxfgtsyiw7nht33xsy4jb72ckpdowvdtxvosad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nssopy47u2aj3hcsvdw567hkkmpmsdvn66q4zokayzcbe6hyxau6osqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lmumc5wkplrc6qcpzur3d7uft5yddaobnczuh3s4ekxrh4rst7o4hnyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tocymggk4npjmvfy3ngirumb3735aj5cxx44jvrtp3mrwwmec45zbhid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vt7agprzwcmnkjqj7n53shv7icvgirwtgvjezl6wjnziz5fyfsrbttad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vgg5x6pkgnogy4pmhhspwjnydjldpegsba3cbfwyqylbmn6365iyzvyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sp6aak6qtjiismi5dx7gzvr5qxbijsifmogmnlvh6kuzk46s3gbx6lad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://plkzemgtqs5jnyalikcnrumfc6xtibedu74hmzskblvjrldgyqykl7yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3iadnmjhyoshvwwzshtgepjueehznoniv27ft4otq25aqsjj5qmyikqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cpk56ewbfwvv6zcf62e7olu4h4bvfl7rbdv2unbjs4ri43qd7vzpgxid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zhglw2uts4ksqgauzqtlfge6mu2f25eq3ustyhn7376767mr5vizxxad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://prm66ou22uzlntigywrfwfgv5f3y3zkpase6ni4v6vx27xjsrzckqvyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m4myi6jcuaohdudhppf2eks7f2c6a5ccvff6yaq4qtlpdymjuy42mbyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6qclwkzcdv5dpkqn5la2xbxjlehvt4p3v5vp247bccxv4mvr5kwf2syd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://msjsbmjv4lbolmylerisinxwwxdpv5krfsarhsfcu5dxdrdrmccn7oqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x33caz37b7fhtsd7veyod3bneipin2fpwjaveo6ibnqynyc6x3vojwyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tc74h34gjh5af7ziex7neyrcyhj5frf54q3y5yztydenzueb2745yayd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://57sqjtgdvvwn2r6qkjdowqgfsloir26t36cylhklcws7tjn2igxbe7ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6lrxiqscnydhh6ecezst5uwklaijb6zqd7gc3fevkizab6pwus6olrqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5qcalthkbchk3e25x2l5mjzdd2wck22c3mesl23mvq4k2tcjdyfvhaad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2wgkaf2f7fxgpybfvsfu6xf35tq6o3dpninsintwpb53sdmwt5ryssqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dfcszejizdyp2n2win7trt2yfdigpkoicahm3l2gwotkyajepo5ocead.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nncnktdfnyy7v7aixo437wdkgcbecpnpeawen6gc2gfw2cn2fgibrlad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://idebr3oxfxzjqri764w2f66wlav7ypplxh2oce4hf3nsjpna46krf5id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://as4i6et5nf2ee3qxmr56ol7zqfk3kxkfso64yc4yspdqtebbux45a2ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s2xvhoclphip4lyi7dtnxq2zjgziat7bajloh5inibzkvfrhsp56vqid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://72mtqnci5wl5xylybwe4z3vix4fituieaycqhrsw6ljieiyfymv6izid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wqc7xbdvwqcmddwhy2z343cnawox32uuw6bidr5fuzlcsospyltwbkad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mhxzljefeb273eo57hjpigdkae62h6zkzkp64bo4ysehi4ah32xjywqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7zrk2m6nkr3akshaasdvpc5vsphd5lpcdkxodp3dhbagy6j42m25pkid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ac5vcjjq4dk7mvqgf4tkxfipqj44f5r4e5sxh65qbjx4lbhilwr6ddad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mqb5hxeq64otqrfro6kun3g7iikgwstmy7ec3pukhqsfaa2eupud7fqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d3s62fytuwzerl6qnw23c7qqxmsm4z27eh4fiaptmwmtz5fuqluh5oad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c7pjcvwro4tncaosfwwyvkw23u2gejjczeldgwzd2snirem2uz5eqtqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://75iphov67nj3ehfsyoiarzeo7nymo2sf7cgoycxk3ldubbau3635afid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://prccrijnexj7ys53tmtfn3kjzclwmmr77lqy73bc6hmt5s6gb47bgwid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z4xxrmrv6e42soz4m7f7c5lut5yw7uhn3z3h2axfsrzlbdlsmt6mukyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g6vaxi2xme54zbmt3gewcbdbtw5dbu5cc7vziaiks6ivz4flagahk5id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7w6pbuises7kljuwb7h5r4m4vdqm2zqfmpt76mhtkkwi6wvm5n57x2id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jd2v46omzfxbzpkmlvpz32ee3ty47y76u67c3tg7ku2wxkegkhqnnpid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mtrudrbcmzn6deejfncqm34yyl2yc34qsdshr54dnvrtdad2uvhlqsid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ott7kh7u7qu22gqqzopbc56744bqqvl3ibvoe7domx5a2aua4lldkcid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e54qu2mlopbhpas6expkkg77wsmgnrtruuwuvxkjnetcec546ylyabqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rl6ukoqptt42d6qs7r6y3w5ozacti4irtz5e3qz7pxo4udn4oplb7hyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p6dqysgft5e3wmcbpjqaapannvftvw5jrqjtzutmbvyvlyairvw5vead.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yngwxmkzyyfi22q6ezyuek2dcz74ahh4a3osnw2xyhjamn4utddyvxqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ecldh2zc6rjzq77xswgey7aktx2elbantrzagykdg7fwbw4slogr3dqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sytnjxhj7tfixj7ocvewgmbj2ixtga7dete7rnby55i5xxp6or5g7iqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://takbxhd3rg6lz7f5lz4oau44qfklabdeeo3qxldxx3okd6qodmppnxqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sakx5tbf44g34uqxeqsw47ooqn4wbeys3walwxdpicfai62l4g3wflid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6yvv6sagns5omr5o6tkh6ws3ipap2ihl7dwveeguzydehlk3zzxoabqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7pjel5rdskmsg7xhiucy7hwpltfpia3cs4plohcy665ptux2ewyrrjad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q2llvdk6tbo2vgxk4v356ootxdrffmsjnptvhb74xagwi34xshryffad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4anntjcjpl6u3rgfsai7bbf2j5khrqdpjrbui46sfgcr3ajm53tdprid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4keexy2gskyc5l5hchxqiq6orxhpwws2mlepl4wplifzxspv4slh2kqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://temf3n2t7daufajjtdcx4f65d2jc3ddmkwfjtnpkoyd42omjyguyw6ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://odv3bn24b7yndkybghc3nt3mmbv7nsk64hwyccaadpjb3ufagdweueqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2rqfssorsw3myndd7f3lwglrdwvcwllzootbxiauxpohruxj6gj5hlyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7pm2ot33sjfzrtftwxiituqymc4o3f6tksxt54fgo45roor4zdx4l5yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://effyotonty6zngtmd764pkazcgj372nr2ctme2ssgswnp3nas62fcryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bndunnr674ypywtzzs3eksoatalludrjwmaniot6rer5f5aosg47fwad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3ilif6dkjju6q35edalfyxrwsb2c5gl4swrdwcssch3yprwzhrpp2aqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g6pvur4v5o3u3q6kg6r47dpxih2wbt33ztq632lciupny6oz5dxd6iyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k4edbivp7dfzcy6hxis7aa5wwecd3zzabkubuwieeoqhl7fyigawt6ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://h5srvq4iihhvossyrjf5ucgfolkzm7ms7he74maejabfkrbsp56yomyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://h6zsp4iz2ghvegyxibtfpgx4of3cvmjdhdyux57sdo7qlrxb77qyyfqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yjy7rkjx4ywkkcy7nhriva3kb426qtdfcquhbemwva7nqh2u3ucxopyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b66mcxl36wqm7vg2nsnj35y6ei4if3wcmzobobd6h3rkqtikkvoxloyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://74euknp2zuen3o6hkjfotj7tjykajs6dzaeahe5zevksrpdjcu4t75qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://n4u3kpi747eiwrs5s3e3sttw5kb57v7xz5mqzqizj5ruvo3gptqzfnid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2gf2vgrmj2bjrb7gcj575574guw2iefcdsno3q5jdfkin7gusp7xlhyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yhtfykndelwxn5btezh736vlgqr536xr7ewau44prdaeqhpgskgy3qyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kaxqmpjht2rnib3bs7oconrpznxgnxc5ac3vwhyhey5eucpifj3rqzid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fmljwxfz6vrv4tky2wv5f2dwjozbmndknhgnptng2kmwbnrpaojlciqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p33liq4mrsa43l5l4prrbasubkeapfsi24dh6j2rylthltwilebqcoqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://latesgmxl7tudr6j7mtjbcccrgdztyai6chhqln7xgxjg7k63tpyj4yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wpf4w72fnllt2syylq56mx2zkri4ggb4hivqiikqjlg5p456vpaoceqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://il2xjfptv4mnq3atlpnznqclbnlutet3vkotl4wc4wqku6qpw2drflqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://w4bkuexf4ufxtt525cppzkkzmbqfppcqnctdd32hnt5f4oivrmbufbyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zq53vbywqjhuvlg3ljnm7k5q6di6oijuh32v6gizkgzp6vhnfvtwb3id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3n6kxmh4oslmshtetkqmdheflyabpj4xajtxneso6lr6ai5ecgr5mbad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://djylmsdn2elx4hosbp2jymz3k6vaacglo36olfua2jrxcckpn357omad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fnm7d5gglkclynkiid6kly4dav3xdnvh2xrjrry3iy3rm4cwveuvbhqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ji35vmq2hw7d6qqtemdmtsn3ubi6jpu7ojzwqwc6mrykpi6co6pywnqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xvu3dc6du7getj5wiltjztppfcnv46n3dbhybhmhz6k6ojlonvg4oayd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://74vuaahghbasowbvr37uwr3m7ndqap44q3z2u7itaxr5bxwxjrakzcyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5xlbxe72negvvqpk5lvjdrpt5ogc7yi27pfvsms5gtu7yexr5cj55vad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qels6bdyriqqp4llbhu323lrsfcgdwkufvbuvo3aum4jqirrurb3hvid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wvci26mxz5owih7v2vrpj4lgcigqb3bvcvwbvogiozy6wdfcqk6y23id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2gwhjopr2zfbecvfjzymlyq3d2w5bqv2c5cc76wqxx6g4gmscbrbaiyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://olu6mrh5wfeyqndktiqqiqpd3dgiqqfai5ptxulmxt4f2rrqcvu2pcid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lhlzixubmiuy2a6opc6vczkckmqa4uditylsmxeewemlhni4t7psqaid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p7ipujay5n6b5ndshpaflkrf3wlfjnjnjjo37wyqbohtzjrcr6htjeid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nn6527gutxrnby7uzw3owke3blqxm6r5hsasnziw6fstjbmlujj54uqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vmjnih57b5tiskqoi4zsrhmc5x7672mkhjs4skxcqcfxljilel3ko4yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yyaidwloeb3phrc66p4pz2tjevqlhco7r3bzgfruuspftjgli53ru2yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://isl65ttcgmss2sxwvaengdzfdnhn3kdim6b35ay4hyhqsdgpb5fkegad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7lgtrvjiro624cfh4xiojh2i3mc4z2fwd6i47zbwfyvzib34cknzlead.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://auuwlsfjq7uyfigmpajkpi2xqkgpajyqwi3vqldqx3mcpabrgiz4rsid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://65g6o2whexv6lcrniqabzw2ulgipz22xt35gd4lcbhxkgbpoo5aeq5yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iul7g5uaadfkv2nsfqcdygrk5m4sattncacsdduffdrfqxjxiak66rid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://h2ktnfmrnh2amavswz4dztwfgrvjiwuygdyvukgfk4zqjja32olotkqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://voebjhpsp66gv44pn6f2ra7l6qumx25wraukc43ubmcqq5nxp4454rqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://alnsja67tiwthhbfvu4vrne7nxqrgwmobaj52trf7zauu2liu6hlb2id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ynbc5x3lst6y6wecsnkts7itsklnxopja7utcseuqss5tc54n6uwcqad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7wgmsubtpi2qrvgghsmznfiroo6fvtxom3lk26hlhcgnwwdikz37jeqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iu4fxdim6smks3gguxaxp5y66u5677d4ipquqloz6wjxxq3q7feykrid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ljdsv645wpylj7p2txrl43y5slelmsmml3n7wgvxszmx36r3edc6lpad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://o6p5ylhcuhtt554rpnpvwwgu7zvgh3ddsdfnpb24qbvx7i7vl475hkad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://o6ezbwozpmepciaeq6cjdo2yy5rwiqkdpqeitf6qnydw3mlxbxb7xoad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k4v227umcldfbqpkhbqnnjqueuysmwpy6bzbltbfv4ik7yfsim4qgxqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ksp74k7h47ozli74rjoy6krii4kjcfoeczzd7qei4iqu46gtdlk7i5id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://khifa4f2xvvfxru3s6olzxo5n2fwxuqdmyykapedrzh5qxrmqtmyvqyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xsfgu3okwm4ysvosddd2iwyhnyzvbwu4glcelzaqncdzqkmzmtn27tid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pb4znn5oxc4uy3ly7wj3sbay4wnxokh4zmud2u4hd6oqktu3bpsnmpqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g6m5ddg3cvwbw7yyxadpkgbcswpnux4aenbjez5p6mnyz3j7imbi5mqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gsuwpsbhsjjr7bn4kmktybblcnn6swue76hkpgfplev7vun3c7aj4zid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ndi3oahu4wr3wfiwjj4s2iqzsxlfbgo2qlsedfymmzbednbqwvggazqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qfwhphi2a75crdgmswnkq5stf7ypw7nl5fwtt5ydhhtqb5ygtxe34pqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kfklpeb5iu4bugpxquwpnlurmza63e6va7y7xkesgnaw2tp5gfdzrmid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://45b2jij2pfmvize2nn2oewyh7j2bp666sdgd4b5nmjv6qfdbn44g6pid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dmh7yyy745o3tkyj3esi4c5f32senovn4eoismee5z2gjcxrhslu3sqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x5tn343h7ne3ypupgz32xov3kgo7iqu6jiyurkkgxfrquzs7zsibnqyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s7sopajp72ocucwqge7kv57av64yvvct7rdsvmbwzxtdyqd6fg7l4zyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rv42srn3rjasszrvlfq7irtxoz4shfgojw4uffarmtppa2h6phzm5yyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2lhtjll2n3wltgp5niqar3akdcywj5zme6japwawzcmi5tj3ejwxnhad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4qm3mni5kwea5y4pzpogqfeb3kmznn2zyzfvr7ocd5o2sodcjgaovyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://33o5mryquwkxqy7scywzgh3rehesvyppmkx2wcljdmptyxmdltehbnid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gqyc527qrrflvgl67jilcfkg2tle6hekwhykdqshznp63zu3cvsgwryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cehxhnw6763mc6y22kbarpqhrnwqwdpyhtur3abwxozr2w3f4ypibyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://igsovciayhnw6q7beadcol465epxjlmx3njo2vs6ru2ikqpfbmni25qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://je3cboyhsd6aps755x6cmhpmkh2xcznazya7l2bvzmpsn6ifyphp34yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kwhe2oj6wwxdh7pgftul5g4ib6fzg7shpol6negvnrdtml5eblyrwdid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yrqwicz4y5agdgtd3e3l27jxpaaqhtqtpsqgetxryqzmaf3z5xj2wpyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e6x3mrw37u7xrxaonusji7k2cguz3btlgjd4ncbvdtamiaqo4temo4qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a6c27imx6fpdacje7jhhlibjald2u5twofvepno2nu3nlfee24wa23ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ytlui6t3l3bz2uhtuogr6uomvlmlvoxqizgp3ovreejehwuzgxsnsxqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vsd5b6txkvee5rjojbnbyp3iwa6ckxuc5jrhz6zcpqofsias43y57tyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vzjr3n5m25v6mhngl4yc2qiijnh5uufdnbuxu3e7bosj2ojkoho6etyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uwwxgb4jkt77ldvvshlk7phubbgp4jva36tzaeh3u4c326xa53hdofid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qienexa5fkp2tt2fasdglgzojbzve4nbb5siyjjodte7k446rkpoqiad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ag3zagrp26xhvnxl3522fqxzsbuwvk2xdxrs5zpm7y6g3xufysn52gyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://djs7zrnlmrrgrpzkgsn62j3k3p6vlvvhy2cmw7g55cvx5gtgz3twgfqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5fiwdpsvflirkq2uonftcwv5ux54qeyhkbggfubbjdos6jynqoayveid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qkdpd4bdg5vhftcwwyv7y6obzbw4xsxmm7rmourgzveae45pdumejlqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ljc5kt4pd22vmxyejlbjzpz5ax7dgwpidyfyrdqk6xo6tuh6kco7gdyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://md4greyvkgkw7pqreh5v7xfa5pelirtsew6cbjk46pdu7hm7bjxraqid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p5n3fvzqnjrijfzzygeiwrc3o6gsiu6dtvfmwqwjjfc3effal3775xqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6hprxamxybyaodcw4g6hxw6ngwlxld2mronh5yniswpplo6xccpj52qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b6uslc3dlt2xqvbujioitx7ct4lvrq6gaucih4qi54h6hhcoj7dmoaid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://274e36hcao25a3ltzw2hgqlerutdb2pg26kjxhfr6oayj7a3drye6zad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3konwt4eair5d3gbuzb327gmluy5d2g6etcb5ky5vdm25essevofbsqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7f23dkjirpgsdssdwruxwejaenpbsle3jdxbq44h6gsupd3n52tcedqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://daxicevkc6vzljhkcueogxhztjzeb634rbdgmaio5kg77iwqh5epsgid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a4sopzricrvvjnlnnujtiqxskgdukhj4sfepcxbedsmyz3rsrrsyq2ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nddehm3ghksxjsaqczqmq2vp64erv3t52hzplkr73s2n7vefehrllaad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://f562khrajerizksiy7iltvb6yjgcqqulksc5kvfwlrmkgehylzmwheid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qldyj3m3pwyyvdmbsgfpjxmrwtgboq7xb22nrdvfkzpkbbk5etoz6uad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wq5xfvygxl7wu24qdnqqe6aihjni4o7v3otk5fy3c65xqmnrsxk5wqqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jtn6kogqzhpa4okce76tfxpropztzhgfwqw36e7spxiua26mgrtoqnid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rre3xcbjyna5eriayhw6kesaqxcb2c5dulwl7setvedfqknuo56llmad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3m532a2wnyi4gg4r3ftseaycnredsl5lefwoju6smfghmrunx6o5zcid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://355yfctz6uq4427ptnnw36wusfmh5banzqt2igmsaam3asvqgpctobid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://n7jqfkmhu7gwua42wsm4kdl7x5rzhombxjvohx6x53be6atz4ks6hwqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://neibmgiu5wksweqvs6icrj4k5fvq3ltgudpvvwu35xaprbwy5j4kuoid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fukvcbzfxjmqrevqf7xmujdk3wxidtqjxdxypmcbsl4tufpe62mqbdqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uvkiz4dgu3iw5mtc54lchevcosvm7abyc5rqfngjzso7bvmlhfm6dyid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://euesxh6f7qlypwvu6vws4qaxjgnno2oudn5umfhffmw3ffyhzekj7fqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bx3fwizfurizjms7i5fjf4rqmk2bx5panoyfuk56tzle7d2np3q3vjid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nqmrdqv45dncvjy3mnnccamfor5ecnde3xfeyejm4cqcnmhg2hisidad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://esl2mvv6u7n4csf6qvmgvvldku7xo2tspkqztzdsf6wo3uw23ohc4iqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://n2p7ejvlekagkffszor2ep7pywks37wxbjt7ngyt6vmonmcz6ohuokad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3aajsu74akuddlzj5zcv4dhckbqgu3xfgyfxkupluqfuvpkovmsn6qid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ulpkp62dcatxv7ufgpo5jng4gtjovjzzvettn67ryfnutmz6cyp6viyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3rbo6bdcl7znlwmskn7spu2l6xrr4macaaulev72jyfhjto3rg7fvpyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://styqen6rpkmbef5zpdxdlpzxofwc2bv5ziwdeycy6yg2ghsxyyetcpyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lnkxat2xutaov6uvpq5j7hgyzh5irkrji5dhqrs2hr762723r2rqznid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tjba45gilocqsbges65bcvlfddkm3nhxdupnrxyihjafmiviq2mgz6yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3ketfyxjshfp6x7lp673r3hs5qxhkwwygg3gslklcpudcaaatcymwdid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://v527dzuyh24lgttskx4mon2tgk72xrj4r73jintiw3zt2a7ziucbblqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kcflhn4u2xqhd3vc74ymdpqjcef5zqbc5e6xkqe2p75x4ybrl6bfgnyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uju3v57zk3bqwbtnxaextzk7krrjpt7c7f55yg3kfakljlsmox4s32yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xuqa3gjo4bpflbckaskize2mgmdusf6hzsdj3xs5r7axiqswnqkjuvqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xvuawymlya547ymvif2s66leck3uyj4bgapoogc77r2uj6oopccsdjid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rhfyyvvb7g7dt4g7veiisdl57lwaqr5csp2hkcjwff7wyumdbo6b7nid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jzh4hs5sh5a3cx7mdizdgwswy55q32p3ogwvfiubo3yq2vpsatajkuyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4tn7j5spr6dpgp65hbpplrs76tpsg2qj475s4obi5c7qdocszngaggqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fil3jdba32zrwv54in7ws42mqgncyhbrmf5g4ucmf4bpnvlx2ugc7gqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7ofecovurqwlni3ocmeam5x6l6gu4oodcy7owdxq6dxkxelxrmianyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5iey4r4utujz2klf6mcekhxwuxo2rqvb2lcz5t2p62bpujfhgxd5faqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xu7fyjo35dfqqrk6fiis2w5ukqfe46cskr4jsyfo36guk7pcm3e35lad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6bmiskklpk6lnabqczaleo76cozzy34pgngqypzls7zbf52mu7i5izyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fyc7rx4quchbysxr4hho264a3b2uoply76g7yu23gile2ek7y5ubvnid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m4wv5rbwnbq7iqdz6w3feoyafqqet3tf4baojz3sbpo3qudel7772zqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u63zm2mdsvqyuunihval72tq42isc5yjix6646lbz4mtvutsdpl53dad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fc6w4glqdex3ge7hazga4abff5gsi5httgay3tul442324fxscfmgjid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://v4225sbsop3gtymojtjlpghoy7m4vhkrrkkiqko4zldglpsxrrwozlid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ysevl2dktor37mjylfllib4o4ino2vk25lymmaoqphzza6tqikyi5cqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2mazdz5lt6myokumykncynq7tdaawbtop7rsttztz4556tnnn72bmgad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://glx7uvlr4k7nrfla7wk64pfbxkncy3v5aapwfe6umwfwsej4jvlveiyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lezq6wuezehjq35tllwqn4qqtnzh5d66rhmifnhplz5dwlpv5bbn32yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ibwjbk2udjxalafk4s52lp22juj6d7ogqrptbcbewooy4w7pdml3liid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fdsd2eoivckkf5uv4mxazboabhdyplbq7hrr6cxwjp6iza5fspdzr3ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4jjffvx23dtgfr23wv3c4phfanxmxb74dqudkbgujhvkh5nfnhdo2hyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tim5mpyt72hjytoc2fvn45mqoly34tnclc3myt34bx2tvw26h4v466ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3gslvpe5ov7xwnxjehhzwzjmswgp3te4aohdgtouyukpvq3xggnvnpad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qpwp3ktx7dclpuwrx2uz2ygpd2xnplcjqr2wl4teg23az46i7gaqqjad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ea4k7x3lrjgvhqbu4ss7a2qvbihb7eltgybawist36ahgzgy6ze3baad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qdunrpvavgscc63bbjbfzsytfwyfheh5fzykrbmu6mzimb6qcas2dxid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nuxr6sujnp26dj7wyhicwe7i5jzrqef7dxaneejzz5xc2by2cotaknid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rquamtkv55voc3r736awbuklbhujizppdt7ubu4hldtxvx7pdcmfyrid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a3dzxbosl6cepdbcjmfnn3y3sro5mzt5sgsc5hy63r4u56svgrrazaad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ecuickfsktqgnqbq2q3v77pcyhpom5kha3hgjc5dqxjj7sbew2o3zcqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gloya5gofd76hfye6xzhvj4ynasvqvzl6i2q4ntl7krql4qmsd6mpqad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2eb47nlbj3ypo5msdxtnhm3qwre3v7ifgostlqkrulj6zx4ifavidyyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rz2rqxjx4casrtegra76wgo56x5vngjdg2euy3t2l6totgcfmkekyzyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ypi6t7qud5u5meu23it47h7gpue3bnpgtlk2gdvgixqabfdpwxrzzkqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://znwywdshu5dkz5q64n6fymlvcg2xlvmikb4rkyzqvpudhkwu3x77syyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6coghfuocm6enveoxjnj2m4qsqqn3bydhzu4bxy6zzcxy3lgb7fbmfyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i7wzmcfrz2gbpubjt6ztucpbpem2fysg72vcuwqigdwu4zscbst573qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5t6wiarxyc77jjjhk735xlkfqhoqojabivlrxr6vu5uh5vjud7ndiryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hevead62mijwe2ci273pbk3n5xicjwlknj77axkziuyp3rejpn3bq3ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5cssic2psnl2jslpjwuk44m2nwu3zroreqenjrxya65m6my2yxytq4qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6edb2xkyjc23zobbhyufvyg4m36b5t7uyxzc74dd7i6kv4xdqosmb2yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qi5wmauvdvx6nrentqzvberiwecbbs2pct35gob5hwnyxwqig3uoenad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gm7xqrtsln6elnwbbb6szzc5zn36qploy5u7yzi5jpmpxzgbr7dvwryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://elizzldyssdok2zrvy5e3ebgep5666dpicpw74zubvnph2mmzsyyieid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z4kympcennryizw7cq6fhq4kocvxmapuwabuelcynlkdfq6dlt4zsvqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4vx2ig7egsqgbwue7rdatmw6msaq5qjrhlr6drlecj27txondddfb3id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2gcrsof7cldihnxk2qsctxd5hqdi74lvskncl6ook7hrej6jrw2ohzid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lzfmcpjgum46m3asismwhanpxffxuqxxqfopcxhda6y7ghpb6vcruoyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qnarlsn6i5jga3oiz5ipmc3td4hgw5mlodlrh2kpgwbomuixz4ivknad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kjzdmmbkb7yb7m4cgwhzvow2lz6bj4kh4rcmfqjfglm77e4mewg3ctad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nr4dn2z2z26aab3ah2zob3g4fadqneg2slqcaigmjlule7pvhzccrvad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vg2l7qu7ronuyd24e53adx3xhdt2htl2y7cziumrzehr457wdqqnlfyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7yb3xzz554ows7qij55t4ierbzzierwsluhqmoltxwpkxpaqvvn5rxid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5ctxovxn6tjp3tthqho2h4jlabopfz2k6jtziwq6gvzwsx3mmul2ojyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iqytpvofgtxw7xonlxcugr3f5gxgrqluid2dvzbofd5jy6iz72t6xaqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ub3qgqqkmbn5qjwzdpsyxhr6indalu3elffzn3b64b6jthvhia3v3qyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://62sarr6yixt37xomq23cvn4sliul6izimynn4yjv5orpxq2d5dzhxnyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tszr7xr2ankqiwzddojdguf73esmvhpj7gsetwmz5vkhjghgsbrceqyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zrzhomix5spu7brkh7tmj3r5gvmpd2elwfukoscftke4b4nyskqvwead.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4yn4fzzf2pwg7ruz5adlely42m3kgvrfrp4cukrp4ufh7cabxg2w25qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jl2jf7yfgvgl27zggx4xlcupbjm6p35jeg75hbg4ti4rppd7lo7rubid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ltpcjbrdps2ybfz64irhjexiys45fr6keu7lbssbdizalmggskk6zoyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://77bq6vwhss5dmzlandgztuahkgliaa4h7e6qam2l47tj7xe7e5yjszid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6ijhmlpp6oohaohwx7friaqf3bu26hk4yltxngqsxmyygr2ftfkpb6yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xljmgrdshsrckq6eps4lgn5rim67rsnx4t64vu75mqg6dovunfyjfhyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tihaxq2coblqyinbv3bzp2gtpz6bpbog2njh3g2ofalhbilj4sjr5wqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://avgplhppsx6eqlufslcn4y47qwmg3vqj46j2zwi2ondbu5e6bcfbevyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rfnbhlxlbrxnrmvugk35qoek5m2pirfigqrdo3dzilyb7n7a4ei67pyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tkbnui7mhtfv2hdgoc3bib5l4d3wr2y2w4n7orss44rwhv3yquxntlad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://seddf4b4tbtstyov5ejeo4dnmoxc372hlmwepxnfgcwwtmq53jbn6mad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tsvgz6u3ahyxwfcajich7anzbfo3krcyajlvyhj7jbupfxahxd4rhtqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5jtm6uihwfje7xjwne4kls73yxafwbjyj2yuogx5cyuka5g7zhhaxsad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dcytkdwaamnzvb5pufw7fbpprgjwrwfofxk7ynpyxruylg4rd5zcv6id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jh2t7yciz7vscg3mtajppwqgja7lojhcdwybxmtibvd7f5v6rxwo56ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z5obrospajqqpyzysbwsv3sbk7jajgut4ik4khe5kewap6kew5iswrqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6dwf2is6omywughjzcnsdfqm7xf4syqqjp52phgik6mfrmx6kb4omsid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://shou4riazlf4ovytyrb2436wfv7hfz5ts6uyxq3ya34ygnfkxcro3dqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t5zunmhchgyqsoad64vwej53dvlqx7mwdpodd65of4ei2wt5jin2hzqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hwkznkgd73qceka7ubmwtmblmqiqvrgfu75jasvlftqbteajt2r7kyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qt3rxb7nvdfq25w5mihmfn43d3gcxjhvujs7as3gqp4a4z4y4vvcqlqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kk2w3ln5za5hpd2ovomwnp7ewq24wnz63nhtmzebdd3jgbwo4kvrltid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fgcrj5dsfwjgg65kxbte47f54srnrdwqxq6srj3pk6ff3sfrqnsgkjyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://76ji2jo5tz4732mrnwrk2ybr3a32vewlkdke7ghgeag7r2scf3fyipyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eiiny3em4i6bd6pzqaft2bgfrvpqghoxrfay3z7varuex5mksyidseid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tpcktilf7ukwxswg3ara377mitjyulcjraij3kj6asgy5l7j4hotzdqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nktmnpipqtqsmxhxjnywv4jobzg6zygiacg4rphgbss2xjrsqfmmtzqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qxrj2cvhfxtd36jaoxycorbutymzyhzjybdndwp3d7q5pl3eorwvlbid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mier6ea5zfr5hhejlb5iovjspdlhi5xkjonbsebn6nomusyzl3ftfcid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://headgaeo2bxjeeveov6cv7q4dmpvqksrah7aqvtgip44orjoltwwjwqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bq2mf6kgcn3xemlmxen4hefwlvh355m65cqtwgu3udjknqphevu24oqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p4tcczmceeya6d5njdpc3qjsuhx6yqsezz6h7fectaycd2m3dosxbryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5f5l5cimicclpmz4angjsrusrbdj7lcpev6qmvdzojyqicxoztgkfxyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t6xruel3qohtio3qrg5s6lqtvemxpolsvnqzsu7gq72ls7v6jebvviyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uluk2dun6kxo6dpotejoiycjy6o4nn23nxpdh6vyxaic6lnqkcadn2qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qyni2nray34n2bt62vhzazrkcdkkrwr6fwnf4lldl52glhpjpoisg3yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qaitk2nhithrozjjl677tnvdygwpbf4voswlcchbytqtdvjh5epwhdid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://56tozfwhwndqwjumts345pqmzmzutjxw2oporrvik6tb7arhu75dhpad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4k7h5bbjzvpjlosgksempinpubyddhlhc74oyugzrx6mlnaw32fimfqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://37asfl4aturhkebvrs5uy3uqrpt5jqdshze3bollucxjxmivyx65ggid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6zs4fmzdjmhhvjah334uivfr5qq4evqxkokymvlfpcf3gyyeajh3rkqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m3qteim6fk7dk2xplmolbywuern66rbw46unedprbhsyactdfmyfluad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ezvpc477cfydolq4eqq77ko5ih3ma2zpwyvxp4xvloy2hl4kcft2layd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l234hi2mvb57fwyowkpswwmxlmweiwjotrmpmimdzfwdzqpbafu4poyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3m23raqnfwua2znyes3vzx646lrdi4zgubewu4vgbhdibvkyu4hvt2id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l3jniqvrhlbqeevzp3rll6o2vji7x4lf6phhxnssfs6ogggpme47fkid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a4veossh4pgs6qokx62umuc7rl7lpfktspsykdt2xab4rswnaxpi54ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wj4kle7j3ogh32ochqfyrz2vljplxuikp4kht7ee25qq6bwgxu7wy6id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tkaduf35csoi5takpfnzj5uyhyspr4y5gnapdalxeyonbhmcoow5vuid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbzmwubyyym675qhhcj3vklz3jr4chblihll3trnxyjnbhnxinrq6jyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wz4e52ekmlhwnqbahdhcoyjaf575mx36lz3b2w4uy6kicctioetk6sad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6le3nyil6rrwrwj7vogz7s66yorll3ta4c5p2i5yqmnt6wy3szpiy2ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vckmgfabkjgvwsb6o37ebbmzwyttoh4exzrren44zgqzmna3c4y6tyid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m7vf5uu2vnew4pc4mayohi4plb3x22d4kgtkirvtfk7jmjzbvkeoduad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://imjckfrh7qdhcd4kfarvruxo6osrncgg5kpbgqtyqdffhpy6h6gofmid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ino3wksnycirlvmc7gm6zoojylb6xtysp6wym65r4kspzkqknp7musyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jgb462bvbytz3sjkcyblgx3msqce6bmmwwibjomjrezlbnic4xp7a4id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://al6g2ikdzto2s4vsvi7aiw3hx4tk5xxexuztnlwdov4ppvjhf4guccid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://h6ijzzigkilkyibr35czmzh3sv4m7npgd5amrwd3327aqyylkjnj36yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eza7mkwxk2zcrnq2l5j7qwst27ci4rusxhwtpkjj6hyakjw72ftuwhyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b6ewn7vkjw4jtjkey3nxiufhcaujlfmhsxl3z46fd3kqlhwptnlijvqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tfx6mkwzjettzyukvqej42ivvo6u3dktq33ujkjoy3s4fj6bgmdnobyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3y6tlkxcf62it7lrzjcfqochw34uejfobg2eexqqaggp4avsnm7xsrid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sz4lgxha326tjtndlc3xm57y37ro4r6a7osfa43qull4mnkpy7mqvgyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ydql276xl3za7quouarzn3yqy3yzbwmrbwfmphk3zaz7fx4dxxact3ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lecmw24yk5vwjcbcienucbtxk74hvdygsewgcfpubebtcvx6g7wqt7id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ed26bfkcdsqs5wuezd4vraj4u743h2agcqumkcsbtjcvi5jzpvklizqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3kvefuhgyazobjbu3gfgttrcxd47cvrkccwf7u4scfe4wipiavwk7vqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cnzwaoscbdnlssfcjznjw5n27npnckk2nebif2phhntik6bufyzlztyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4jdrdrfeguonp4pleectncqjwnpsr3us6js7azwenq34jnug4mohqqad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qmlf7hcrhgsimdbrnnpfgdbmgjz6ovzs4k6p6mldu6muvao7fdhncwad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://j6yrp5sq4jkk6cq6kwolyae3mzlxozk6to5lwyo2epahmqjtatv524id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nrs7p2auuk2swhszzcu3slsyeg2fsdcg6xcffsmlea37y47dhboqkayd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sxuojjsaj4kaac32pjna3iublfav5r7hvhjwf6l4ykq2cmgormhcm2yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nam4kifgrpoerkebji2gkrckpxbsr4kzrw3wnqakbuqfjuffqq3pfiid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kmlh5jldnzmvhsu3maouzvewlmed4632lvhmbq2y2bpohk5swwemloqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eko5zejmrlr4edby5djlhtbv4soqmsjk7k4ayw5dbjoc4ndbwmqxgtqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://grpvtbkr6o2iantersxsgynluwh4mj4uitoaatfmn7phw2gdhvesocid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7x24mcwqbg7e32p3xdbnfmk2mlyvjlagf6kk3urk5dwkdzttmlsxp6id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rzuge4avddhpkyieu5ral5pbva2kijd3conbatx3ta65wxb3losrebid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5et5vkdae4blfm42lzjt6zliwoyu26odmagqmun6hsyaajgt6b3dhdqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l6d7inmai6euituwdb3mozlpgngj7vxqmp74o5xa5oy73vadxfz47hqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://o472de37blevtdm2egaafpbopfzeipogh7js53zswyui6wolhvakoxad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vt3i4o2xhjwxcbuylfthtipcpsjn5xhg6yhktla3juookc554ezom4id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://h5odq7vosr5qre2yhs6imglssgtbdji77xgpmhm4pgrdxz63xvpct3ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://btqoflj332ws55asdu6ta2s2s5t3uuelh62lo5j5bf2rkgfiyao5xoid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mii5amuxlef2uhq4otkzyalxm3jfiqyfcsim6dxhtzdb2alp3tjootyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ajgrgprnxjl42kypxv3fohbghv25bzw24tbae5rsqdp2dxtoegcu5gad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d5cds6ecz6zg2pu32baoecxh5fbrr25sy5fhfuye5zvcqw4qei3dd6id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d5iozdaaoe4par7hb6sgixeetdygedouir6kzmdev3l4xiuointiibad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://djg6kqmkuwxdv4qbkgh3poqip2tdlvstt6sxvctv5ucerzvav5bbwiyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7nfpgc6wsil4cvahd4q63k7fvimn2cyi7r3ctqagq3p5wb5a757sqzad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://axpzhhwyrqz44vf3372ugwblhy3ptxo3kq2artq4cq3jwwhkk2ulyoqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zjr25hldfboiro5ddg4ugvxyinqsjjpyrmx2uw5stkasvqrrr54rswyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2vychwbk5wl45sp73s5xenq453xqkqwyvr7noj4co2ezpgyckbsyamad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6rgevdptzbai4tyy2hxyhfhw3wgndug3bwd5qr2bxxvtahr6vidma3qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://42j6c7o247vbir6umg32gclfci7paw4ym2uexqwmfkb4kkpr2ixizjid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hzmsrvawmk2muu5gr7ln4fc24wmi5r5vh5omavp6yuicjd2yz5erakyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xy2v3mkdj3nq5zl7w66jav7xaqyoguejuqxiv3a4hrz3qathm4fugtad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cuvnqffujazpugb26wi744ahbsgvn5ljrifarsolfgvnppqfvgyo7did.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uwcmogod63ehoml2wuywgapki62egrb73r4utfbacc23aumutwe4mzqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rysd7epmwvgtzv3p7i5j6kwtcdljdlssweomu4tf4evgtkypnohzwyyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qf6ckzjpxxh7dwjx2pkmag4fm54boh5pvf4kxnaix7dprppgkzdu2uid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ugnvgetiiabnvgd6eju4gamn4cwhoqtcwodwilp4gzrcncbogrluw7yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://arnm7yxmn734igurgztfr4rw5fldykt6c33hyewdpqi535flzwa33wqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4z4jbblgxjxs2ktmtq3xn3odljd36rce63d5jkxhurn6kjrqajh27jid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4qokzgb6ateutdvxtbdzvqvd73h3qynqyom7x4p6mjlqixsdnxtofrid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7jg7qtgmnxaaczegd4ug5hatukr32lxmh2pi5vdoq6x57i2hrfvz2cqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i7axj4en3v7ze7oo2icxu5pt24bwppahocwlod7b2u674z3uzgzii6id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://naix5ifhvr2u5o22c2pdgwmnlpjqauz2e7p7x47fqrnsv7x6gprtpnyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qjwx5vujr7rgn33lhnnnmfev5bxwng633t3xcc4ewp6wgx3eemmd3pad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://riichsqrpju6rjpdbqjfxoixugb3z66iyo7266gi5vh5eit7ox67skad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cj2etbsdktfbkrxxp4grhw2pkh4w6vgd4r6mdco6czrgg6ckratiqfad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mt7eid5xpxwopsm3xmycalyynhgqa2m6sxmmx5wrvnp7m6dxpaq4rxqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tjxinhugi5s7kamimzi5uqmtm4xdb6qsvee36ffdewhgdh6x4shskpqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wne7mhfchrnry7yz7wg5bjwyq2v5yi6sqcwom3y2skubcg5mkc4j2tid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vngb6zrm2agguu3ivwa6upemxj5sgwnvnxxbgjk4qfc3kx4bh67artid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t4alntw663vnpywzf4b6pc3l6zj4aihfnfvkuvb6p7224k4v76lyqxad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://o5eeqv7wyuewfh25akwcir57f3imx7lqrz7cnh3jcbtmrqrphj6mdpad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mnlgoynk5fbe27rrjxoab6nd4jzcdytxexusiykadd4quidsvdxip2ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://th4hkk4hlnau74gfpf2wgwhorck7c6mm4ssnlwbae6vztkein3nmvpyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ajovhprvtnwvclooo57f5jnjx3llsugebptzge7dxjwoblx5oionjsqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vjuhvnelu7igymrzgf37q235nyjztbyy3o7kx2zvqtbvzibv4b3kluid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pfl5yb3eo3l7sz3y3igxo23oq7xzesw6sjepqstgu6llbkfv6pbawhid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tmkwo5pmqnnl4xkic4yiv7xdhjpu22nmdjms653777g6olvfxoukfnyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k7v76bci6dcbt4oh7upyoka7tlcqaldvvkz5vau4cbuq7zbo7h5nu3ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://w64o73ynfg4uvwhglbzrin77e7eu745stq7d4ezi5coa4tjcpuhtyuid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jl3skmc6opjork2vh675567ntpeugceoru45spye4js2ewc4htsamzad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x5kb3a557n37bes3pyha32blmzvtmuzwct7c45x3foha4izelctwjlad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cg4zvkwkg7rlbi6nopi4ibg5dsyjaehjajpmnemcug2n24omtx4n5xid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://llfsk35utbxkvhnw2jevumvrtld26kmf3odhblbfffafg2oyqb23ksyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qlgj4ydwho5u65lp7by2rk2jdmbd5mxz6nzvzf5jerjpnst7nqn5evqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cqpmulaoil7jemmalkza6ycphytbqex6a52ow2nhznpsvnqyf3ojk5ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bclspfcy4cxh5tpx5jcbzn6ze2kpt4ny4hgmtjnu6zkzutq55ke2v3yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tb2hrk643mjhumepowdvwkburydcp6jfrvrtcojujxux4j2lyfzp2dqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hwt6modj6twmmqxwgywlrhkqil7zrg3gnw2wnrod2jl67l2wtixuvtad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bqwxnomrw7v65eqoktrxq44xqa4unvc23yt2wi44w3iyc72lhf2nlgqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://acfg3dxipf5hiwyhra7k55dnrkx3iilpoo3qlplckad472dt6qcwejad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fi6v2rbgitmilp5sepzwwnd4oc4jb3xr5abxka3qntnx4i2p2irwzjyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lpq4oa57thkx32h7lkq7lvqalwcz6oawg2bxn7smebgrrc6zzkjeq3qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nca5ifoa4oupnytvg3ujasik4wioqiftxocobms36jgsaasrsue7lsid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kznttsyzr6wsw7ypeswfp6hbjsaszzlbydd4mkh6tcpgvlcsgw6fjlqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mqpzwgqjrb7y3huttlbvj77zrq3ar5y2fhpifz764ule7tm7ydpxd2id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tuo4y5oya7p466izdkievw2oqhaweazirwxug3abpc2iy6gxsdmwbhqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d4apmrstglx3pncltzgkq527na2jhigqch6m23e5lc5aivepjzdsx6qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tbst3bmrpkfpbatotxqiufdcckwhd5ajlcw47fqioukaq2pecovcocad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ttg6l5zvawq3ryly55urbuqwl47ckf4wnilsucznqwdcheu3j4urn2qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lmuzsldj2n6oislth3l4ql4cgl5ypbmv4yu65y22xx7pdolbqjbmrjad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5tfccsdhx3zzw6jykj7spuzs7fipdpzexy7yb2xvzcf76237hjwhhnad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xj2fskz7jbasocl3hrqtdcinscipl3lxrus3a76dbhqal74fw7xw52yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4iyxaq5p47uzgzgevxibm5gycglm3rzg2v2m3pbsn2cvw4wl7ynxidid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vmwwdia2pcvpozyhcqshcdrdn7opkvspc5hhltsduhi27nmwdqq2jfid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pzqic6ecpsaebm7p7np4m2lrybuqwagvw3jymvisa2nookymgansg3ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gy72soqbkizuqkehr4wbsfytnyc3avsxj6o4rwpcocmoonc7vgzfouid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://prvimy6lsid4tcpkp4eomxruvpysch6ep5qpjn33ubl7vvmanowknzqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gvintuqcgxg75zo4rkr522avsfhsrktqmibhedbxvptl2krdxtmr5dyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ug6f7pbi7btlgawhoqhuetdytqk35cwhsktnvocsurivdavcpg3mslad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cdm7kqxuwo64vz7ktjx5rh7wjsfaeekehtnsjbukaqjafcjngsxiq6id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4zjfju7dc4f6ickqpdufulbodbnp4fvkccbimx5cppm3ns7y435ojoad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mfztc2spxine5domda4cu36rrx7i7gg5k3orqm6fqctkntno2crwczad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://56vrt3ld2rqoyk2t4qzqabku32pqnasn3bkngtmrlpxthnu7jjvbz5id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4h6gnqxb4cmfvwgghxqb7mru7jlea6mqh3sznn6t4j5joc6aq77qhdad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ojdjwxsfbs24kdmprqgcejcb73h4eywlg7ekoswfz2r5isynzuokbgad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4gjeayuyvqmf725vfmnspfhpdbhyvwc22zigjmtzmcckmglfvjp6ftad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fj7vyh4lj3d2azypkcllq6cm6c263wyya66gm5du66izxlkhkbz6bfad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nsjog47c5r77fjdttcy7r2kjqbnj7fe4t73ug4y5uezbdieomzv6kaad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4ug6ieegf6mcnz4f2vgvk3w44yhxgruw7kxzsxyeapo35x64qr4ctwad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://h2qqjob3uu4z65z5ps5i42bjrspiuw2vf7sq7j3qmagc3onab7udcfid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yvi55k2xqi45hivhqrk3n7no7uje5o3nocgcmfbrm6k3ooifns7ejxid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yfds4rb64v6qkflagm552ts4hafm36wdgknnx4kxkw2yj7ogbkvabnyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nmzanifuvww352acrewixfs3ccu47m7odyzqbx4irzi54k3msxcafcqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://32iln5hsuhh6h23vxdozlrdpe34z55q64sjhc7vszjg6gymsafybntqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e5xsyvpznhvpbe6x23infajbhnosbgqrm7vkj7ipmviuvdbp73bimfid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cx3jub2f7g5jxhk5qu4fewxsxspztao2jfy4drllitcteb6mdakbs4yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yuixyfc3dfxrsw32xeskx7bj5bwsriyuso5jmte4d4itx5vzfs7dwbqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fsd6w5h3y3rnguawguyf7bjf7kuesx5frsz3im2tt3oc7kfqmo5xkmyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wuw3f4e6iitt7z2lyuxxhydvao5bvowpbqrlmbezthakfhkbm4efdhyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3dr2kapincqukpiqavyh6zqjlrxf35x246hqi3kwnd7uu57e3isvapyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2ru7dh7myxylx3bpwtv2jfugmp3yk24hi27h2rni7ppj2xeyea62lzid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nmmzaxo5x64zmhkqcowocfzvigss7pjrs27a6u4bxsd7qcsw2tuoyuqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://imtw62nlygdgzyuri6dmce7s7vmpfdrmth56czxvdissu4w5jqoq4aid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ppdxekp3e2lap5mpurmmrztjamwydjz352l3giquyqihxrilxs6is7qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zklxzhbbfhmfa24qn4ewfsxnkllhiq3kjmhcxyeyvyecatpjesokl7id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mqmli23jqwsu5k4r256wphxk732cmd6tspsdjlz6uzzhju76gbk5zfad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r4xawvvhiw6jjll3loholrkhd2seue2ty2g6ezxt3umafj25kff2amqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ewdq4igcuosp3pgloyxpjmlivh7vrhcx4axnerj4adsfqewrmgerwgad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wt4ampyvjt3ozvxfpjtm2igsg4zwahnw2scyeyk5v2bvl42mujokvkid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vblcmlxagwc5wmwxw2mjovmj6d6km55zpogazfmrnibmsib4epr3ceid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rkl6pv5gbhvg3chpgvj4bvanzbmway7phxhguvyxbltcatqrudtbcsyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fkpc57333w44jk3qtcnotrfail5xjbsnqzf7gzbkoksx5bhad6um57ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://33mo4vvozcnqrnn6hk2pavgrw4k5yicbtlh4pabonw3pmmydavgn5wad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fn3zyhg5cc4dh4gpqkr6tdigffglhf7zygck2vtem5vp7ip6pxs2vsyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zbzvt5he7qsvm2zf2zfwbyomww3l5nbwyulz4ple4bjgtvm2wcg2coid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yx66ex47lij4ou2zwbswelttzmlexwzu4coo26sqxyryrglnjuif2sad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://w2nqadfma4bsgdkjmfpmxsh6nvwqgpa5q3toijdiducuqkauj447j3qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3nuqlmbcmogstufvn7mkrheqvgiqdbaukpaalceetglvksae2ulgjxyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://olofrf73o3ciyn73vc7cmjsskpkhjcpiilvdauijcf3lts4boysyctad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5rkotzsj6y53u2d4cut2nn2fghnvx2efa5spf724mlqjyr2srgfwqmid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://n2etbp6ktgv42iraeco6foqo4fa5srbcegomwqe4jzch7f5jh3aneiqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7g3fopguwzuaz3xofjhb2fxm4aoj5pryhznieynw66sy75pkxonw7iad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eef7dbgmttjm3qkfjlmqoivbup3fl6utgagu5smmzwve3mfoubalevqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z6wq6a3skbldpfplorxebvoprwsxuca5vvv667zjighx7w4pmoss3rad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kfshlvgm4dmhuop5y7wl5wqlp52r7aqrnuz6463eqqnr4sm7f3767ryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sxksja7dfrioge25bgp2zggvyu4dfbwh3znl4cmmvgu7pnkyaisfeayd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wo7j5f2fzufffq5dg235tzlpyoztc3obhzld2sifxqlrb7knlia3p2yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lmwmc6cqabtanrx2ncxvt3cyw3zqabcr6pbqyhmqjd3sauweccgjuhad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iuhetl6bw42pi6e7l26jf66se75zpmiselqn3ygtmaj7opqfzj7rcmid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4qnqinvxamonvpkdgsazpt557ghsanrxn4gycziuztpb4rtpgryopsyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tjplg6ewcuzt5cbelb5cb2sawumpvtea74xnkuyly73zmu3athzog3qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s5a3n7rpg2kjjeac3ffr2u4x3v3vtk2552sairawiqpkn4x6pzack4id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qyjz6x5cxnu3utkwzlpjc4rbx25hynl3ug7jq32fiissbw77un45m2ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ibnuhunbz3ibjid2mnehzi63htotmx3l26yuwepg345yo6el2mb3qiqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2swloxgo46jn745yonzheyqgyl67nczdrxliwqmojzgcgw6l267px3qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yauyy3poof4vzfy7kesoblkohfavbhxhxjl5hnaj3mnxb7njh5hbnyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://istcxxyqe3bewj366inscqdsavyd37v3qj5f7wzg7fpgcuofoioh4wqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://25hchw2baxphdb4mu5vdfu7j2f3pn3ze2qumzn3ccwe2rbwj4rtdkmid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3vgcwib73eenykpxii5gnuwxl4ysya6psfx3yjqtl7xgy35lixi25wqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oso6kkweobalp7sttvuv3kto3piov3ddzzwrxzgsbadohwevsy65xzyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p7evo5mrc4e4benug33wfc6zslkbj7yxht27b7w7prrbbwgjtwssdtad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://heutrg7ynu2p3sywvvfwmd73bspe6ndxd3xxtm3jmbhmo2ejg2tiqeyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5fowetkacveat2b33i2vs4ss6bkxnwhvgmdlxvx65uv237s5bueezaqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xpi6anvefx456kfogxwwpxdejqzxxv63ve4yy3atczhs23kw73e3wwyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fmeti5zey2mpjbvucw5hj45brp4rbu4gqajh73n4nh4uklepqos3gkqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kqbrqhs446zc72jau3f2a6qj5zomkcjs35gtytesv3v2os533mlobpyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i3gut7gggz4cihj2byuhjqxmrzdetkmkwlfmvy6xju4zzos6awfbmvid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5ulslyd5yq6iai7swjag3vqqsrx2or4t5luwngxjq6fw22qmraetmrqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4nuk3ztutihvgxhi4vg4sh4xfbrmhaqopi45lkmlsmzoqmd65iu2uwyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kkxbat3noaq4e4jgyqysidmv2qaunh32bzchqfzus75f47zbbyhkaiyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cbxsgxq477jbzurnekcy7mgm3gv6jmfxtworzof3tvmxk4o3uwffmgid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5oqm5zqiy53m7eblq4lcqbydx2zqdhtkcsdyr4ax2aal5ipn5eclqhid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://f4daw6veh35y4t357cwagxcrt2h3ayu7lgxaj4ndhalfpgud5ybz5jyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://noew5sgjoqdw7dpuwzv5r6ninwhuqwlrqsgexykunxyx74bxfyjssbad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2mdzef2yb7qsp373sbxo3wrdykvohviei7gfjjpga2aad3evhsa375id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xsjv7vfn3mezoilxzr5w6n7to7z6e6jhcl6xszvzbfznusaqpg2orkid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dduwxwoslpixrhc4x7bpjxqlbdfre4p7cczbnbyrlc2ntirxtcrvr2yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t6vvwhi2cgalcrcg3rea55knzg6k3lfa4xvx5b2ep5zlurym7e222kqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q2s4esvphmolhb4b6f242efzufbqyz2k3jm2bvokctrdxhnfwidm6pqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://43e2jpueb6mpwz627q6hsqpxn4q5ainik2zghbeuyvrusgaopkjijiad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ukhccf4frimtbrnsxaja5igzdh7qvpcvrvnshnm3hdhdrwztecn3k6yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jlo6rtcobup3p7nf7awd2qvp5f2hvrj5y42xoexv3sg5qjs6emwcqaqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g2zz6q3w4aminok7myriwblfgyifc5uybejxm76gi6g5diliseujsvyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rtpirl6rklc4js6xkleviq66al22e5yztvpjusyvlhdk4sierqy6k6qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dlliudi3736dl6ogno7bpbz456p5xcvvnjumih7mw74mga65tw5gzyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2d5nnlkrituzb54m57eg7loc7qz3rfo6f5ze2roq45rq5sxl7izlofyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://abr5wpdszssel27cusihy5ac7ir6rylvy2dn3vm2rz2t2ud3hh67acad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2db2voqrkcomdgmpei5yg4tt4h6jtkw7lypezsimtgboaxsjrs3c3lqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qyqtmhiu6u4gmjrvbqyycrghvf54fhllu6v4q3jq2nbprn2fvdkbinqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3yvfwkjonlmgkxpb53xklnwse6ynv6wyrx46oszgugjcdozrwrmgm5id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3qxsc4mkucdcmfd5qedl6ub25m45dyabzqly5aa5j4pvhzwa5luvvzqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e5q3hn2volbts6guyvfed2g2bum6ixjjm6okkr2boyq55iz6pgkvs7ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://55dhywkxzu2yklme5jz6ov3gojyyqcxts7lktrlg7ciinviw4jnexyad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ufooeuu46cscgr4s55xhredxk2pfd25kai2h6v3fxd72q44u5naq67ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kivi7gmuw6ynre2vjha3xg4larjzkmqklzych4mhnc5bfau2idlijuid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6h646bnusnohhsw4liocsqlkb77z5ezfoznkq7bfafr74r4rmebxmzid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fxusbgau76xjtsge6um5im6wgqaunawbujzioi4i7m2sc7stvqmdgfyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zgqfcxan6qbtw67hh3s4nwvsfudiuf4qbl47emmhuaxj3gtz6m6o3wqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ldvzvwiurk3swzksqtqgvu6zvg3zv6vdggkyl532yqhssst5tzgvwyyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5kvj72izos5lvrwntlbzlyimaozufudkzciruqwinkeziludv26ph7yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dp6vxtqsvusxfbnk555enzgnivovpvoqe4f7v2422lzqdyj6iq7qu7yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://haqrod6fojtr6aexib4un5pa6ue7tpq7cp7nbr573upiilyglwfnkrqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7ok7aj7ecfo2ydyfsscpxc64mqmdaq3xctnjva327wzp5w27fwiexvid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://magoxorwigpp3kdhkq3xvnzorf5znc2rphdh7xehaqir3s4owodjvmad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sxwtt3g5tk77o3rcinl7siownprzrl2gfkbe74rtgxasrkhgwu32kqqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kv7ti35lpsqoafjvw2s3kw66fbld6ajastrmqzx5bv2ncfjcu7oyq4qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yggqtlqhmjzuv2lffbc4hyhkvc53bppyazpgo4345vxulhgnaxrbuaad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fozerypvwcn6p2zrpzmtzshiewg2eusz3ag46atxiuw2otdxhnc24xyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z73yj7qwpbntsvoctsioizbhxxmqrtjiio3q6fsscfayge6gqzh37wid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e43pziezfuzpede56vrywuvmkfszvuh47md537p6eg4vg6rz7knbljyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lkfra3hoenzn545wxjuffdnnik3n6ny42glyvbtnzdzxmcra4sdeu4qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5kmpnanl32r6kiltzwendnf47u55dd77ykgrx3w5qdchunnese6fruid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kaet2hxifahyruhfczz5nuwb2anocqw6gwsfe4tubgqtngvzweff5wyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://athwchhervsimhondaj32uhoxjwl5tbetulxzn6xkbwjst7z25raprqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://divywzl6p4ftha2aunljszhmqat2y7alo6y32xzxvvoz5bhoqymp37ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3vnpzcnzsjel2f6obkaijal4k4mz2hqghpmelfotnxqntzwycvdvhcyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vne7nzaz6ruazkv5rj7lwphlkqnw4xtz6h53fvfmce6kyrk4v2pe5kid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vtoq7ltt3gfexaratzzqkjd73yhdtrhj64z7qwtvgs5gfyzhlwddzyyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://72j5cqqpqz64yxfbx2v6bntogxvl5zkiirhjhp3e5nmlgnofixgyahad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wherm2w63n32q2noek7gfr6ovrrrhcfc7blyyg7t32tvfey6tqtxpoad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cdtjmysl6xjyjwa327agvh5yvv4ivmk3xjzigpi56vl6oll3t7lmcbad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bxhtbrcwpx5upf2qu42jagrvwxa63nhmcdatd4jlzhwhmrq37fl5vtad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zgz5tfqj3z3nfvcdeefu4ip6gnwbomwwcevqwykwcvmi2ubmpvtqstid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mt25rmrccjob5tobrpydqgzo2zuil2hgbfpdcotu2comvxo6zx7ix4yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dqcownxteexcpxjupxy3octo452rua7lepygsc2hd6wuengrl2j6vgqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c2sq63lsvbteng7z3bknme22t4vdwyeihgyeyvpucc3ugqpej7ecoqyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kg2pf5nokg5xg2ahzbhzf5kucr5bc4y4ojordiebakopioqkk4vgz6ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://o37ozxfklmenvcmbck6hnbdb2bozaarpiqoefff7rsn7n62oz3en72id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ftp://185.196.8.92/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u4celkv4ge65uxulffd47gyf2zbxgtbzktl5ubhjiiwqm2q5cjtm2lqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nj5lfmji6svckid5tzwd7rc3jg3gnzaoswsmqtea7n3lm2qy5yndlyad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ftp://208.76.221.205/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ftp://datashare:ENqh0jBHKia2L22fxzivbhRL@64.176.162.76","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://wikileaks2.site/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ifjnyofk7xpdrqzp3pgyorwgoyrxjkjic4aqxcz4sjxjhbpewfoxngad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zlubnjgvsf6ifxswnvpfgvp36tlzubzggn4txk5mi5qgt377ytzai6yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://djixgstarlzvmqsqcewlsfxlqzwd3i2eqs24mccfrfvrhqihjmssahqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://z2rmyu57rkmlsfif4lovlz36ph7lxmjiawilmeryfoupwnbuplm4suqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://22odvea7bampzr7k2dztbqda67fpau6hcy7sgn2npucaz5gcjmmzrgqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ytdfc3dvgudgq4zyjwtipzbsu7arbiqvygfqdyqiygkvry2hy47oq2ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p2zg4yqlsflg77opdzcjiu3reyj3wx2owwez2tcyv3vemmz7wbyccyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vn2untbh4etoqoc4rfsrzlautth7vm62swv7ohemsy4tgh3a4j5ykgyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ftp://dataShare:2bTWYKNn7aK7Rqp9mnv3@185.196.10.19","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"ip-dst","category":"Network activity","value":"185.196.10.52","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ftp://datashare:C}^SLA\\","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6d453sm6732jpr5gjs6zrjzysurnmrwi67624goptyly2xuz2kmjixad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ftp://dataShare:2bTWYKNn7aK7Rqp9mnv3@185.39.17.75","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ugefls6xolqo6anb6jydjtwqbr5h3st2stfo6j4or2hp7ak5zypwq2yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ftp://dataShare:2bTWYKNn7aK7Rqp9mnv3@176.113.115.209","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ftp://dataShare:nX4aJxu3rYUMiLjCMtuJYTKS@176.113.115.97","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kbsqoiyihadmwczmxkbovk7ss2dcynitwhhfu5yw725dbogo5kthfaad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ijzn3sicrcy7quixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://31.41.244.100/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"ip-dst","category":"Network activity","value":"188.119.66.189","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"ip-dst","category":"Network activity","value":"85.209.11.49","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://wikileaksv2.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wlh3dpptx2gt7nsxcor37a3kiyaiy6qwhdv7o6nl6iuniu5ycze5ydid.onion/blog","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://24kckepr3tdbcomkimbov5nqv2alos6vmrmlxdr76lfmkgegukubctyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/prometheus","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/spook-ransomware-prometheus-derivative-names-those-that-pay-shames-those-that-dont/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/cybereason-vs.-prometheus-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/inversecos/status/1441252744258461699?s=20","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/decryptor-released-for-prometheus-ransomware-victims/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/posts/ransomware-encryption-goes-wrong/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/prometheus-x-spook-prometheus-ransomware-rebranded-spook-ransomware-6f93bd8ab5dd","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/cycraft/prometheus-decryptor-6933e7bac1ea","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2021/05/prometheus-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/prometheus-ransomwar","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/decryptor-released-for-prometheus-ransomware-victims","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://promethw27cbrcot.onion/ticket.php?track=","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/payloadbin","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyberintelmag.com/malware-viruses/payloadbin-ransomware-attributed-to-evil-corp","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/onepercent","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nokoyawa","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wcch72vqgvsgcv4ic3awnonoqgspum6p47m4thum52rbq4fu3ctu6sqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://stockkyjeldgtaj3evbtfb4id7jxnde6qnt6so3ndipcndykgknjlyyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://snodfytsyn25r2umgfbygj7gxvul7egr4yx4j4n4yn7nb7crabafzwid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sabinwgf7aryxeel2ivx243tzymlsuk2s4lmrqnqn7hug5xecy6ob6ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rwavdkltqjoi62kvugd5m576uyn4yrlxcpwril5simavxv7z6xrxrbyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://roadiewfshampm6ee56olxymma7iwlhecjgekezmfviua5zv6vkoqzad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rcdauehrqqex6pghmphfqz2jpuro2guhyenkolm2wld6bez344cbvmad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pueblogmiocdtzj2of5556yzcl7frldcmqztxr6qcirgamzencolyhad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pea3gvx6uyywne2f4dokv5cznsvzcayxsroai2ehozffkd576xfdm5yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://muaedu3espka2gw5yqopmglslckonkeiduvymfkxjkggvtfqxkqydjqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://msxiy2dutavkdwxbjge2lnut4x7ai4z2xb3ay324tqzxgryrhahbazad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://modestorxo4s2vkjxo6xyue2lz7zefavtftb44apjojc5qhszq4dqnyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mruedu746yv2hnsfxwgglxpqbtlgfu7xwschm7w5cl2okanfjhu6vgad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hyundaiyo7kxalnkcghqpkfvapevwicis3ytnnue6xqivuvuvi5cnhyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://guardxxhqcmyddgikmgmdjpljhgwo7s4p7nnfljo54ogjd5vpu2labid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://grsrobpx6t7j7eu4zi2xqm6fsrztaoptz4tie5xoamge6c3byeo462qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gaston333sywqydo4mudwjgbeieryqut4trd34kntirejrvwefp4wwyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://frescayge2pa3epoytdocxz2vzagphzmrl6sqxrvrowftso4oqreh3ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eperfs2u7bnyzpavtje6ruuwzatpzexdbjejdijgmgbe7wjje7lmkqyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://domaing5xpfmowjeah2z3icrxcbxd6e5mzk5gduohgzijrmm6lr3vxyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://comcomtjphtjl5mrtguatt5rgi4hymyrnzpqi6faztwmt6kw5tczqyad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cnaaiic2skxbhnm35xmh3sohqgulpiyocj7yv7shrw4t34r5bvqbbayd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://chattms45un5jmh23dak7udp2vt3dp25rlifqszvrhx2mb2psieyybid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://canarodqqttgf2ofv7rkj74jvani7f2ftrbkmuw7zwyydlxikazimyqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://accurfjvcphjtfogx42gpmoobffwqpqzvv2mf7smr6no62fy7ootjnid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nokoleakb76znymx443veg4n6fytx6spck6pc7nkr4dvfuygpub6jsid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lirncvjfmdhv6samxvvlohfqx7jklfxoxj7xn3fh7qeabs3taemdsdqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nightsky","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=Yzt_zOO8pDM","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cynet.com/attack-techniques-hands-on/threats-looming-over-the-horizon/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/night-sky-is-the-latest-ransomware-targeting-corporate-networks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/cglyer/status/1480742363991580674","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nevada","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nevaffcwswjosddmw55qhn4u4secw42wlppzvf26k5onrlxjevm6avad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nevbackvzwfu5yu3gszap77bg66koadds6eln37gxdhdk4jdsbkayrid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nevcorps5cvivjf6i2gm4uia7cxng5ploqny2rgrinctazjlnqr2yiyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/netwalker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://zero2auto.com/2020/05/19/netwalker-re/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://zengo.com/bitcoin-ransomware-detective-ucsf/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zeit.de/digital/2021-06/cybercrime-extortion-internet-spyware-ransomware-police-prosecution-hackers","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=q8of74upT_g","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ucsf.edu/news/2020/06/417911/update-it-security-incident-ucsf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/an-in-depth-look-at-mailto-ransomware-part-two-of-three/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/an-in-depth-look-at-mailto-ransomware-part-three-of-three/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/an-in-depth-look-at-mailto-ransomware-part-one-of-three/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/take-a-netwalk-on-the-wild-side/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.justice.gov/usao-mdfl/press-release/file/1360846/download","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.justice.gov/opa/pr/department-justice-launches-global-action-against-netwalker-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.incibe-cert.es/blog/ransomware-netwalker-analisis-y-medidas-preventivas","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/media/news/2020/200929-2.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.deepinstinct.com/2021/05/26/deep-dive-packing-software-cryptone/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/netwalker-ransomware-infecting-users-via-coronavirus-phishing/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/netwalker-ransomware-affiliate-sentenced-to-80-months-in-prison/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/michigan-state-university-network-breached-in-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/mailto-netwalker-ransomware-targets-enterprise-networks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/enel-group-hit-by-ransomware-again-netwalker-demands-14-million/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/enel-group-hit-by-ransomware-again-netwalker-demands-14-million","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advanced-intel.com/post/netwalker-ransomware-group-enters-advanced-targeting-game","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thedfirreport.com/2020/08/31/netwalker-ransomware-in-1-hour/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://tccontre.blogspot.com/2020/05/netwalker-ransomware-api-call.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://seguranca-informatica.pt/netwalker-ransomware-full-analysis/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://s3.documentcloud.org/documents/21199896/vachon-desjardins-court-docs.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2020/05/27/netwalker-ransomware-tools-give-insight-into-threat-actor/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lopqto.me/posts/automated-dynamic-import-resolving","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2021/01/arrest-seizures-tied-to-netwalker-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2019/09/koko-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://danusminimus.github.io/Zero2Auto-Netwalker-Walkthrough/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cert-agid.gov.it/news/netwalker-il-ransomware-che-ha-beffato-lintera-community/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2021/03/zerologon-to-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://0x00-0x7f.github.io/Netwalker-from-Powershell-reflective-loader-to-injected-Dll/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ncsc.org/trends/monthly-trends-articles/2020/netwalker-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/cybereason-vs.-netwalker-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatpost.com/netwalker-ransomware-suspect-charged/163405","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/n3tworm","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mydecryptor","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/monti","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cls2wzky5vxgu54fg4fqdj4q4olyvmwt6rinmtgqsq5d3vubv7bdzgqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://il6jcce6f5htppc3smu4olpt5pz3akdg5h7k7tb4n45jixxu2o2oxlid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://monti5o7lvyrpyk26lqofnfvajtyqruwatlfaazgm3zskt3xiktudwid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qkbbaxiuqqcqb5nox4np4qjcniy2q6m7yeluvj7n5i5dn7pgpcwxwfid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://myosbja7hixkkjqihsjh6yvmqplz62gr3r4isctjjtu2vm5jg6hsv2ad.onion/chat","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://v4httzsp6ri6xcw7lpmdduvhce5avtla3yocfru5suxpgcgo7rw7slyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yyn3h2lnr5joqebus5syb2p3fzdms7avulvsn3m3gsdvwtgu2ow5c6ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t4h4hbkrrbrrfkbf6luhnewykjr52gkdmgfr6hbeeub5t2rcyhb4buad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://drfxoorlgu5n4c4uhnfli7saprnl2p46i36duhyehmfp7ysn44e3quid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bvxhv3zfewf5jx4gcrsxrwbuwmjggffxjyv42vwj6b6u2clmgchxtfid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://usmrktigxirv2qvpkwjr5n3pxz5hpsucffzujuo7e6f3y6se7uiqzwyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://trqm74keteqm7jdathr2fgljf5tdhtifocoii4inmdu66ekpaotihvyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://363zyixg32bdudpakmd4n4bclbprcqrkyvdssv6yamozfurodktss2qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gchf5ohuxo36metdnt3hfdz6m4up3pmv6t6m63llvldtnh57guwnp4qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://edaus74qljecooagcvcg67quldd2hwokkr5zqj5jtdeuidgjoesvwdad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://egtqjenfxq7g6sqnjknww3tsnlutzqlq747cf73ni3xsfxzqqz2f5qad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jblxfrssnygh7bsoyict5wccgahvqp6tauncixr3y3dxypidiqy4tjyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oiatmncwdk6jnavutic5zusl4sttwschx7nicvqykluyckekex3zqaad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fzuaswymt34cbkneudijgqrzkalrgpsyfbo6uuodoeifwiqf3cwqscid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mblogci3rudehaagbryjznltdp33ojwzkq6hn2pckvjq33rycmzczpid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/monte","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://monteoamwxlutyovf7oxeviwjlbu3vbgdmkncecl2ydteqncrmcv67yd.onion/catalog/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://monteoamwxlutyovf7oxeviwjlbu3vbgdmkncecl2ydteqncrmcv67yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/moisha","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://moishddxqnpdxpababec6exozpl2yr7idfhdldiz5525ao25bmasxhid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/midas","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/midas-ransomware-tracing-evolution-thanos-ransomware-variants","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityboulevard.com/2022/03/midas-ransomware-tracing-the-evolution-of-thanos-ransomware-variants/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2022/01/25/windows-services-lay-the-groundwork-for-a-midas-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mbc","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mallox","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wtyafjyhwqrgo4a45wdvvwhen3cx4euie73qvlhkhvlrexljoyuklaad.onion/mallox/privateSignin","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wtyafjyizleuw4yhepmdsrcfjwmtiysunos6ixchw3r5d7eeimw2rrid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lv","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.co/wordpress/119306/malware/lv-ransomware-repurposed-revil-binary.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l55ysq5qjpin2vq23ul3gc3h62vp4wvenl7ov6fcn65vir7kc7gb5fyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lolnek","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mrv44idagzu47oktcipn6tlll6nzapi6pk3u7ehsucl4hpxon45dl4yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u2kqti2utfaiefucegnmd6yh6hledbsfanaehhnnn3q5usk6bvndahqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://34vm2smykaqtzzzm4bgycfzg5fwyhhksrkpahdbiswmmuwuu7hmvuvqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tzw7ckhurmxgcpajx6gy57dkrysl2sigfrt6nk4a3rvedfldigtor7ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mmcbkgua72og66w4jz3qcxkkhefax754pg6iknmtfujvkt2j65ffraad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lockbit3","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatpost.com/lockbit-ransomware-proliferates-globally/168746","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsptqsmaf56cmo7bieqwh5htlsfkodpahsaurxlquoz67zwrad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit7z3ujnkhxwahhjduh5me2updvzxewhhc5qvk2snxezoi5drad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitbvcwegcbou4fulv3iy3bpwh2do3y243w2riwbgcdpl3hd3uyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit7xn7nqc5f5gfhv6qrf46xlh65lscuzctwnmomthcigu2m3tad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitpntsng25yxacx5jqdccvoqd5qtyzzximljfskvtk6ektjhvad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitpn7doehfdzu3r2orcibdx6njq62aavkr4hgh3p6rednr5gfad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitpn4nmflibn4cooh4sydie6bpoy33tbxa3rjebryxc5vblkwyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitfsxt2gdyz72harnb7qa5qa6sf73bvy7wz65fuiw7vlxarujid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitfsnvvv5dbubfbhb4qo23olw5n3a2pqs72p3yh2g6prkxrhvad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitfshjx7xrlafzhohinfu3theolrjakrlxoduwk65d755yahuqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsap2oaqhcun3syvbqt6n5nzt7fqosc6jdlmsfleu3ka4k2did.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/ec_page3.php","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbov7weoojwnqytnjqygmglkwtim5dvyw3xvoluk5ostz75ofd6enqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbp2rsfcmg5durpwgs22wxrdngsa4wiwmc4xk6hgmuluy6bvbvvtlid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbpoq6d2jglpw7dxarr6oaakgnlxt5nmrza5ojlufsuffuzexajsuyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbjmbkvw3yurmnazwkbj5muyvw5dd6y7hyxrus23y33qiqczclrnbyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbgv7wsi6bpguvjbu6omdgwzllqm5tvdo65do2q7vw4er7aqrnjmtad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbfsazjqqwvtq2ckhm53kfmvsy7c6sdci3uy6qui4lv66aeef7hhpad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbzme4ctvcgzo5lq7jvcdy2v2cs6hrlgihsmylfddprzqptm6ywhhyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbzlychkbilhjsw5hhuvk7zk4axdffy3nvel3zaqwnuo2d4nlqqkeyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbxv6nlojheut6th4nqwpabr4gtksm7y7f4c52ubvvvumydpo4dmryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbw7j6si6k2bzxd4tzvesoijfjtr4pa6awqie63rmkpql7hmu6tqnqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbw6uqp2te2f323ltn2fgwl5tu5cr3udoj3ik2obdtr5367skuh4cid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbvhambmct5s4rpf2b65mrnqynhpn4hksq47io2wow5cjtv3xmsypid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbuxq57hyskobn5xwtw26rkq4wyvttory6k7pio2lv5adeopeezv6ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbellr6aq4kuchzy44pmimszfd4di4fslez765ux4kse3o4lxcnpgid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbbchnkrhkjtltjunmqsbw32bbblsd5bd2pqywtt2bex4bjmo5ry2iqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbb5cnqexve2wg6acbfyohkzeijflpqmgijx5ksyvu4aljv27r2lgiid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbb2llze7ab4rnq4jumsy4ihsqzpuysaofpz2e43foocwmrzsokumqid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lbb47q2f7nzeatj6mxppuk7bhnvwu23mf6pfuywxcz57dwnzl6z3ksqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/pgp.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit3hdu7e4sv3ecg6mmqmeihjcizebcxic6t4eqwar6f2e7rxpad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit4r3ly63w22jhkg33emtqwxw436wkftosscvdal2prdlwzknyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit7bb4b6n27feok2rc7ri75udaqkfppjvtkxlwh7qldygbopmad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit7xn7nqc5f5gfhv6qrf46xh65lscuzctwnmomthcigu2m3tad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitb63zs7f4rdjcsn2etkqaswurk6hh55sa2ojeilxcnwf6qbkqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitbtdk33k75rsl6uhn6bewd5g6z3hp42z6vb2hfk54oja55h7id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitdzjxsgyacnmfte6nfgqfcyhedkduimi4tsajvrwi4ljbos7id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitehorki5kh6s3n27hi3serhzr7htlshfqyg5ex32dyr5efhfyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitffcjqi2wpwhjgubkjihhc7seaujqgzscvwvdiftunl6hn5oyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitb42tkml3ipianjbs6e33vhcshb7oxm2stubfvdzn3y2yqgbad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitaa46gwjck2xzmi2xops6x4x3aqn6ez7yntitero2k7ae6yoyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit7a2g6ve7etbcy6iyizjnuleffz4szgmxaawcbfauluavi5jqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit75naln4yj44rg6ez6vjmdcrt7up4kxmmmuvilcg4ak3zihxid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit74beza5z3e3so7qmjnvlgoemscp7wtp33xo7xv7f7xtlqbkqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit5eevg7vec4vwwtzgkl4kulap6oxbic2ye4mnmlq6njnpc47qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ockbit7z3ujnkhxwahhjduh5me2updvzxewhhc5qvk2snxezoi5drad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitapt.uz","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lilith","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://yoroi.company/research/a-deep-dive-into-eternity-group-a-new-emerging-cyber-threat/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/594/original/Network_IOCs_list_for_coverage.txt?1625657479","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/592/original/Hashes_IOCs_for_coverage.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/591/original/062521_SideCopy_%281%29.pdf?1625657388","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/591/original/062521_SideCopy_%281%29.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/werkamsus/Lilith","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/operation-endtrade-finding-multi-stage-backdoors-that-tick/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2022/07/12/new-ransomware-groups-on-the-rise/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yeuajcizwytgmrntijhxphs6wn5txp2prs6rpndafbsapek3zd4ubcid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/d/lapsus-group-social-engineering.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-083a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/lapsus-hacking-group-claims-breach-of-microsoft/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lapsus$","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lapsus.bz/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tw3wa46dm7avezfqdc3ei5ckxm5cvvz6fae73h3pbxjvrokbxmhkk7yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vunk5dvj634b75xpsj64zvhmglv6xzajcanj4g2gxo34q6ot7il3axqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lapsus.by/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://t.me/minsaudebr","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.com/129992/hacktivism/kelvin-security-group-claims-breaches.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cybernews.com/news/kelvin-security-claims-data-breach-on-european-govt-agencies/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hackread.com/kelvin-security-hacks-30-govt-universities/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/kelvin","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/justice_blade","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://justice-blade.io","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/icefire","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nxx3cy6aee2s53v7v5pxrfv7crfssw7hmgejbj47cv6xuak3bgncllqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/hotarus-ransomware-gang-hacks-ecuadorian-government-agencies-banks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.com/117387/cyber-crime/hotarus-cybercrime-group.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/hotarus","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/haron","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatpost.com/ransomware-gangs-haron-blackmatter/168212","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/new-haron-ransomware-gang-emerges-borrowing-from-avaddon-and-thanos","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/groove","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/how-groove-gang-is-shaking-up-the-ransomware-as-a-service-market-to-empower-affiliates","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/groove-gang-ransomware-babuk-revil-blackmatter","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/i/grief-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.treasury.gov/news/press-releases/jy0333","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-243a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/grief-ransomware-linked-to-evil-corp-hackers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/grief","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://heimdalsecurity.com/blog/doppelpaymer-gets-a-rebranding","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://payorgz3j6hs2gj66nk6omfw65atgmqwzxqbbxnqi3bv2mlwgcirunad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/fsteam","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hkk62og3s2tce2gipcdxg3m27z4b62mrmml6ugctzdxs25o26q3a4mid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/freecivilian","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gcbejm2rcjftouqbxuhimj5oroouqcuxb2my4raxqa7efkz5bd5464id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/everest-ransomware-now-selling-company-data-on-hacker-forums/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/research/everest-ransomware-gang-offers-access-to-compromised-networks.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/everest-ransomware-extortion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/everest","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.reuters.com/article/us-usa-products-colonial-pipeline-ransom/more-ransomware-websites-disappear-in-aftermath-of-colonial-pipeline-hack-idUSKCN2CX0KT","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gxp6yt3wdj7yky27j37jfrrbkuy24n2zo5uxyuoy23uf76d6m2gnfpid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://aihvh6j6fbkfjyc6jqbsh2ed4s3rym2v2pu6kd3z3exdso2xc2qwcuqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bifpwatchoxp7tsb2kpes37b23ogjrb2kj4wgr7yncf4hhgsfahu7jad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2vqamwfdpis5rkjtpkutigykp56n6hkxfurm6qukdxp6uz5uff5kkaid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ransomoefralti2zh5nrv7iqybp3d5b4a2eeecz5yjosp7ggbepj7iyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ep918","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/entropy","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2022/02/23/dridex-bots-deliver-entropy-ransomware-in-recent-attacks/?cmp=30728","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2022/02/23/dridex-bots-deliver-entropy-ransomware-in-recent-attacks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/adversaries/butler-spider/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://en.wikipedia.org/wiki/IntelBroker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mphasis.com/content/dam/mphasis-com/global/en/home/services/cybersecurity/june-21-12-the-intelbroker-data-leak-threat-actor.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/endurance","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/endurance","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://h44jyyfomcbnnw5dha7zgwgkvpzbzbdyx2onu4fxaa5smxrgbjgq7had.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.securityweek.com/donut-leaks-ransomware-group-claims-attack-on-continental/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/continental-confirms-data-breach-donut-leaks-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/continental-confirms-data-breach-after-donut-leaks-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/donutleaks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5zhg2foerm66oqdpmhs52pzfkwqx5rcfhje5j5rltctq5cjs653u3rid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dk4mkfzqai6ure62oukzgtypedmwlfq57yj2fube7j5wsoi6tuia7nyd.onion/index.php?","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://sbc2zv2qnz5vubwtx3aobfpkeao6l4igjegm3xx7tk5suqhjkp5jxtqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/diavol","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.scythe.io/library/adversary-emulation-diavol-ransomware-threatthursday","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2022/220120.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/trickbot-gang-developer-arrested-when-trying-to-leave-korea/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/fbi-links-diavol-ransomware-to-the-trickbot-cybercrime-group/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/diavol-ransomware-sample-shows-stronger-connection-to-trickbot-gang/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.binarydefense.com/threat_watch/new-ransomware-diavol-being-dropped-by-trickbot/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/posts/analysis-of-diavol-ransomware-link-trickbot-gang/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/walmartglobaltech/diavol-the-enigma-of-ransomware-1fd78ffda648","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/walmartglobaltech/diavol-resurfaces-91dd93c7d922","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://heimdalsecurity.com/blog/is-diavol-ransomware-connected-to-wizard-spider/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://chuongdong.com/reverse%20engineering/2021/12/17/DiavolRansomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/dataleak","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://woqjumaahi662ka26jzxyx7fznbp4kg3bsjar4b52tqkxgm2pylcjlad.onion/atom.xml","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://elastio.com/detectable-ransomware/darkbit/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/darkbit/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyberscoop.com/new-cybercrime-group-darkbit-israel/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2023/02/darkbit-ransomware-targets-israel","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/darkbit01","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iw6v2p3cruy7tqfup3yl4dgt4pfibfa3ai4zgnu5df2q3hus3lm7c7ad.onion/support/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mphasis.com/content/dam/mphasis-com/global/en/home/services/cybersecurity/dark-angels-ransomware-apr28-22-5.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2024/08/low-drama-dark-angels-reap-record-ransoms/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/dark-angels-team-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.isaca.org/resources/news-and-trends/industry-news/2024/darkangels-strikes-big-record-breaking-ransom-secured","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/shining-light-dark-angels-ransomware-group","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/darkangel","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://wemo2ysyeq6km2nqhcrz63dkdhez3j25yw2nvn7xba2z4h7v7gyrfgid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/dark-power-nim-based-ransomware-demands-10k-from-victims/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/research/dark-power-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/dark","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2022/221025.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/daixin-ransomware-hits-healthcare-targets-leaks-stolen-data/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/daixin","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://htz6biyazjyzzxllx4knuvux26xa2ixyjshjtwtgq4cm3vczylikm3id.onion/data/gift1/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://v66nzl27xxmrulq6c2plrzr7tryv2idflhclpoyxrrn3kfw5gkkpveid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r3h2balq6aa7plwe5p5bhxzwzxusrtldbfaamfseg33a5hk77bohzxyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qlfnwdg2fyvmzmqkk33iwku32ynsbbk6hysorsvvadr4o7gfzs4t46yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pkx3r7xe42z7fgkjjbocf7okdh77bsvngwvp6arykksob7gleyswicyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kyk6lixosktvbtf3g6zte7kdzid2lwrprfod55mhwunafx6jzeoui7yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kolbh6putvp6aw3vpmsppor4kyzs7ctxfbp2donetycftz5jru73ytid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://htz6biyazjyzzxllx4knuvux26xa2ixyjshjtwtgq4cm3vczylikm3id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7ukmkdtyxdkdivtjad57klqnd3kdsmq6tp45rrsxqnu76zzv3jvitlqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://profero.io/posts/cubaransomware/Cuba-Ransomware-Group-on-a-roll.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-335a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/unc2596-cuba-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2023/08/cuba-ransomware-deploys-new-tools-targets-critical-infrastructure-sector-in-the-usa-and-it-integrator-in-latin-america","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cuba","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/f/cuba-ransomware-group-s-new-variant-found-using-optimized-infect.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/mcafee-atr-threat-report-a-quick-primer-on-cuba-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/unc2596-cuba-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.it-connect.fr/le-ransomware-cuba-sen-prend-aux-serveurs-exchange/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2021/211203-2.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.guidepointsecurity.com/blog/using-hindsight-to-close-a-cuba-cold-case/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/ransomware-roundup-gwisin-kriptor-cuba-and-more","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.elastic.co/security-labs/cuba-ransomware-malware-analysis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.elastic.co/security-labs/cuba-ransomware-campaign-analysis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/microsoft-exchange-servers-hacked-to-deploy-cuba-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.aon.com/cyber-solutions/aon_cyber_labs/yours-truly-signed-av-driver-weaponizing-an-antivirus-driver/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/cuba-ransomware-tropical-scorpius/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://shared-public-reports.s3-eu-west-1.amazonaws.com/Cuba+Ransomware+Group+-+on+a+roll.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lab52.io/blog/cuba-ransomware-analysis/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2019/12/cuba-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.group-ib.com/hancitor-cuba-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://digital.nhs.uk/cyber-alerts/2021/cc-3855","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://kcfgfs7cclscxloy3bf2xtwnayimawtzrbfirfbvl47xt7n2brfiizyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i34gbmo5rxx3bxc4yl7f4erkyo2oldwavhpdragnjjvhni6fwvptp2id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cuba4ikm4jakjgmkezytyawtdgr2xymvy6nvzgw5cglswg3si76icnqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.singleton.com/blog/describing-crylock-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.alartindex.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/ransom.win32.crylock.h","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/16814-crylock-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/crylock","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.telekom.com/en/blog/group/article/lockdata-auction-631300","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Cryakl-B/detailed-analysis.aspx","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.elastic.co/blog/ten-process-injection-techniques-technical-survey-common-and-trending-process","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/971164798376468481","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/bartblaze/status/1305197264332369920","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/albertzsigovits/status/1217866089964679174","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.ru/shifrovalshhik-cryakl-ili-fantomas-razbushevalsya/24070/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/the-return-of-fantomas-or-how-we-deciphered-cryakl/86511/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/cis-ransomware/104452/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://hackmag.com/security/ransomware-russian-style/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.checkpoint.com/2015/11/04/offline-ransomware-encrypts-your-data-without-cc-communication/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://bartblaze.blogspot.com/2016/02/vipasana-ransomware-new-ransom-on-block.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cooming","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"coomingproject.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://heimdalsecurity.com/blog/cheerscrypt-ransomware-strain-attributed-to-chinese-hacking-group/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sygnia.co/threat-reports-and-advisories/revealing-emperor-dragonfly-a-chinese-ransomware-group/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/cheerscrypt/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/e/new-linux-based-ransomware-cheerscrypt-targets-exsi-devices.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-ransomware/cheerscrypt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cheers","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rwiajgajdr4kzlnrj5zwebbukpcbrjhupjmk6gufxv6tg7myx34iocad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bonacigroup","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cloudsek.com/blog/technical-analysis-of-bluesky-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.unit42.paloaltonetworks.com/bluesky-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/bluesky/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-ransomware/bluesky","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bluesky","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://yoroi.company/research/dissecting-bluesky-ransomware-payload/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/bluesky-ransomware-ad-lateral-movement-evasion-and-fast-encryption-puts-threat-on-the-radar/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/bluesky-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blacktor","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bl%40ckt0r:bl%40ckt0r@bl4cktorpms2gybrcyt52aakcxt6yn37byb65uama5cimhifcscnqkid.onion/0x00/data-breach.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://heimdalsecurity.com/blog/cyberserve-hijacked-by-blackshadow-hacker-group-to-extort-customers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyberscoop.com/hack-and-leak-group-black-shadow-keeps-targeting-israeli-victims/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackshadow","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blackshadow.cc","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bianlian","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=DPFcvSy4OZk","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.virusbulletin.com/uploads/pdf/conference/vb2022/papers/VB2022-Hunting-the-Android-BianLian-botnet.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.virusbulletin.com/uploads/pdf/conference/vb2022/slides/VB2022-Hunting-the-Android-BianLian-botnet.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.threatfabric.com/blogs/bianlian_from_rags_to_riches_the_malware_dropper_that_had_a_dream.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/new-wave-bianlian-malware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1558548947584548865","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://rhisac.org/threat-intelligence/bianlian-ransomware-expanding-c2-infrastructure-and-operational-tempo/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://redacted.com/blog/bianlian-ransomware-gang-gives-it-a-go/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cryptax.medium.com/quick-look-into-a-new-sample-of-android-bianlian-bc5619efa726","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cryptax.medium.com/multidex-trick-to-unpack-android-bianlian-ed52eb791e56","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cryptax.medium.com/creating-a-safe-dummy-c-c-to-test-android-bots-ffa6e7a3dce5","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cryptax.medium.com/bianlian-c-c-domain-name-4f226a29e221","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cryptax.medium.com/android-bianlian-payload-61febabed00a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2022/10/bianlian-ransomware-encrypts-files-in-the-blink-of-an-eye","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2022/08/18/bianlian-new-ransomware-variant-on-the-rise/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/content/dam/blogs-blackberry-com/images/blogs/2022/10/bianlian-fig05.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://redacted.com/blog/bianlian-ransomware-gang-gives-it-a-go/v28_screenshot.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://redacted.com/blog/bianlian-ransomware-gang-gives-it-a-go/v8_screenshot.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://qtox.github.io/\\n\\nAdd","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bianlianvjr9vhy72f782342yvygfciusgfisgiygfs1bredw.i2p/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bianlivemqbawcco4cx4a672k2fip3guyxudzurfqvdszafam3ofqgqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bianlianlbc5an4kgnay3opdemgcryg2kpfcbgczopmm3dnbz3uaunad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/babyduck","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/1445873002801889280/photo/3","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://digitalrecovery.com/wp-content/uploads/2022/12/Ransomware-Baby-Duck.webp","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"README.babyduck","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.torproject.org/download/)","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/babuk-locker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyberint.com/babuk-locker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/babuk-ransomwares-full-source-code-leaked-on-hacker-forum","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/leaked-babuk-locker-ransomware-builder-used-in-new-attacks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion/#section-3","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/aztroteam","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/avaddon","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/la-es/2021/05/31/ransomware-avaddon-principales-caracteristicas/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/ransomware-report-avaddon-and-new-techniques-emerge-industrial-sector-targeted","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tgsoft.it/files/report/download.asp?id=568531345","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.swascan.com/it/avaddon-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hornetsecurity.com/en/security-information/avaddon-from-seeking-affiliates-to-in-the-wild-in-2-days/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.connectwise.com/resources/avaddon-profile","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/avaddon-ransomware-shuts-down-and-releases-decryption-keys/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/another-ransomware-now-uses-ddos-attacks-to-force-victims-to-pay/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advanced-intel.com/post/the-rise-demise-of-multi-million-ransomware-business-empire","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/dk_samper/status/1348560784285167617","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/Securityinbits/status/1271065316903120902","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatconnect.com/blog/threatconnect-research-roundup-probable-sandworm-infrastructure","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/avaddon-ransomware-operation-shuts-down-and-releases-decryption-keys/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/quick-analysis-of-haron-ransomware-feat-avaddon-and-thanos-1ebb70f64dc4","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labs.sentinelone.com/avaddon-raas-breaks-public-decryptor-continues-on-rampage/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyber.gov.au/sites/default/files/2021-05/2021-003%20Ongoing%20campaign%20using%20Avaddon%20Ransomware%20-%2020210508.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.acronis.com/en-us/articles/avaddon-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://atos.net/en/lp/securitydive/avaddon-ransomware-analysis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://heimdalsecurity.com/blog/avaddon-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://avaddonbotrxmuyl.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/atomsilo","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/siri_urz/status/1437664046556274694?s=20","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://chuongdong.com//reverse%20engineering/2021/10/13/AtomSiloRansomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.atomsilo","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/threatintel/decryptor-for-atomsilo-and-lockfile-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://chuongdong.com/reverse%20engineering/2021/10/13/AtomSiloRansomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/10/04/atom-silo-ransomware-actors-use-confluence-exploit-dll-side-load-for-stealthy-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/siri_urz/status/1437664046556274694","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/atomsilo-ransomware-enters-league-double-extortion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/outofband/malware-research-on-atomsilo-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/images/stories/screenshots202109/atomsilo-ransomware-ransom-note-in-gif-image.gif","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/media/2021/10/Fig-2-B.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/media/2021/10/Fig-2.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"download-easy.html.en","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"atomsilo.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"AtomSilo.Sorry","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://npmh5ahrgakbniuntyc7io4adm6ietbdbuejrfonowqtyqn24or556qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/arvin-club","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cloudsek.com/ar/threatintelligence/ransomware-group-profile-arvin-club","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/arvinclub","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t.me/arvin_club","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://arvinc7prj6ln5wpd6yydfqulsyepoc7aowngpznbn3lrap2aib6teid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://sonicwall.com/blog/ako-ransomware-demands-3000-operators-hide-behind-tor","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://attackiq.com/2025/01/09/emulating-ako-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://tripwire.com/state-of-security/ako-ransomware-using-spam-attachments-to-target-networks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ako","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/images/stories/screenshots202010/ako-ransomware-update-2020-10-15-text-file.gif","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/images/stories/screenshots202004/ako-update-2020-04-21-html-file.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/images/stories/screenshots202004/ako-update-2020-04-21-text-file.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/images/stories/screenshots202004/ako-ransomware-update-2020-04-09-text-file.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/images/stories/screenshots202001/ako-ransom-note-second_variant.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/16737-ako-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://digital.nhs.uk/cyber-alerts/2020/cc-3345","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/images/stories/screenshots202001/ako-ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ako-readme.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"thcw5gz75qncv7rbhyad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"buydecrypt.hk","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"cw5gz75qncv7rbhyad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"www.torproject.org","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kwvhrdibgmmpkhkidrby4mccwqpds5za6uo2thcw5gz75qncv7rbhyad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.knowbe4.com/hitler-ransomware-just-deletes-files-instead-of-encrypting-them","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://siliconangle.com/2016/08/10/hitler-ransomware-may-be-goosestepping-onto-a-computer-near-you/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.theregister.com/2016/08/10/hitler_ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.infosecurity-magazine.com/news/hitler-ransomware-deletes-users/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.securityweek.com/unfinished-hitler-ransomware-variant-deletes-user-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/development-version-of-the-hitler-ransomware-discovered/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/agl0bgvycg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/fr0s7_/status/1460229982278541315","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/hitler_ransomware.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hitleransomware[.]cf/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hitlerransomware[.]000webhostapp[.]com/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/abrahams-ax","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/abrahams_ax","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/blog/abrahams-ax-likely-linked-to-moses-staff","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://abrahamm32umasogaqojib3ey2w2nwoafffrguq43tsyke4s3fz3w4yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"EgenSajt.se","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/0mega","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyware.com/news/new-0mega-ransomware-joins-the-double-extortion-threat-landscape-158fb321","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-0mega-ransomware-targets-businesses-in-double-extortion-attacks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"DECRYPT-FILES.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kbavsfyafrpsostfrkg2w2f7ttf55sz3pfqmoza3o2t3mhrdalvdu7yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://0mega.ws/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://0mega.cc/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://omegalock5zxwbhswbisc42o2q2i54vdulyvtqqbudqousisjgc7j7yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/f/karakurt-data-extortion-group.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/karakurt-data-extortion-group-linked-to-conti-ransomware-gang/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/karakurt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://t5sb509msc3q4ls06o1g8e4egfxl1o7e79yvlldakfphc0nf7rwiyphv.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nrulhk2lbzt7jw6tnsq6gkjrn37j7uwfu5oxbuxezgherhuhakl2tqid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jo7jezin3bmprlivyleqfv7rq3j4m36hd7bf2bguabxf2rlyrvrjwhad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://53dxw3yoeirahqn263a7ihzv2hhsjzdgvwqxdcuujlsrctmqzsph6tid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://karakurt.tech","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.karanews.live","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3f7nxkjway3d223j27lyad7v5cgmyaifesycvmwq7i7cbs23lb6llryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/avoslocker/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://purplesec.us/breach-report/avoslocker-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/retrospective-avoslocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-284a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/avos","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/avoslocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2022/06/avoslocker-new-arsenal.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2021/07/avoslocker-enters-the-ransomware-scene-asks-for-partners/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-intelligence/2021/07/avoslocker-enters-the-ransomware-scene-asks-for-partners","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2021/07/23/deep-dive-analysis-avoslocker-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/e/avoslocker-ransomware-variant-abuses-driver-file-to-disable-anti-Virus-scans-log4shell.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cdn.pathfactory.com/assets/10555/contents/400686/13f4424c-05b4-46db-bb9c-6bf9b5436ec4.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/12/22/avos-locker-remotely-accesses-boxes-even-running-in-safe-mode/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2022/01/17/avoslocker-ransomware-linux-version-targets-vmware-esxi-servers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.vmware.com/security/2022/02/avoslocker-modern-linux-ransomware-threats.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.lexfo.fr/Avoslocker.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.qualys.com/vulnerabilities-threat-research/2022/03/06/avoslocker-ransomware-behavior-examined-on-windows-linux","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2022/04/threat-thursday-avoslocker-prompts-advisory-from-fbi-and-fincen","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.avos_locker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/elf.avoslocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tripwire.com/state-of-security/avoslocker-ransomware-what-you-need-to-know","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.techrepublic.com/article/avos-ransomware-updates-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://brandefense.io/blog/ransomware/in-depth-analysis-of-avoslocker-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.picussecurity.com/resource/avos-locker-ransomware-group","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.kroll.com/en/insights/publications/cyber/avoslocker-ransomware-update","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/avoslocker-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.avertium.com/resources/threat-reports/in-depth-look-at-avoslocker-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/content/images/AVvXsEhKEpexiVYKoELvESd2mP0ZXLbQYgWcVJaE5VB9--yD3vS6FTVNfNbPkAHtJp3KjN1ANKVLa4zWvuEFN68QaepAj_xF3j9TrzqUMoOwvQXx_zIOH9Ar31JgWYX4mlpUIPLaLi76aWawvifF56qKZ1mgXncCRwAmu_fjqmD_PTWu_84E_uTqnW2qZIPM/s16000/image4.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.torproject.org/download/\\nDetails","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://avosjon4pfh3y7ew3jdwz6ofw7lljcxlbk7hcxxmnxlh5kvf2akcqjad.onion.\\nThis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/redalert","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gwvueqclwkz3h7u75cks2wmrwymg3qemfyoyqs7vexkx7lhlteagmsyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ybxtfftwy2iwfqjy7fvvcrt5sd55fx3sk2yuztbx3y2dxb4dvqdhsiid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ocsmkribkmoij3uhvhxlpxlpebqhzo5uingee7mvebnv57jqya745uyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qrcxhs4x2n4a65rk3zbwm5hu6475bi4w2mdjhfmusovnjc6hc6qcv3ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog2hkbm6gogpv2b3uytzi3bj5d5zmc4asbybumjkhuqhas355janyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackbyte","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/my/security/news/ransomware-spotlight/ransomware-spotlight-blackbyte","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/trellix-global-defenders-analysis-and-protections-for-blackbyte-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://de.darktrace.com/blog/detecting-the-unknown-revealing-uncategorised-ransomware-using-darktrace","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2022/05/the-blackbyte-ransomware-group-is.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2022/10/04/blackbyte-ransomware-returns/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://research.nccgroup.com/2022/07/13/climbing-mount-everest-black-byte-bytes-back/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/the-blackbyte-ransomware-group-is/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/analysis-blackbyte-ransomwares-go-based-variants","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/research/trellix-global-defenders-analysis-and-protections-for-blackbyte-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/fbi-blackbyte-ransomware-breached-us-critical-infrastructure/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/san-francisco-49ers-confirm-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2022/220211.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://redcanary.com/blog/blackbyte-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lh5.googleusercontent.com/sw0iG6WGVHRRM7NQsTjmt1ut60TH-_VPe1Fo57XuYeBOMw9PrvI4lCqyCPueiEXvbAZ-ks3KHXmnS81JvGYaMf31tSL1Eejx-BZ973EctAqjb-u3R6k-9UC0GqhkLQxgMC6lqtp7","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://torproject.org/\\n\\n2)","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://torproject.org/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kpfj3bmo77bwpy2f5zzwj4knatueuv7t3ldlpp4tlrmv2buiziw2tdyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p5quu5ujzzswxv4nxyuhgg3fjj2vy2a3zmtcowalkip2temdfadanlyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://inbukcc4xk67uzbgkzufdqq3q3ikhwtebqxza5zlfbtzwm2g6usxidqd.onion:81","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vzzf6yg67cffqndnwg56e4psw45rup45f2mis7bwblg5fs7e5voagsqd.onion:81","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a2dbso6dijaqsmut36r6y4nps4cwivmfog5bpzf6uojovce6f3gl36id.onion:81","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://53d5skw4ypzku4bfq2tk2mr3xh5yqrzss25sooiubmjz67lb3gdivcad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jbeg2dct2zhku6c2vwnpxtm2psnjo2xnqvvpoiiwr5hxnc6wrp3uhnad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dlyo7r3n4qy5fzv4645nddjwarj7wjdd6wzckomcyc7akskkxp4glcad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/blackbasta-ransomware-linked-to-conti-gang/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/f/blackbasta-ransomware-attacks-target-windows-and-linux.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/blackbasta-ransomware-group-an-analysis/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-131a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackbasta","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cynet.com/blog/orion-threat-alert-qakbot-ttps-arsenal-and-the-black-basta-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-blackbasta","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/threat-assessment-black-basta-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityscorecard.com/research/a-deep-dive-into-black-basta-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/luna-black-basta-ransomware/106950/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/f/black-basta-ransomware-operators-expand-their-attack-arsenal-wit.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://gbhackers.com/black-basta-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/posts/black-basta-ransomware-group-besting-network/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/e/examining-the-black-basta-ransomwares-infection-routine.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-black-basta-ransomware-springs-into-action-with-a-dozen-breaches/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/american-dental-association-hit-by-new-black-basta-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.blackbasta","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/content/dam/trendmicro/global/en/research/22/e/examining-the-black-basta-ransomwares-infection-routine/blackbasta08PII.PNG","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/content/dam/trendmicro/global/en/research/22/e/examining-the-black-basta-ransomwares-infection-routine/blackbasta07PII.PNG","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/b/black-basta/ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/b/black-basta/wallpaper.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://aazsbsgya565y1u2c6Lay6yfiebkcbtvvcytyolt33s77xypi7nypxyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://torproject.org)","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ond5arqab77n6tykvi4aqp7oqegqdfgqfyf7fzyhfyhmbp7iafpzdtad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bpeln2aqs66qqfuex2cvcyjiy5ggcwbyh5nbmxzxt6daamkmpmufv4qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion:80/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://onlylegalstuff6.top/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l6zxfn3u2s4bl4vt3nvpve6uibqn3he3tgwdpkeeplhwlfwy3ifbt5id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://databasebb3.top/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://daulpxe3epdysjozaujz4sj7rytanp4suvdnebxkwdfcuzwxlslebvyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fmzipzpirdpfelbbvnfhoehqxbqg7s7efmgce6hpr5xdcmeazdmic2id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://megatron3.top/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://greenmotors5.top/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://stuffstevenpeters4.top/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://thesiliconroad1.top/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://weqv4fxkacebqrjd3lmnss6lrmoxoyihtcc6kdc6mblbv62p5q6skgid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r6qkk55wxvy2ziy47oyhptesucwdqqaip23uxregdgquq5oxxlpeecad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6y2qjrzzt4inluxzygdfxccym5qjy2ltyae7vnxtoyeotfg3ljwqtaid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://mphasis.com/content/dam/mphasis-com/global/en/home/services/cybersecurity/icedid-infection-to-dagon-locker-ransomware-apr29-22-7.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.broadcom.com/support/security-center/protection-bulletin/dagon-locker-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/42037/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/anthology/dagon-locker/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/dagonlocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/quantum","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thedfirreport.com/2022/04/25/quantum-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/cybereason-vs.-quantum-locker-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://kienmanowar.wordpress.com/2021/08/04/quicknote-mountlocker-some-pseudo-code-snippets/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://chuongdong.com/reverse%20engineering/2021/05/23/MountLockerRansomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/Finch4/Malware-Analysis-Reports/tree/master/MountLocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2020/12/mountlocker-ransomware-as-a-service-offers-double-extortion-capabilities-to-affiliates","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://dissectingmalwa.re/between-a-rock-and-a-hard-place-exploring-mount-locker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/mount-locker-ransomware-now-targets-your-turbotax-tax-returns/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/mount-locker-ransomware-joins-the-multi-million-dollar-ransom-game/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityscorecard.pathfactory.com/research/quantum-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.mount_locker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.guidepointsecurity.com/wp-content/uploads/2021/04/Anonymized-Ransom-Note-1-1024x655.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zes5libwlgrfnttkpgtbimbixyb4t6k6rhuxhayzq76j7zgxqt64piad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yizydlt5rl6br3qihvjdgfsprrq2ealnoq2eg6koqs6yv47d3byucxqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xrjwgvn3sv75zrcmfdarz3futzx54uyy6o6si5pj5phhee3nlokkopyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://x3djueexuhivjtdj5udkjzfsm37kiaoeqy5ywluljbfsf2wsuom5yyid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wly4qu4q6abduzwm7ryai4ehysgnk5f25v6ddofcyuasbfntwnqjkcid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wcmxtfzde2hmhsreqgflwvkawmyfvuyqcebuq5w5qj3rllo2jpb4l2yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uwr2mmcqtroeyu6bzgivwwzdcpe2a4e74r2srlzveyltsi57n5bnsbqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rrmywkltwjpntybqj7migd5ibdzzxulnhgndb6dnoe6unlljslqb7lid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q45frho6hatxtx7qxjytt4cswinakvc2h6iag65jlsaws32xdzz47kyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oyjydoka32xa24doeymhq4thoibxqdd7i7hnngojpycd74frggkvhyyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ohmhgcrvte6aftgnm5lefq7ztannicarzo6lus2bih3zg6ugklf4tsyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nxvvamxmbdn3latdplq6azgeeuieaek32h674nl6lzavcod2f2obvxyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nugus3xk456m3xhokm2q5zusujhqodirm5vfke6jmsej2jy6sgbn4oqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://leqg2fthiage4ockldnf7trwdx3bvehni7vjf6wbwsitnbjtotbv3nid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k2j6llaw66bvlgxcy67uj2prdqqzbl7aj46wab4mpdyizpmati55kfad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://friazjtqhznoknwi5354lnkwa4lhgjti74l4asfhsjeoe5dulwitpcqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fjlprvuqzs6h4ielcdkmof5nju3ent7c34esaptm7677xono7osvp5yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dw6sy3pt54fh6d3yo4wpb7qjtwdlyyi3qd5oabdwlmlmuyhsxvnblvqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dblgdn4manmaiewnsqa3vgm26v7ujtx75wtev5pyfmtpww4ofqrqpiid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ct7jsq3dbwcvcafnwli7tfv2pf62y2rfhos4a66gu7twqkcclkih6wqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cee77a5wsey5vohubq76en4bgsqbdrasito3zn7ziu5vouhbzxtx6syd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bi7v6o5djhfji22usugjzpk26nvvwugaubrf3yypyvmkzw7su2nad5id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bfdwhgjey6xb25e6pc6i7upnswh4znqwwnmlmgzapiwfmt7ugzcwvyyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b2rt3dmb62jo62e2rr5rfrpyomka477tjkcni2fsamjd3wksolae5wqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://agxyd52t6tfoahsvi6mfk7nqwpoe2xj6wp75vnv7ffrfxg5vtw6guxid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7sqjgyldxtur4p3nkpdzacldqonnovklnibxhz4y6saremsrmh6vf2yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7qlb63hy45ijihaeal26uyoms4r33dlrg64dr7ry7blnzhhwhov6jsad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://77jtf3wyb4rtsemeodl6h3hfblhgwj32ex3r7ywigg5mzfaqf7w5x7qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6kkjbpmqavf2nvs33furf3hywg2z4e4zrnwnmzegcpq4atfyp3jilnid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3uzycwcxrccpvrwx43mpr3gxwcqqgu4x72kedws6zuolp45gopjrzqyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2k5qdebrbzv2uj2xz25f53bhjyqgmv2vixyy7p3vaeeb2bqz6jhnalad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2gknqtqreqfoedfd3sey4vqgp7fhc4xyagtj6yl3pz6swkliuakfx7ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://275dg33wjetp6arghjtp3d7265nsknx2heho5n6bqioy2ehl7c3i3iyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://26gzvue4vlgxuiaaotxl3bbdepuf55sdrsailywbrc7kdrcgwo62ghqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dgnh6p5uq234zry7qx7bh73hj5ht3jqisgfet6s7j7uyas5i46xfdkyd.onion/?cid=","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://quantum445bh3gzuyilxdzs5xdepf3b7lkcupswvkryf3n7hgzpxebid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/hive","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/hive-ransomware-deploys-novel-ipfuscation-technique/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.scmagazine.com/brief/breach/novel-obfuscation-leveraged-by-hive-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.netskope.com/blog/hive-ransomware-actively-targeting-hospitals","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2022/07/05/hive-ransomware-gets-upgrades-in-rust/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.incibe-cert.es/sites/default/files/contenidos/estudios/doc/incibe-cert_estudio_analisis_hive_2021_v1.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2021/210825.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.connectwise.com/resources/hive-profile","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/hive-ransomware-uses-new-ipfuscation-trick-to-hide-payload/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labs.sentinelone.com/hive-attacks-analysis-of-the-human-operated-ransomware-targeting-healthcare/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://yoroi.company/research/on-the-footsteps-of-hive-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1455628865229950979","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/ESETresearch/status/1454100591261667329","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/hive-ransomware-shuts-down-california-health-care-organization/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/academics-publish-method-for-recovering-data-encrypted-by-the-hive-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2022/02/master-key-for-hive-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.co/wordpress/128232/security/recover-files-hive-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lifars.com/2022/02/how-to-decrypt-the-files-encrypted-by-the-hive-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/rivitna/Malware/tree/main/Hive","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.group-ib.com/hive","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://arxiv.org/pdf/2202.08477.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.healthcareitnews.com/news/fbi-issues-alert-about-hive-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://inf.news/en/tech/c28d9382ab78a5ac3d8fc802f3f0f1e0.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.varonis.com/blog/hive-ransomware-analysis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://yoroi.company/wp-content/uploads/2022/07/Yoroi-On-The-Footsteps-of-Hive-Ransomware.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2022/07/05/hive-ransomware-gets-upgrades-in-rust/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-hive","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/hive-attacks-analysis-of-the-human-operated-ransomware-targeting-healthcare/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.hive","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"DECRYPTO.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"key.hive","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hivecust6vhekztbqgdnkks64ucehqacge3dij3gyrrpdp57zoq3ooqd.onion\\n\\tLogin:","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"key.abc","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hive[REDACTED].onion/\\n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hive[REDACTED].onion/\\nyou","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://arcticwolf.com/resources/blog/lorenz-ransomware-chiseling-in/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://marvel-b1-cdn.bc0a.com/f00000000241276/arcticwolf.com/wp-content/uploads/2022/09/Screen-Shot-2022-09-12-at-11.18.04-AM-1024x246.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/uscert/ncas/alerts/aa22-187a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://stairwell.com/wp-content/uploads/2022/07/Stairwell-Threat-Report-Maui-Ransomware.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/helloxd-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/wp-content/uploads/2022/06/image13.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Hello.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/rook","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/new-rook-ransomware-feeds-off-the-code-of-babuk/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://seguranca-informatica.pt/rook-ransomware-analysis/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/Dump-GUY/Malware-analysis-and-Reverse-engineering/blob/main/NightSky_Ransomware%E2%80%93just_a_Rook_RW_fork_in_VMProtect_suit/NightSky_Ransomware%E2%80%93just_a_Rook_RW_fork_in_VMProtect_suit.md","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://chuongdong.com/reverse%20engineering/2022/01/06/RookRansomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/techyteachme/status/1464317136944435209","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/new-rook-ransomware-feeds-off-the-code-of-babuk","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/pandora","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/looking-inside-pandoras-box","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/Using-emulation-against-anti-reverse-engineering-techniques","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://kienmanowar.wordpress.com/2022/03/21/quicknote-analysis-of-pandora-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://dissectingmalwa.re/blog/pandora/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cloudsek.com/technical-analysis-of-emerging-sophisticated-pandora-ransomware-group/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2022/03/15/deep-dive-analysis-pandora-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://dissectingmalwa.re/blog/pandora","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1501857263493001217","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pandoraxyz.xyz/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vbfqeh5nugm6r2u2qvghsdxm3fotf5wbxb5ltv6vw77vus5frdpuaiid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/03/31/sophos-mtr-in-real-time-what-is-astro-locker-team/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatpost.com/mount-locker-ransomware-changes-tactics/165559/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mount-locker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.securitymagazine.com/articles/94954-sophos-identifies-connection-between-mount-locker-and-astro-locker-team-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/mount-locker-ransomware-joins-the-multi-million-dollar-ransom-game","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyclonis.com/mount-locker-ransomware-more-dangerous","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/alphv","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/crimeware-trends-ransomware-developers-turn-to-intermittent-encryption-to-evade-detection/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2022/06/13/the-many-lives-of-blackcat-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2022/220420.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/cybereason-vs.-blackcat-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/german-wind-farm-operator-confirms-cybersecurity-incident-after-ransomware-group/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityscorecard.com/research/deep-dive-into-alphv-blackcat-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityscorecard.com/blog/ttps-associated-with-new-version-of-blackcat-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2021/12/blackcat-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/blackcat-ransomware-implicated-in-attack-on-german-oil-companies/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/blackcat-ransomware-as-a-service.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.forescout.com/resources/analysis-of-an-alphv-incident","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/hive-ransomware-ports-its-linux-vmware-esxi-encryptor-to-rust/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advintel.io/post/blackcat-in-a-shifting-threat-landscape-it-helps-to-land-on-your-feet-tech-dive","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/sisoma2/status/1473243875158499330","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/a-bad-luck-blackcat/106254/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2022/01/who-wrote-the-alphv-blackcat-ransomware-strain/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://killingthebear.jorgetesta.tech/actors/alphv","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.group-ib.com/blackcat","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.emsisoft.com/en/40931/ransomware-profile-alphv/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyber.gov.au/acsc/view-all-content/advisories/2022-004-acsc-ransomware-profile-alphv-aka-blackcat","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/blackcat-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.varonis.com/blog/alphv-blackcat-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/blackcat-ransomware-highly-configurable-rust-driven-raas-on-the-prowl-for-victims/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/f0wl/blackCatConf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1-id--ransomware-blogspot-com.translate.goog/2021/12/blackcat-ransomware.html?_x_tr_enc=1&_x_tr_sl=ru&_x_tr_tl=en&_x_tr_hl=ru","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.blackcat","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/wp-content/uploads/2022/01/word-image-78.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ihoqnxnvdwybrv6kiteiesjc3ic6du6axtv3arouxr6ddswrxa2wrbyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://32b2vdt4nrljyqwinwtqxzech5lqxtj7knkhkgk7akv5b4mfb456lhid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2ehvy7e4ng3hcqp2e6af4pnnhehn3wi6ts5ulal4qtpc73c6y67x4eyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://knt3cs4tkxqdnrjrzk3n7txyhb6c5szkgjwy74jomyvy5xuli5qcdsid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kgu25rbtoh5v4s65pcsahocn62m6lo3u42odko6dm2oqfg5mzz3zsnid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g7btluffqpexhytokv5yjvbksuzcp5ngt5jkcsvnuhajsl42q6s7fpyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3id2g6u3dwvg7nsarfkgsdf3odp5hb7owvnoqbipbisekudptetuxtad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4qmsi7vcdrrutxapxbc7eofjjzfsvam3fehgmk6xyivwcroqkqjij5qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3xa42kwkeiwzhjybddfeifad7vn2kvsslybquledvib5xsfkylwtwyid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ajdtbop62plz3s2uw3rjtegilw4lfmixl7h4p6oset5rq5jihwtehtad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ni2bv45lwna3rshqcmr5hegowp764qhzooi42bddf52557uhaafbdvid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://authil5bvxkjdiwk7qmdxhxlu2mfinm4hhdcnv24chrc5wzvua2kadad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g5a2thsvpabyjp6prphsque7nyaauul4rryr2nulytakggkecls23bad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tslnzzg2kkczuo44rdoqkskzaopsqnhrm54bq5sfocxc2fvzll5roqyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fymqpsou7kwvovkh5uxr4ehwd2tibqhmp25p2mzoi2thtrcstwb2ojid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kwjsef73vtinlkt7t4hp3qsjga7uue65elq7jgmtovejsemhp56mnyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ezh5qco6s7hju7uutdogqebrrq6qn3gixodtdnks6t6bbumw4n6c4aad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7u36ktiv5idgyhyyeociikvftwfkaihisndnqick4qoe4wssjphdihqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u65evpr7ejtac7cfi3getxwehllwgjdjgkxvrvjq2dmetjuj2uuii7qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pfdyhkswxf33nkjlbm2h2lluujca7tdcbmpwd74x5muv4aj5qenaj4qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6424n6oazcc5r2waycgrnu57lorupzvcjjphqhu75pn4atcd6oedjgad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xxulor6gj34lqgvj25t6h2giqqic7puhd4khctkr4xb7gsnfdxewfvqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://b34sad6mkvajaffq42fahjiharyfvxwg2va5ybwa2zl5srhmhdhwdqyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zcvqzunsmuotuiw7biqbsacf75uam7rvsfa46ppqwncpt2jxp3x5ryad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5azi3hg5bhi37z3dwivqrwhooos4wefome5fdbnz3n3kxvzaycqqd2id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ef4rbuuqzczn2jah6tafzehoglye46vngv55pnddilmh7srpwpfa5fad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ra4uys2f4pslov55oj23ckudpbmovj7brrqqnzwu25ux5ul62crbkryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dvvn42vb7umu2ldio424mlwhirmi2isxhbmdbhwbcnbhiekovdwe62qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4ozcr5lsrsdxbo3kuqbayykrrl23j2yzmkc7ucgvsu7ejhwlzktzxcid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cs5c7mye7anrko6axmio5ebugh6gnqas4jbznf4po47i6gfuzuk4zeyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qojfcbvlumvzmiu4tyixawquk6bjiwv74aeaubxwtq7rmw4qq7sv2jad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l7fuh4h4wiseaarmysosohdsfjyya3nkqqx7o74k7wa63ajvalb4g5id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ajtwxvgqssarrfbgbctqrmujf75hbj5l3yu75du4jdhgigiu6e5xosad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3hqc4b7iimn3rltumz2l7qbzw4bcx6mgkvbm6yzlkzpcauzmlpqucgid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qnjf77dap5e34rw56triaklvaepxeebrku5iaqpnzsm6dy2fyob6csid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://o76kftemw4lz2dmbaqlkvlq263cbb2twdy5q3767xb42zs7ovvu3yiqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kqpmhriaqt4kujfnm3wv7ujgzx5pujqqd4logzgzzq3w5wctm62c5uid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u237r6z6axkagn6t2qiwx2rrvmq7pvz53tph7hl64geg3ee55gw66kad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kqmsxmbzkw33qgnbanoaaekuqa65qtk6777w4mkqku4r5kmksk2agtid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://y5qmdnyxbvbx7l2uudjgc4nrlwo6zqhvevr3v5ux5ln7dg2yxvnjcvyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xh23q4ps4lgsbkiifbztqt2w7cacjbkv7b3rpl3o6id262lqwmzooyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uduar2yzjwxbrjjnajaoe6y4nlnfx7bighampsukuwc5ibvcpit5okyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://acbyrlcgiv6qotpdynv7fu3bpyqtcbo3g3xqqhxrixrrlr2iiasbzzqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jow26ytlhvkjjc4dluier5y5ma2bbusexyczpgtfzdx4sh4dzmndbpid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://snmb65b36sfmx7os37mzqrrmu2zdon237qvafg5p5274nint7i655uqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tquqffwz5qepxnqtcd5ei3bzqjsyds2g2ywbxxr46nb2z4h7g2jlsjyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yqnzk23gtyf7ayrsgvo6xstbc7mi4j2g4ux5trnqygjbccmvl6q6qfqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ywuqjgj4nnp7sii4ufpqriwinvm5onbxpemr5e6i2bve6nviirqkugqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://f646peycufbfenfevgpgl7kipwd6j4wez6m2phbgtckufnqiq3cedxad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bx6b255itzvrlprn7kzdzjg6bly54irlox5csndcbymtfaqecjyfv3qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ic6owbrtkkymvcyxlvqzocungo54veltezfbvr7dgss4xioi5kfjb5yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://prbabjw42fjlzveba3q3wlo47jy2ksa76e2fnkt4tftyvylv32lv7lqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tjmo27stmgvg45k3jltnk2zi6xglze2ml7tgx5ihkacrewabdgcw4bad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6o345jyfcsrep5dcaqrgd3vv636ctwri44u6fpy4soxg3se7iqhtdgid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gtjoeyd6kus67etnla2dzmxpfd43lozfrwwyozc4pr3jdnu3bericxad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6rix6baa5hvfukufxynvnisglz6j3xxemu56zpxpyglbvnkl6ekd2uyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eiv53oqiermgz7o5bt3ct4aaedme3qx6l7cmk3sedx2m6njt43bo4vid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://utuc2ul4pdmomok4uozskzumjdh7jk2pjab5suquszybcfkvmfd2lrid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://has6dlzs5mbxl2xkh4exhvg2k4hx4ijpntkpnbhdi37ecqv7ekxu5vid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7evca3nibwfav5knc2ksid4khqd7ycgdn6u75r6zjuyytb4vmawxdmad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://epjpr6zxovifiwo2hwcc2ybrqbud4qbk3sc2swqsz3zduoluw5dvnvyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sbpfz6p7uryiuv75rnhl324nazcwsjmaaf6z4o2kiic2tbiguts6hbad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4cc2rnrc4jycvf5kagldnusszmrjdpytm4smhs6gmwvci2l7wlqytlad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3b4bsnquxnxqh64xd56ouav2epxqzrbkbm7j767nwq2lnmtpo7atqmqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xsny4ojubybbn6pe6zhrrflggu6lbq3ir3ixcpbtxzplwwjqi4dqidqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://esb67w4m3uhizvoyt7dhcnxj22iv4eq5uiuyysrljn36jf376y4dcyid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q4pno5sryymcs27txqv7ypmp4lb3z7fyh3mpvk7asqun45wvrq3mprad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7q4ha572hakhru54jxonbpnhch3nlhwdw7ughj5j3jhiyyr2lflxojqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rjztxzrwzbdgas53v23g5sgmtl7nb7qplrzu3x7b4n2dsy5uq54vgyyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oaiogo6dhwk7buevuib5awotcu2gotscqq2twthygxsagtnmp2zcbcid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://onnaqkbezn3c2c667lp2bj6ycmns557i7lqr2ms7w25ed63745rbreyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zkvwuf2mzqs33vuvhk3pxk3jphvps3ldivwa5qljyryj673mbszjrnqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wpsi2cbbm3ckhgizllilxohq3ejpvj2m34grvcmx76eqwtrhzjeo7ead.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rjwjksouddfq3x2jzieb6k7gpkjv7ukyfwqinterxtbtrsoipk6qedad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pl6muez3z2vulhixcyipmi6n5xaynkew6umjhhv64xg2baomk6pzzayd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://glt2d33vz3snwvqlje6qrw5khsej7auow4nxnvelwh7udq7df6vnblid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zyb7j23sfsert574hii342lwnz7qeyw2kb7zom74wjabwhifhpoknaqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3tdyvf3u4xko2xbra3bi4qsj2pedqdkglxkgfofyqip2sljxdbwyymyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://med6cjvoucuksae7f7bdbyql26peuqe2pyurw6zshepumnhl3qyntsyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7fncnamu5ghwrj43qifs3nf7xeif4kgd2olcpt636yz4n5cm5nd7gvyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qsmu6ufeelmqfzk5odx2rlg23ic46q7eamemi3ho23qads3wkqo6pmid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://olmvtwarcgoqreayhpjhxtl7tozj5fnmyavzj5jphyy4d2qccio4klyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pedsqcmmkfi7p2kdrg5f2uz2ko45oeby3zmyccm37pw3xoflngfdedqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7ctoklhp3yp5gxile3s57dusuvwozfav4r4hhhszbr5zg43rv4rgmbyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2zxwt43zxq2d4wrgbxtxstcvv3sl2bq7t2udd6iifkmea2a3d7js3aqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c2jylvw3ngkppt3ypvjtk7sx6fyli6mddvcrjihn3lyfeqkgbhxdvaid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xvxa63spw6llq27eag3oesph4dfcyf3e4i3du5s3dbvrsikp4dg7jyid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3nnwjjrje6lpisqybb3n2qvplv3fjokwc3qrx764a4lbvgyjmcbbveid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://f3oc5fzkfhftqajilnvofdhzy4hhwrzq4sv5pc4gkp5rv4ezvz7vd6yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zvi7ejdaod3v2obbacrtkao427p4xuigxfy656plngti6vw27st5tqyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://asvbfh7ahbnxijciovwijfr23yua4pjz3e5ha4y6vzankdqn5b4a2lqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bo2s5jld3oihh7hrvx4phucfhxedfjf2szsuvk4nylbexz62bxd3mfyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7qkuhmqkltor7szib66etg4qywk7i2hzjgpkktt25ulytf6rlwi43mad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6it5uyalzfdm37jenradhm55gocsflhhykgu7uts4me4y3xxmqfbnuqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ok3dimj5y3g53dpmhlvhzwujaefzdey5kg6feftvc6coubssglfkilid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5un4e2c2cf6cfguw7uo2xyo5dnsctnuh3znahrmuibdjbspyu3byhzqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://aayeie6my37ka7eefln7nnzabwidh7jj4bzcjykgblpmjomruk3tvjyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://youje56g7jlgmqwhxat7ua7ysmmm4vogmrcq7cryod32bmzba37l27yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bvzv2g6falu42anoejm2lqc6l7vh5upojbhwgi6dxvxksjuw27s4vkad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dyl5qyy6yb5r74xb433h6ushzg3c2y22ec5h7h66pxarnaoxufjmyxad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cgfblcrvlj5w7ebescbqftb3yfmc3qyo3n5p6vuvfouoagglyjlhmbyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zboneu6najwucvrfjac5gc6psuthqoz27x6fpiiuvttulph5aqz4qwid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jtred7eoefpgm5ztmh23zclbu5ekzpyjo52iw4d56n6e3bcslcxpjuqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nhrlosgix7xlkriwvygx52v5jvxn6cb5cpl5gfmhg2dtyvyb7a467iyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i4utqt3qnrm2hxhvitunmj4b7777svzbzrc4ewig6j4g6g5zzqahz2qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iln5j3cnabk3ftczrwwh2z7rdilnvkc426po3ogqb3y222xwqxizy2yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g7p4ildkspr57fflg2f4fvektshe7mmzprkol746vsyqdsshgufwoqyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qkypx555r7e5ukg4bso3iqqagfxhedq3tqq7f3iipbv6smv7hkp53hid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5xble3ivix7mjdfwd5232g2hegofrcithkwxb3vj7skwstnkose2p2qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wb52j3p5alcgno3oczubcqflq7v6ilta3pcqneu77l5bujpiib6ixdad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7z7aukowd72il3iobtboovofkqdluuva3bz5iwfazf4xwsdqpputukyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7nylg5iafpqfbpad6gtfkj22kp74iihr6lxtn3qmpgpasazqeb7cabad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wake57gge7jfbrjssm65yac6fewan5nth5hhlcg7lorvmpxsnknf4xqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ayzkcslvoiiahzrhqtc6zhe44mql5oqmbe6tyxljfhph26lbxtdqqlyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kokaplp6lcwfwjkotajkn2ggf4lid5trsgzhg32cbsjopmyfytyhubyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7x2vezv3s2vjh5h36hh2iovz53bi2qtlzcflkojedphny2mms2ok5cad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://figqod3no4syanbp2b2eqtao7dmxauj6bb2bnkx3gdmgqjlqhe5beaqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lmkgzahy3yya7bwmkmigx6j32d7u7nqex6hbx5izz7y3n6uwjx3as2qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ysg5zoxqeabi5xejxbq43lvdrztyu4hnlrakckc72iko4peg4twh6vqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xoa7whcgymujxkwepyapthy7bhdc2epokgiau3ybuhgamrf3pxi4z4qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p3yzpoltrm3e65rlqtmwefnunyz22wdjuaf4bfumqbey4edaeqq44did.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bl5h2vwa6jepjog4aviyv5garfvz4bc4t5tk6ioyaae4m7zoflb36jid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yv7fbzjdvg4e3fdgxnnq4oepu2wk6kuhhfuc36gzr7szxg7crjhorryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dx3nurcicb2rzydbkam7eibrlrpxnjnfvkj2557wzgvmz7be2hn6ufid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://67ni6yaafbculxsbupuzageg2eselgc7bc6gkvc43tt2zhlh7jgmkoad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xbrljl5nlnt65x7aqne4lbiy2rwgjpro5ng54dy5hfexsnvtawqi4jqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cou6hffzhudgz57olebxcn5wr2zn25w3yrk7j4jci3dtkrxxqs7foxid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yczpqk7e7plndnhjjza4jcq3yagd6djdfpnal4sgabna2vkccxr56cad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://thv7beevnkocwviamffpzd3tobl67fvcbrd637ok5xzmxlqltmkvtmqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6vnrkxk3z5sw3l56n3qrl4rwzq5acdxhupjigc34zofgebnzdfjkkbad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qmbvp3z7x55c2p6deewt4irg2i6xdzswgsg6ihtgwd3mf6w22i36s3yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s4xsrikoxn4wo2k4julmxyxryiiv2nrqke4jz7ybpk73m4cpzadjpxqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qosur3hbdiz4jok45wnfwz3gtf7mxbzurpgoqtejlwncoqlhmaousxqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fe2pbzsazb4eh76tpn4hqo63erhuusyjlvio5msocqeibz3culyg63ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3eu5bvf4d432dprtsdu3evlr6pxbbewxncnzjkib2ffp5osuxwzaa3id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4qcwvs4nciukxpxls3lpcozkabqa6l3iaulgbm7lxssnlpv7clnz4lad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iromfhuademn34fsfdvdrobxdj3tz7mfp2rdj4o2nmfp55fr6xgm3hyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qf62tupgogwy34gn5jt2ewpe2bdxpb7idzmrdu4axdznuuezxbtk7aid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tqduzttjebt7vz3vla2mwe26bmjty7p7gvs4dhyzc4w6hzrgxfljr3yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6rtliyde3asuj5k6jfnjrbogsni3zogbqybs3jpqfc7qc7ukeebzzwyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2wwpi2kstrba4t3i5or3soqgvcc7luzpxntqfd2dya6kdmfdqj3sr3qd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://koh3nn7qf3xty73fewu7kuj7w2trzt5yuoj7babbuhzdknuwhpct2qyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://y7d2iez7vkt7yzpk6cmrxmntqxgrrizqmmi4oxpyv6g2rl4bn4xew3ad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pcpokxdz5zn3tmzfbqyyfuodm6pkgrysiqcckbahzgyzirx2av44w4yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dou6ktqds2xidxlvwuqgruos2mjnqcbsdoeensjoolmzz2gby6uqe4id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://evy3ssetplcrv5rzzzbxia75oroocvrhavc72pfy75e47g4zfz4vfwyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nnkx3zqi3whqyxh4edu5gpydeni3rzzyxoicsvevni25a5jdoc5xceqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zu4jfbwu4on24mvtxm3gojoaw6ltk4wlebtfvly4haykp4tusdcrv5yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zf3raijx7m6xm72uenqrql5b2qtkbvnxi7fgzqjxfcizp7lylmvzvdid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zcll3muuhw3uqtgxzdojqv52fuifg5z2knk5w63mljvujs2g2wywluid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zawzev3zlywn7dy642nokfgmkmupgsrfhhquhhqkgcwml2pk7io6fjyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zae5d3try3lmnpb6mcx2mbqgp5xawuixm4ktofscv63btekwvcpg6ryd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yo3f4ytjbuf3j4bx3m6s523e5hue7afxaprlikjuxf57ed7pc5dnpaid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ymfmzthvho5q7jituowluckkq45dogsf3ru25ev4nlehaq65hy4w6pid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yh4vjsv3u27zlzosrsjc5aveua3iclhifjmwdr5uujsaqz7hfkkljfid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://y7u6xpydaobdwz7puojmze3estmhyx4qpbpihm2qfsfdgoenns6gtcid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xvks2js3rexd7kyzitdpnwzzqt3s5xxqj2dkydep6r563u7bgfgbdead.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xqclaoqanufx6z77e3ieun4xvmrsenolxjhhvlk56yfncuke66myfsqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wiuco7yxvd6ygklc5kngraftysq7sgtkpcqtstpthj3ihxdarjlojcad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vzxulehmjar6jmkjiy6qpj5mbgma3nl7o2mncrimjwjl5j3lk5ea35ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vldmvht6s253et33ce6gcth2vikuvsi7xgkzim5frqiowq6an6tmlaad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vgkclj5nqv53iy455dlfthg75a5cg6ndkazvizrnxrx7fshdqzw4m2yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uvovouktcgmq55h5i7axt4qrms6iq6znn5cfcrmg7qjseray4dcjxxqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ucrh53a22g5l3swwtfvvrjjtawrubpedn4s7lws4krbyy7itpvymybad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://uab4byztmlcfsqb6v7pjoe3pnrvx2uckcuegvjyqui4wzy77jppzd3id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u3cko3mc66cfvnf5luzkw5n36q34eges5raq2i3viuiewfvnkqoxztid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://u27qc3ar5s2pqaod5ugxwyymaay6zii5lqfeo4nrs6ykysgzznk3kmad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tuw6in37vku6kg3mvnwaxsldhruujpihibpxbq5ne42phqgv4ekuirqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://toeaxffzwscqgb7ftetfvldqf2xkqfx4g5kpqejney2ysyirtqdwcvyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://tfeo2er3vmcal5tltu7vpnegh2cmmjsdyldfhisdco75mysi4ta6dsqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://td4ngpvlle7udkh5svgilgph5v3f63uo3hv3coh7gpdsqozo6it46sad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t3zm26nipjrttk5bzbr37crc32kufsixoonf7tmyqviduogoul54vbad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://smo3gebcr5mkff7ja5ayi2xdz2xsapdixak4eosj5ah6fgrbluoxrkqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sktwn6mi53hbyylkzswtquemuuirsn5qivdz4evhgbobqqzcfbw6pyid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s7isfnfsrrnogkkvzzmqpqlcehajalaht5nmel7nbxwhvqc52jj2ejid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://s5hcgpxzeehnkwlpb3xkelvkv6rpi5rszmhfeywncja26bxdzexp6zqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rzs7rnmp37k6g3wbmym7oi23h2cc6wcf65oxsetun6cp25sna6256xad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rwkwobi6dz6dxzhnjpnau77ejcq3ar4ajjal42pj7usotilyj3bbfpyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rq4ahdxs5yjm5s66d7dkgwpwduzj6e5yckhdt2mqmc3utp47ap3fjcyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://r4aub3bfqf4jh2e6whomjt6bs6abzvtlhwuu2us4fhglnhic3rjegoyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qrrfiv7l5gsrc7q2n6mfxrbaq33vsvum7d6plx4maslkfxk5pmxt6ayd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qpcdrem3wd7ihi3x2tfgy7tvh2ldck4nezaxotxqc4vrc2ek3hkmejid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qfhgvlly3qmrp4sbpr54bc6ci2riwuac6aw72enw2xmcb5yo57jzmkad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://q72tfgqh6wi237u2nqxuyuiawkyac5p6qav7mo2r67mu3ufl5gbou2ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://puqwe2eijzpw33p65qq4ql37dtza64ug3hpsflgxvok7kipzinzry2qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pmpkjv36ca5ykwmjnfnr5cadctt4ldcekaxocbwa57btujhi7mly6kid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p5f7j74vjhcifcxjmg7dswszfsk5z73ftohjj4nlnq7k3qcy4vtxraid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://p4tn5c42tfkr257a5djzs7iadvuunb7ydowuc6s2ghifbv5buc5pvsad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://oylk6phjrgcjvhv5rjijwrpcqj4ig3f2evbxb6lzofw7cbgxlpetq7ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://o522tg3wwqzypsc5yosrhr7mji5as45p2srrzvwd762h5sparfw3j2id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mdixxkgamwij6sy7stxy4fiqwbmfmci2fbjbbndaq2txgaz25zz23xqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m75bpllrckr7gus26rd6clvvcq6my6tb2bmw6crsevft4t4sv4fsbeyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m6hx7svbvoxhkylaey2jfqxxcychksmx7n455aavt4nan6cuztzkiiyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lkwkv2pzl3rpo63pqagijqsdo5t52lqwvuu5n34ito4jjnkyfc66smyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ldl45mghc3vscfucdntjc2cax7z3k5fxxxfthvrxhilr4sk2a2dveqid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l2gsnjel3ongbhzvuftuhkbkx5uoso7fvsfqq6oxt25ph4anxxwnl2qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kxmbveamxzfrnxacprpbldcy3p263kvrjiblaw4p55mzrkaf3si6w4id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kx77iuzg25qlesz3zm7nvy4i6vxecc5jtksf5gllknescfktvzhyo2yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kv7nxc6sg625vl4rd4fsy4asero3jqivp7zyhaohsyww2xnk7r7yenyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://knt3cs4tkxqdnrjrzk3n7txyhb6c5szkgjwy74jomyvy5xuli5qcdsid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://khmpzqnzpya5o27lyp2vt2vw5cy7rb2mfflrhmikubhetncf2nh7ahad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jrq44df5h2xysjsajuidspv7zxl7g7v7viujicudptufaozi2i65cnad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://j7gpjp46swlikocg3v7tlxc2zdrdlg5gft62bnqiqjgv4lzvaeg6h5id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://iromfhuademn34fsfdvdrobxdj3tz7mfp2rdj4o2nmfp55fr6xgm3hyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://irn7otydieltebh3ex2rdfpspdxbcyrgp6kqczjtg4xd7ay7dfmbf7id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ijmyrvd3ntbdu22auxpgiiblzxplfw6xqpdztoosfrbqiznymayxfsyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ieflygyfoezms2wshjpfyfz4hpyxjcdtxejntysvopd7n7cmmnucbkad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i3jwvuhloergmbeimztm6btpjzshvvcaqj2qrweeehcjhf37tndxtoqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hut4icumte4mphbzuk7cycppiubjdzfpilgsdku6vydrn7kg7y5f6oad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://he5dybnt7sr6cm32xt77pazmtm65flqy6irivtflruqfc5ep7eiodiad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://hdyacvmmr4x2ms5tg4w5vnqzxfnlat4iosbmf7qz5xxoumnqfrcv2wqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gjv7s67txrkdxftyfyt2xpcqkp76bmy7eqlumhmile6z6z2y23jkpkad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gevvr5kripac4p52ixiq3ufnkr4qasn64r5d7fsyu3kk2zmuyarbvdad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ga6pe777wjfk6xuhkepqtfldiqjx253an7dofzmyrlwzgqipqgtwwtyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g5a2thsvpabyjp6prphsque7nyaauul4rryr2nulytakggkecls23bad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fbehz3443h644jrcu3djvexhplhmnijilkq54puzrxuvloc42oykgiad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fafuye3k6sfv4t4nkr2vje5s523q6hfego5cwlze6gdntvxgnjebqnid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eyeeabnztw7jphcloghjraqihvon5pgo3gegsgypkg3cxn6jhg4wq5yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://elcurwunjxjhx24aud6p47htzrrkxvbispdacsatsumlunagoylbgwad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://e2ejecjvrpik5bjbvdczu7bjww4epxzsyz3nl7f52oe5pi43ddcsixid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dx2g4nm4ouhpqd6c6ttkzbnsliw3empzrwej3ilbwo6zz4g5rcgeazid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dr2tr76ftudjccp4zc7fks5lhk3pg3rifl3rcc36bgm46sfivkq2sfqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://doh3rlqtvg24yu4r4w7bk5twm7w6nm7wqsr3d3roc7jisrdqf5catnad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dgxxqqhvob4cvriyy2rdiwgyvuqewwsq4tbq7rnk5ulqh6zvroutvpyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dcoezwwwxij2trzd3oqhtyjg3lgvgzmyzrj2pcs3rdfh4tl5267dwpyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d2abffaqhce6cbnlrdcsb3iafxhr5iqmezpfoxkpx3zf5j7tngqdskid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://civmwfeogouzf27jldj2buu3ihmpooupjhfbdgdth6maptrntim6oiid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://chygou6fs4nu2r56ncfd3crjb62s6sysulg7y7ds2tbdoa4d3wcwrdyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cfj4bsnfi4ktpfoei7uqggz5sb443fhvvbkxbmu3dhfriomg2txxgxid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cffb3fd2sofyiemffnzy7jjbuq7la3nftexl26574q3xkw5ycqf2r3id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://c5ic3pm46hytw4r47z6t6yxsffndo52lcitf5sgauwyrqmsjfb4etdqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bvn5r7dzfdn2k2wcv7ifwtvi37zsm5kxv776nqw5lh7hwr4gd7msyhyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bq67odzyhxshp3vcvdvau4xosn54rmudy3dzqlmm2hkd3m4b2qackcad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://boq6yg6a523cqjbsu7nwjscakdpnjlyytapnodmmimh63kq7r3l3hmyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bmebpteoa53k76zoiafykh4axr4kzbx7jn2djvdrdde4r57bckkfxsyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bjiztkvfzboiiggfnf3pctsyllq6fy6rmllxbq4rk7uyd3w4eh2snpad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://arzaonkha4jubxjgg47dkjjz42ol72wmwvjmtz47a33box2gupk2v4ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://amo6c37dbe2bkgpopymaqms4vusn7kafqxy7pgqk2etengd76xk5w3ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ajdtbop62plz3s2uw3rjtegilw4lfmixl7h4p6oset5rq5jihwtehtad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://afl6q5mjgzgm765wfneiojktyppxbhkclhghfgcfpvr2nmadczqs4sqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://acvhxy4cc52a7iv7ugc4eq6dq6nus2s5xduew7s2wkaw6nhftasyq2yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://a5ciw2q5jijci5wj63s47zpul7bq3n36ng2qncta24yc6bsmkhoeg2ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7pwwm7j5w5gjgs7nibha6dqknqliiwqvimkkja7zdgmozx2ikjtfigad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://752ezjq6t4pwdtrwviimap3wlzqm2qzd6hh2rwffzq3d2urw3o7xa6qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://73tzbwujmnmz35k74eclnhlkwmnjrlmfeut3udxwnfsc53kg2kvdpead.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6lbwfgybggslvhkbsfqo427sqnfhutb65wmhvj5qlko32farj6w45qid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5rosrz5d53usc6p7s7qjvvcqv4bbedvpjsv3dzls7kuend2i65s7peqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5igait2ocdf7kfktyemdgdl6cot43ryecr5ycqid6drydhpuzibu54qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5hhrba7et452bt3ttwqewumlua5t3vyyr27iomrv2o3ae6of3l7hghad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5ety7tpkim5me6eszuwcje7bmy25pbtrjtue7zkqqgziljwqy3rrikqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://5e2q3uzczl3bur23dxfxxu5unlukuqrlseesmxc7v7dmo4qgbr3kaxqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4qmsi7vcdrrutxapxbc7eofjjzfsvam3fehgmk6xyivwcroqkqjij5qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4mncnm5bl3jfotcgrn7zv2uznfzs2oo4sahwrlqvwcd265x6jdudkcid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4kfzqzfci7uqpgngrosuukgj2dr745cyqgenbaojycdykgxipabnyqyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://425yxsnocj47lwgueymn7y4y4vrphccooa3diabzoqdl6cslxriqxrqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3xa42kwkeiwzhjybddfeifad7vn2kvsslybquledvib5xsfkylwtwyid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3s5pzwlqllrzz4xlluholmqgueje7lutlugbdnwa3ehbedrxaq5wjbad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3oz6naflgy7gbtc4psqumk4dd7meq37tjxw7qxhytuiysyq3632xgsqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3md3it5uxkebudflmlratms66jvwkrdphzoo4nzsvwh63niqpz42aeyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3kqfll43jsj7boglorh5xntudnynlk6howi6ks543cctlrnid4dzwdad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3id2g6u3dwvg7nsarfkgsdf3odp5hb7owvnoqbipbisekudptetuxtad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3g7cqn66j3uwes7jah744u6fzuzymvnlubn67624jwvswoollqkjtzqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3fgntkytua2jb7rarvuchns6ka7tfh3uc6ypub3ffepjq3jekb3eypyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3bkgnqvrdlzib4t62oyo22eqljdrjaxtwcsvgwystog6yiyx7j7b7nad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2udgodqyt6jn7s7cb7n66kaisg7i6gxo5n64tnvlk7dee4d4rguojbid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2plv344u23ebuayurqcfbjbnxpqzqknja3ca7ulbnnwtgb6tpmqqsvid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://24y6h7fwi2fvlv2kuzudyiumjqz4rgqcml2wr7te6ugcgt6qatqe64yd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xnsbsjciylsg23zfmrv6ocuyh7ha5zexeouchlr3zsi5suda4arpeyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sty5r4hhb5oihbq2mwevrofdiqbgesi66rvxr5sr573xgvtuvr4cs5yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://d75itpgjjfe2ys2qivqplbvmw3yyx7o5e4ppt2esit2lluhngulz4hqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vqifktlreqpudvulhbzmc5gocbeawl67uvs2pttswemdorbnhaddohyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://alphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onion/api/blog/all/0/6","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://alphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cadosecurity.com/resources-for-dfir-professionals-responding-to-whispergate-malware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.whispergate","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ragnarok","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ragnarok-ransomware-targets-citrix-adc-disables-windows-defender/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ragnarok-ransomware-releases-master-decryptor-after-shutdown/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2020/05/21/asnarok2/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/k-vitali/Malware-Misc-RE/blob/master/2020-01-26-ragnarok-cfg-vk.notes.raw","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sababasecurity.com/cheese-shortage-in-dutch-supermarkets-after-a-ransomware-attack","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cpomagazine.com/cyber-security/ragnarok-ransomware-gang-closes-up-shop-leaves-master-decryptor-key-behind","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://techcrunch.com/2021/08/30/ragnarok-ransomware-gang-shuts-down-and-releases-its-decryption-key","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://borncity.com/win/2021/03/27/tu-darmstadt-opfer-der-ragnarok-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.ragnaro","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://files.avast.com/files/decryptor/avast_decryptor_mafiaware666.exe","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/threatresearch/decrypted-mafiaware666-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1380610583603638277","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/kangxiaopao/status/1342027328063295488?lang=en","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2020/12/jcrypt-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"titancrypt.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"watching.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"crypted.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ncovid.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"omero.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"daddycrypt.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"jcrypt.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-OF8CopM3MUw/X-XLjUmRkYI/AAAAAAAAXpY/1mLe136SuT8DuruWJfwIVY5WnVs5B1gcgCLcBGAsYHQ/s943/txt-note.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"this.email.address","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"1BtUL5dhVXHwKLqSdhjyjK9Pe64Vc6CEH1","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malware-guide.com/blog/remove-amjixius-ransomware-restore-encrypted-files","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"Http://www.coindesk.com/information/how-can-i-buy-bitcoins/\\n\\nAttention","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://theravenfile.com/2025/04/10/hellokitty-resurfaced/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/fivehands-ransomware-uses-new-malware-to-steal-data-before-encrypting/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/fivehands-ransomware-replaces-hellokitty/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/e/fivehands-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/fivehands","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/hellokitty","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.speartip.com/resources/fbi-hellokitty-ransomware-adds-ddos-to-extortion-arsenal/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2021/211029.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/babuk-re-organizes-as-payload-bin-offers-its-first-leak/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/new-ransomware-variant-uses-golang-packer/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/uscert/ncas/alerts/aa22-249a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cadosecurity.com/post/punk-kitty-ransom-analysing-hellokitty-ransomware-attacks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/hellokitty-ransomware-is-targeting-vulnerable-sonicwall-devices/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/fwosar/status/1359167108727332868","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/proferosec-osm/static-unpacker-and-decoder-for-hello-kitty-packer-91a3e8844cb7","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labs.sentinelone.com/hellokitty-ransomware-lacks-stealth-but-still-strikes-home/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2020/11/hellokitty-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-spotlight/2021/03/hellokitty-when-cyberpunk-met-cy-purr-crime/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.govinfosecurity.com/vice-society-ransomware-gang-disrupted-spar-stores-a-18225","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/linux-version-of-hellokitty-ransomware-targets-vmware-esxi-servers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://soolidsnake.github.io/2021/07/17/hellokitty_linux.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.sekoia.io/vice-society-a-discreet-but-steady-double-extortion-ransomware-group","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gunyhng6pabzcurl7ipx2pbmjxpvqnu6mxf2h3vdeenam34inj4ndryd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sifrecikis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sifrecikx7s62cjv.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/pay2key","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/intels-habana-labs-hacked-by-pay2key-ransomware-data-stolen/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/TrendMicroRSRCH/status/1389422784808378370","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://keybase.io/pay2key","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.twitter.com/p2ktwtacc","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2020/ransomware-alert-pay2key","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pay2keys7rgdzrhgzxyd7egpxc2pusdrkofmqfnwclts2rnjsrva.b32.i2p/?i=3d1e4594aeb351854fcc800da08214a059ed16","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/loki","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/makop","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/conti","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://yoroi.company/research/conti-ransomware-source-code-a-well-designed-cots-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/conti-ransomware-attacks-persist-updated-version-despite-leaks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=uORuVVQzZ0A","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=hmaWy9QIC7c","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.unh4ck.com/detection-engineering-and-threat-hunting/lateral-movement/detecting-conti-cobaltstrike-lateral-movement-techniques-part-2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.unh4ck.com/detection-engineering-and-threat-hunting/lateral-movement/detecting-conti-cobaltstrike-lateral-movement-techniques-part-1","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.truesec.com/hub/blog/proxyshell-qbot-and-conti-ransomware-combined-in-a-series-of-cyber-attacks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trmlabs.com/post/analysis-corroborates-suspected-ties-between-conti-and-ryuk-ransomware-groups-and-wizard-spider","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-conti","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/c/cyberattacks-are-prominent-in-the-russia-ukraine-conflict.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/content/dam/trendmicro/global/en/research/22/c/cyberattacks-are-prominent-in-the-russia-ukraine-conflict/IOC%20Resource%20for%20Russia-Ukraine%20Conflict-Related%20Cyberattacks-03032022.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/the-sound-of-malware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.threatstop.com/blog/conti-ransomware-source-code-leaked","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.silentpush.com/blog/consequences-the-conti-leaks-and-future-problems","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sekoia.io/en/an-insider-insights-into-conti-operations-part-two/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sekoia.io/en/an-insider-insights-into-conti-operations-part-one","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/blog/gold-ulrick-leaks-reveal-organizational-structure-and-relationships","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.redhotcyber.com/post/il-ransomware-conti-si-schiera-a-favore-della-russia","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.prodaft.com/m/reports/Conti_TLPWHITE_v1.6_WVcSEtc.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.prevailion.com/what-wicked-webs-we-unweave/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ncsc.gov.ie/pdfs/HSE_Conti_140521_UPDATE.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mbsd.jp/research/20210413/conti-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mbsd.jp/2022/03/08/assets/images/MBSD_Summary_of_ContiLeaks_Rev3.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2021/210521.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hse.ie/eng/services/publications/conti-cyber-attack-on-the-hse-full-report.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.esentire.com/blog/conti-affiliate-exposed-new-domain-names-ip-addresses-and-email-addresses-uncovered-by-esentire","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.elliptic.co/blog/conti-ransomware-nets-at-least-25.5-million-in-four-months","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.eldiario.es/tecnologia/capos-cibercrimen-avisan-contratacaran-si-hackea-rusia_1_8795458.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/blog/industry-news/suspected-conti-ransomware-activity-in-the-auto-manufacturing-sector/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.darktrace.com/en/blog/the-double-extortion-business-conti-ransomware-gang-finds-new-avenues-of-negotiation/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cynet.com/attack-techniques-hands-on/shelob-moonlight-spinning-a-larger-web/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyberscoop.com/ransomware-gang-conti-bounced-back/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/threat-analysis-report-from-shatak-emails-to-the-conti-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyberark.com/resources/threat-research-blog/conti-group-leaked","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.connectwise.com/resources/conti-profile","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.clearskysec.com/wp-content/uploads/2021/02/Conti-Ransomware.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2021-CTI-006.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/taiwanese-apple-and-tesla-contractor-hit-by-conti-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ryuk-successor-conti-ransomware-releases-data-leak-site/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/microsoft-exchange-servers-hacked-to-deploy-hive-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/karakurt-revealed-as-data-extortion-arm-of-conti-cybercrime-syndicate/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/hhs-conti-ransomware-encrypted-80-percent-of-irelands-hse-it-systems/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/hackers-use-contis-leaked-ransomware-to-attack-russian-companies/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/conti-ransomwares-internal-chats-leaked-after-siding-with-russia/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/conti-ransomware-source-code-leaked-by-ukrainian-researcher/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/conti-ransomware-gang-takes-over-trickbot-malware-operation/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/cisa-updates-conti-ransomware-alert-with-nearly-100-domain-names/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/angry-conti-ransomware-affiliate-leaks-gangs-attack-playbook/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bankinfosecurity.com/cybercrime-moves-conti-ransomware-absorbs-trickbot-malware-a-18573","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advintel.io/post/ransomware-advisory-log4shell-exploitation-for-initial-access-lateral-movement","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advintel.io/post/hydra-with-three-heads-blackbyte-the-future-of-ransomware-subsidiary-groups","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advintel.io/post/discontinued-the-end-of-conti-s-brand-marks-new-chapter-for-cybercrime-landscape","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advintel.io/post/backup-removal-solutions-from-conti-ransomware-with-love","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advintel.io/post/24-hours-from-log4shell-to-local-admin-deep-dive-into-conti-gang-attack-on-fortune-500-dfir","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advanced-intel.com/post/secret-backdoor-behind-conti-ransomware-operation-introducing-atera-agent","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advanced-intel.com/post/hunting-for-corporate-insurance-policies-indicators-of-ransom-exfiltrations","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://us-cert.cisa.gov/ncas/alerts/aa21-265a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/conti-ransomware-gang/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/bumblebee-malware-projector-libra/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/TheDFIRReport/status/1498642512935800833","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/AltShiftPrtScn/status/1423188974298861571","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/AltShiftPrtScn/status/1417849181012647938","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/AltShiftPrtScn/status/1350755169965924352","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatpost.com/conti-ransomware-v-3-including-decryptor-leaked/179006/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatpost.com/conti-ransomware-decryptor-trickbot-source-code-leaked/178727/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatpost.com/affiliate-leaks-conti-ransomware-playbook/168442/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/disgruntled-ransomware-affiliate-leaks-the-conti-gangs-technical-manuals/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/conti-leaks-the-panama-papers-of-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2022/05/malware-analysis-trickbot.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thedfirreport.com/2022/04/04/stolen-images-campaign-ends-in-conti-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thedfirreport.com/2021/10/04/bazarloader-and-the-conti-leaks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thedfirreport.com/2021/09/13/bazarloader-to-conti-ransomware-in-32-hours/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thedfirreport.com/2021/08/01/bazarcall-to-conti-ransomware-via-trickbot-and-cobalt-strike/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thedfirreport.com/2021/05/12/conti-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/ransomware-hive-conti-avoslocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/log4j-vulnerabilities-attacks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://share.vx-underground.org/Conti/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityandtechnology.org/wp-content/uploads/2021/04/IST-Ransomware-Task-Force_Final_Report.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.co/wordpress/128190/cyber-crime/conti-ransomware-takes-over-trickbot.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/luna-black-basta-ransomware/106950","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/787/original/ransomware-chats.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://research.nccgroup.com/2022/04/29/adventures-in-the-land-of-bumblebee-a-new-malicious-loader/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://research.nccgroup.com/2022/03/31/conti-nuation-methods-and-techniques-observed-in-operations-post-the-leaks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2022/leaks-of-conti-ransomware-group-paint-picture-of-a-surprisingly-normal-tech-start-up-sort-of/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2022/02/28/conti-and-karma-actors-attack-healthcare-provider-at-same-time-through-proxyshell-exploits/?cmp=30728","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2022/02/22/cyberthreats-during-russian-ukrainian-tensions-what-can-we-learn-from-history-to-be-prepared/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/09/03/conti-affiliates-use-proxyshell-exchange-exploit-in-ransomware-attacks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/02/16/what-to-expect-when-youve-been-hit-with-conti-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/02/16/conti-ransomware-evasive-by-nature/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/02/16/conti-ransomware-attack-day-by-day/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://nakedsecurity.sophos.com/2021/08/06/conti-ransomware-affiliate-goes-rogue-leaks-company-data/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/cycraft/the-road-to-ransomware-resilience-c1ca37036efd","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@whickey000/how-i-cracked-conti-ransomware-groups-leaked-source-code-zip-file-e15d54663a8","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@arnozobec/analyzing-conti-leaks-without-speaking-russian-only-methodology-f5aecc594d1b","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://marcoramilli.com/2021/11/07/conti-ransomware-cheat-sheet/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lifars.com/wp-content/uploads/2021/10/ContiRansomware_Whitepaper.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2022/03/conti-ransomware-group-diaries-part-ii-the-office/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2021/10/conti-ransom-gang-starts-selling-access-to-victims/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/shipping-companies-ransomware-credentials","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/conti-vs-monti-a-reinvention-or-just-a-simple-rebranding","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/conti-leaks-cybercrime-fire-team","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/conti-emotet-ransomware-conti-leaks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/whichbuffer/Conti-Ransomware-IOC","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/cdong1012/ContiUnpacker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/TheParmak/conti-leaks-englished","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://eclypsium.com/2022/06/02/conti-targets-critical-firmware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyware.com/news/ransomware-becomes-deadlier-conti-makes-the-most-money-39e17bae/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cybersecurity.att.com/blogs/security-essentials/stories-from-the-soc-powershell-proxyshell-conti-ttps-oh-my","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://content.secureworks.com/-/media/Files/US/Reports/Monthly%20Threat%20Intelligence/Secureworks_ECO1_ThreatIntelligenceExecutiveReport2022Vol2.ashx","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cocomelonc.github.io/tutorial/2022/04/02/malware-injection-18.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cocomelonc.github.io/investigation/2022/04/11/malw-inv-conti-2.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cocomelonc.github.io/investigation/2022/03/27/malw-inv-conti-1.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cluster25.io/2022/03/02/contis-source-code-deep-dive-into/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.vmware.com/security/2022/09/threat-report-illuminating-volume-shadow-deletion.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2022/09/the-curious-case-of-monti-ransomware-a-real-world-doppelganger","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2022/05/conti-and-hive-ransomware-operations.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2021/09/Conti-leak-translation.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.reversinglabs.com/blog/conversinglabs-ep-2-conti-pivots-as-ransomware-as-a-service-struggles","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.qualys.com/vulnerabilities-threat-research/2021/11/18/conti-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.bushidotoken.net/2022/04/lessons-from-conti-leaks.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://attackiq.com/2022/06/15/attack-graph-emulating-the-conti-ransomware-teams-behaviors/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://assets.sentinelone.com/ransomware-enterprise/conti-ransomware-unpacked","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://areteir.com/wp-content/uploads/2020/08/Arete_Insight_Is-Conti-the-new-Ryuk_August2020.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://arcticwolf.com/resources/blog/karakurt-web","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://arcticwolf.com/resources/blog/conti-ransomware-leak-analyzed","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://0xthreatintel.medium.com/reversing-conti-ransomware-bfce15019e74","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://chuongdong.com/reverse%20engineering/2020/12/15/ContiRansomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=cYx7sQRbjGA","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/conti-group-targets-esxi-hypervisors-with-its-linux-variant.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.threatstop.com/blog/first-conti-then-hive-costa-rica-gets-hit-with-ransomware-again","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/blog/gold-ulrick-continues-conti-operations-despite-public-disclosures","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.esentire.com/blog/analysis-of-leaked-conti-intrusion-procedures-by-esentires-threat-response-unit-tru","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advintel.io/post/advintel-s-state-of-emotet-aka-spmtools-displays-over-million-compromised-machines-through-2022","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/malware-before-ransomware-trojan-information-stealer-cobalt-strike","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/conti-ransomware-gang","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatpost.com/affiliate-leaks-conti-ransomware-playbook/168442","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/ransomware-virtual-machines","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/787/original/ransomware-chats.pdf?1651576098","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyber.gov.au/acsc/view-all-content/advisories/2021-010-acsc-ransomware-profile-conti","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://contirecovery.top","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://contirecovery.best","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://contirecj4hbzmyzuydyzrvm2c65blmvhoj2cvf25zqj2dwrrqcq5oad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://contirecj4hbzmyzuydyzrvm2c65blmvhoj2cvf25zqj2dwrrqcq5oad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://contirec7nchr45rx6ympez5rjldibnqzh7lsa56lvjvaeywhvoj3wad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m232fdxbfmbrcehbrj5iayknxnggf6niqfj6x4iedrgtab4qupzjlaid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://howtofix.guide/ransom-mountlocket/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.vmware.com/security/2020/12/phorpiex-powered-bitransomware-targets-apac-universities.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/bitransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mrv44idagzu47oktcipn6tlll6nzapi6pk3u7ehsucl4hpxon45dl4yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/exorcist","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@velasco.l.n/exorcist-ransomware-from-triaging-to-deep-dive-5b7da4263d81","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/zeppelin","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/zeoticus","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vegalocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/thundercrypt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/thor","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://g6gwcbiylnvrzj6txsypi72weymzdg6oov2qycu36ggfx3narejcqcid.onion/HNDPXubuzAllW18lBXjT6HU3QnyCtlClvWD8dfcnU6ZUa","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sphinx","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://decrypt5bub45vpr.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/spectre","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/snatch","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/financial-motivation-drives-golang-malware-adoption/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/snatch-ransomware-reboots-to-windows-safe-mode-to-bypass-av-tools/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/VK_Intel/status/1191414501297528832","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ti.qianxin.com/uploads/2020/02/13/cb78386a082f465f259b37dae5df4884.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thedfirreport.com/2020/06/21/snatch-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/a-brief-history-of-ta505","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/albertzsigovits/malware-notes/blob/master/Snatch.md","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.intel471.com/2020/05/21/a-brief-history-of-ta505/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://t.me/snatch_news","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mydatassuperhero.com/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://snatch24uldhpwrm.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://snatchwezarcr27t.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://snatch6brk4nfczg.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://snatchh5ssxiorrn.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://snatch2q72f2wjff.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://snatch6rpvi7yy4t.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://snatchnews.top/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://snatchteam.cc","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://snatch.press/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"SEND.ID.TO","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/prolock","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/fbi-prolock-ransomware-gains-access-to-victim-networks-via-qakbot-infections/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.it-klinika.rs/blog/paznja-novi-opasni-ransomware-pwndlocker-i-u-srbiji","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.intrinsec.com/egregor-prolock/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hornetsecurity.com/en/threat-research/qakbot-reducing-its-on-disk-artifacts/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hornetsecurity.com/en/security-information/qakbot-malspam-leading-to-prolock/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/prolock_evolution","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/prolock","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert-pa.it/notizie/pwndlocker-si-rinnova-in-prolock-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/pwndlocker-ransomware-gets-pwned-decryption-now-available/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-pwndlocker-ransomware-targeting-us-cities-enterprises/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://soolidsnake.github.io/2020/05/11/Prolock_ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://raw.githubusercontent.com/fboldewin/When-ransomware-hits-an-ATM-giant---The-Diebold-Nixdorf-case-dissected/main/When%20ransomware%20hits%20an%20ATM%20giant%20-%20The%20Diebold%20Nixdorf%20case%20dissected%20-%20Group-IB%20CyberCrimeCon2020.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://norfolkinfosec.com/tinypos-and-prolocker-an-odd-relationship/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2020/07/27/prolock-ransomware-gives-you-the-first-8-kilobytes-of-decryption-for-free/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2019/10/pwndlocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nefilim","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/nefilim-ransomware-threatens-to-expose-stolen-data","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/f/nefilim-modern-ransomware-attack-story.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/b/nefilim-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.picussecurity.com/resource/blog/how-to-beat-nefilim-ransomware-attacks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.intezer.com/wp-content/uploads/2021/02/Intezer-2020-Go-Malware-Round-Up.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.govt.nz/it-specialists/advisories/active-ransomware-campaign-leveraging-remote-access-technologies/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-nefilim-ransomware-threatens-to-release-victims-data/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/home-appliance-giant-whirlpool-hit-in-nefilim-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/01/26/nefilim-ransomware-attack-uses-ghost-credentials/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/how-cybercriminals-create-turbulence-for-the-transportation-industry","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2020/03/nefilim-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://documents.trendmicro.com/assets/white_papers/wp-modern-ransomwares-double-extortion-tactics.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.qualys.com/vulnerabilities-research/2021/05/12/nefilim-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_nz/research/21/f/nefilim-modern-ransomware-attack-story.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/a-deep-dive-into-nefilim-a-double-extortion-ransomware-group","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Mr.Locker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/uscert/sites/default/files/publications/AA22-181A_stopransomware_medusalocker.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/uscert/ncas/alerts/aa22-181a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"data.html.marlock","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qd7pcafncosqfqu3ha6fcx4h6sr7tzwagzpcdcnytiw3b6varaeqv5yd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"jpz.nz","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"IT.Books","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/inpivx","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/hades","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/blog/hades-ransomware-operators-use-distinctive-tactics-and-infrastructure","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/evil-corp-switches-to-hades-ransomware-to-evade-sanctions/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.accenture.com/us-en/blogs/security/ransomware-hades","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.accenture.com/us-en/blogs/cyber-defense/unknown-threat-group-using-hades-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/inversecos/status/1381477874046169089?s=20","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.truesec.com/2021/05/05/are-the-notorious-cyber-criminals-evil-corp-actually-russian-spies/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://awakesecurity.com/blog/incident-response-hades-ransomware-gang-or-hafnium/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://m6s6axasulxjkhzh.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/evolution","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/16697-deathransom-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/deathransom-ransomware-now-encrypting-victims-data/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/20/a/deathransom-now-fully-operational-with-file-encryption-capabilities.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/deathransom","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/datakeeper","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dc4nwiijwiffwztwzj5fngmcoppedrxg4jqj2tq67ontbini6qmlguid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/blackout","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackout","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://idep6vd7ywl7uruhsutqjdnjawe33hct35523rrmf73kb46xrhfb5sid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rqqn25k3hgmfkh7ykjbmakjgidwweomr7cbpy6pfecpxs57r5iwzwtyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2cyxmof76rxeqze5snxxooqmhzjtcploqswxoxmenfayphumdhrtrzqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eleav2eq3ioyiuevbyvqaz3vruwvpislphszo4cm7n56itbpnupxngyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mu6se7h7qfwuqclr4cc6zy7qevod6gyk37aq5vwnayrtbx3qqycx2fyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://urey23jtg6z7xx3tiybmc4sgcim7dawiz2abl6crpup2lfobf7yb5wyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ao5oo2luy6avdfomyw7hcegmfl4let2g5bzjqjzch6b5rpdshmuvccad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://urey23jtg6z7xx3tiybmc4sgcim7dawiz2abl6crpup2lfobf7yb5wyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mu6se7h7qfwuqclr4cc6zy7qevod6gyk37aq5vwnayrtbx3qqycx2fyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rqqn25k3hgmfkh7ykjbmakjgidwweomr7cbpy6pfecpxs57r5iwzwtyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2cyxmof76rxeqze5snxxooqmhzjtcploqswxoxmenfayphumdhrtrzqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://eleav2eq3ioyiuevbyvqaz3vruwvpislphszo4cm7n56itbpnupxngyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://4qyjonpyksc52bc3fsgfgedssqgo4a6vlfsjknqnkncbyl4layqkqjid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/antefrigus","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://yboa7nidpv5jdtumgfm4fmmvju3ccxlleut2xvzgn5uqlbjd5n7p3kid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.emsisoft.com/en/ransomware-decryption/amnesia2/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sonicwall.com/blog/amnesia-ransomware-continues-high-payment-trend-july-21-2017","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://elastio.com/detectable-ransomware/amnesia-2/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://elastio.com/amnesia/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/amnesia","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/sekhmet","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/detections/ransom-sekhmet/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/as-maze-ransomware-group-retires-clients-turn-to-sekhmet-ransomware-spin-off-egregor/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/wp-content/uploads/2020/11/Sekhmet_ransom_note.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rlmuybcg5h5gaatr.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sekhmetleaks.top/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Ransom.Sekhmet","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ragnarlocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/capcom-quietly-discloses-cyberattack-impacting-email-file-servers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.waterisac.org/system/files/articles/FLASH-MU-000140-MW.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.theregister.com/2022/03/09/fbi_says_ragnar_locker_ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/ragnarlocker-ransomware-threatens-to-release-confidential-information","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2022/220307.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.capcom.co.jp/ir/english/news/pdf/e210413.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ragnarlocker-ransomware-hits-edp-energy-giant-asks-for-10m/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/japanese-game-dev-capcom-hit-by-cyberattack-business-impacted/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/fbi-ransomware-gang-breached-52-us-critical-infrastructure-orgs/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/capcom-hit-by-ragnar-locker-ransomware-1tb-allegedly-stolen/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.acronis.com/en-sg/articles/ragnar-locker/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/AltShiftPrtScn/status/1403707430765273095","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://seguranca-informatica.pt/ragnar-locker-malware-analysis/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/02/03/mtr-casebook-uncovering-a-backdoor-implant-in-a-solarwinds-orion-server/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2020/11/ransomware-group-turns-to-facebook-ads/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2020/02/ragnarlocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyware.com/news/ragnar-locker-breached-52-organizations-and-counting-fbi-warns-0588d220/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.reversing.xyz/reversing/2021/04/15/unpacking_ragnarlocker_via_emulation.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.reversing.xyz/docs/posts/unpacking_ragnarlocker_via_emulation/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2022/01/20/deep-dive-into-ragnar-locker-ransomware-gang/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.bushidotoken.net/2022/05/gamer-cheater-hacker-spy.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.blazeinfosec.com/dissecting-ragnar-locker-the-case-of-edp/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://reversing.fun/reversing/2021/04/15/unpacking_ragnarlocker_via_emulation.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://reversing.fun/posts/2021/04/15/unpacking_ragnarlocker_via_emulation.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/analysis-and-protections-for-ragnarlocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1475568201673105409","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-gang-threatens-to-leak-data-if-victim-contacts-fbi-police","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2020/05/21/ragnar-locker-ransomware-deploys-virtual-machine-to-dodge-security","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybersecurity-insiders.com/ransomware-attack-makes-cwt-pay-4-5-million-in-bitcoins-to-hackers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ragnar-locker-ransomware-targets-msp-enterprise-support-tools/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ragnarmj3hlykxstyanwtgf33eyacccleg45ctygkuw7dkgysict6xyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://7twfgaqyik3xfuu4.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xxbsnxdqmthgpydddmuvg7yzy6pdfnlnlepxa5my4mjiqjsee6yidhyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://wxbpssv4hiwlcgt4cxam3cznu4feqgf5pqfibbku3x6dwvtcakdkyeid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://t2w5byhtkqkaw6m543i6ax3mamfdy7jkkqsduzzfwhfcep4shqqsd5id.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://goh2zbohdiblk23scvtae7delci5cioy73la2lnrduxutxksl7xiscqd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2dxxyil6kur3qpht2tkklupdgacrcbfun6qf5jmk3hafmt6n6ockbzid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/tycoon","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://usf.app.box.com/s/83xh0t5w99klrsoisorir7kgs14o972s","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyberflorida.org/threat-advisory/tycoon-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/covidlock-android-ransomware-walkthrough-and-unlocking-routine","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/sites/default/files/images/blogs/covid/covid_pastebin_5.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/sites/default/files/images/blogs/covid/covid_lock_screen_edited_4.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ransomexx","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-ransomexx","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/a/expanding-range-and-improving-speed-a-ransomexx-approach.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/vatet-pyxie-defray777/5/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/vatet-pyxie-defray777/4","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/vatet-pyxie-defray777/3","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/vatet-pyxie-defray777/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/proferosec-osm/ransomexx-fixing-corrupted-ransom-8e379bcaf701","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ctir.gov.br/arquivos/alertas/2020/alerta_2020_03_ataques_de_ransomware.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ecuadors-state-run-cnt-telco-hit-by-ransomexx-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://gustavopalazolo.medium.com/ransomexx-an%C3%A1lise-do-ransomware-utilizado-no-ataque-ao-stj-918001ec8195","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.infosecurity-magazine.com/news/aerospace-giant-embraer-hit","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/cybereason-vs.-ransomexx-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/computer-hardware-giant-gigabyte-hit-by-ransomexx-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/ransomexx-trojan-attacks-linux-systems/99279/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/vatet-pyxie-defray777/4/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/brazils-court-system-under-massive-ransomexx-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-ransom-x-ransomware-used-in-texas-txdot-cyberattack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/Bleeping/Ransom.exx","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2020/06/ransomexx-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.ransomexx","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-RIwIgb6n0n4/X8-l2HIf88I/AAAAAAAAXRI/oyET6d1XSnwJXDIaJlwItyTFLcp4tz5mQCLcBGAsYHQ/s882/note-8-12-20.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-A0tAbQoei_Y/X1UxQkema_I/AAAAAAAAVV8/QuJY6v3n6943ZFax3ztDt9FXwkpAKMPPACLcBGAsYHQ/s1600/note2-9-20.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-hbdqo4g6OaE/XvpFV4qbjrI/AAAAAAAAT1I/RtASzBEd_VEZIhDCCCdaxrN0iGCnnocFwCLcBGAsYHQ/s1600/note-original.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rbx2hfyej6sogivjtw2z2xkcqwgtiy653ap5jylggsrj6glbmfr7axqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://jbdg4buq6jd7ed3rd6cynqtq5abttuekjnxqrqyvk4xam5i7ld33jvqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://zubllg7o774lgc4rdxmfcfpjewfkqa7ml7gxwl5fetogc7hbkvaprhid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/darkside","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/e/darkside-linux-vms-targeted.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.nytimes.com/2021/05/29/world/europe/ransomware-russia-darkside.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/darkside-ransomware-victims-sold-short/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.justice.gov/opa/pr/department-justice-seizes-23-million-cryptocurrency-paid-ransomware-extortionists-darkside","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.guidepointsecurity.com/from-zloader-to-darkside-a-ransomware-story/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pylos.co/2021/05/13/mind-the-air-gap/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://otx.alienvault.com/pulse/60d0afbc395c24edefb33bb9","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2021/05/darkside-ransomware-gang-quits-after-servers-bitcoin-stash-seized/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cybersecurity.att.com/blogs/labs-research/darkside-raas-in-linux-version","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://abcnews.go.com/Politics/biden-speak-colonial-pipeline-attack-americans-face-gasoline/story?id=77666212","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.varonis.com/blog/darkside-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.qualys.com/vulnerabilities-threat-research/2021/06/09/darkside-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/blackmatter","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://zetter.substack.com/p/anatomy-of-one-of-the-first-darkside","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://zawadidone.nl/darkside-ransomware-analysis/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://zawadidone.nl/2020/10/05/darkside-ransomware-analysis.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.wsj.com/articles/colonial-pipeline-ceo-tells-why-he-paid-hackers-a-4-4-million-ransom-11621435636","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.varonis.com/blog/darkside-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/e/what-we-know-about-darkside-ransomware-and-the-us-pipeline-attac.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.technologyreview.com/2021/05/24/1025195/colonial-pipeline-ransomware-bitdefender/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.splunk.com/en_us/blog/security/the-darkside-of-the-ransomware-pipeline.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.splunk.com/en_us/blog/security/darkside-ransomware-splunk-threat-update-and-detections.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/meet-darkside-and-their-ransomware-sentinelone-customers-protected/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secjuice.com/blue-team-detection-darkside-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.reuters.com/technology/colonial-pipeline-halts-all-pipeline-operations-after-cybersecurity-attack-2021-05-08/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.repubblica.it/economia/finanza/2021/04/28/news/un_sospetto_attacco_telematico_blocca_le_filiali_della_bcc_di_roma-298485827/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.nozominetworks.com/blog/how-to-analyze-malware-for-technical-writing/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.nozominetworks.com/blog/colonial-pipeline-ransomware-attack-revealing-how-darkside-works/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.metabaseq.com/recursos/inside-darkside-the-ransomware-that-attacked-colonial-pipeline#","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/are-virtual-machines-the-new-gold-for-cyber-criminals/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/burrowing-your-way-into-vpns","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.maltego.com/blog/chasing-darkside-affiliates-identifying-threat-actors-connected-to-darkside-ransomware-using-maltego-intel-471-1/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.intel471.com/blog/darkside-ransomware-shut-down-revil-avaddon-cybercrime","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.intel471.com/blog/darkside-ransomware-colonial-pipeline-attack","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2021/211101.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/newly-discovered-function-in-darkside-ransomware-variant-targets-disk-partitions","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.elliptic.co/blog/elliptic-follows-bitcoin-ransoms-paid-by-darkside-ransomware-victims","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.elliptic.co/blog/darkside-ransomware-has-netted-over-90-million-in-bitcoin","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/blog/industry-news/recommendations-following-the-colonial-pipeline-cyber-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.deepinstinct.com/2021/06/04/the-ransomware-conundrum-a-look-into-darkside/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.databreachtoday.com/blogs/darkside-ransomware-gang-launches-affiliate-program-p-2968","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/a-chat-with-darkside/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/cybereason-vs-darkside-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/how-ransomware-adversaries-reacted-to-the-darkside-pipeline-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/falcon-protects-from-darkside-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bloomberg.com/news/articles/2021-05-13/colonial-pipeline-paid-hackers-nearly-5-million-in-ransom","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/us-chemical-distributor-shares-info-on-darkside-ransomware-data-theft/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/darkside-ransomware-servers-reportedly-seized-revil-restricts-targets/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/darkside-ransomware-is-creating-a-secure-data-leak-service-in-iran/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/darkside-ransomware-gang-returns-as-new-blackmatter-operation/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/darkside-affiliates-claim-gangs-bitcoins-in-deposit-on-hacker-forum/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/chemical-distributor-pays-44-million-to-darkside-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advanced-intel.com/post/from-dawn-to-silent-night-darkside-ransomware-initial-attack-vector-evolution","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.acronis.com/en-us/articles/darkside-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://us-cert.cisa.gov/ncas/analysis-reports/ar21-189a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://us-cert.cisa.gov/ncas/alerts/aa21-131a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/sysopfb/status/1422280887274639375","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/ValthekOn/status/1422385890467491841?s=20","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JAMESWT_MHT/status/1388301138437578757","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatpost.com/guess-fashion-data-loss-ransomware/167754/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/ransomware-gang-wants-to-short-the-stock-price-of-their-victims/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/popular-hacking-forum-bans-ransomware-ads/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec.broadcom.com/hubfs/Attacks-Against-Critical_Infrastructrure.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/affiliates-vs-hunters-fighting-the-darkside/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityscorecard.com/blog/new-evidence-supports-assessment-that-darkside-likely-responsible-for-colonial-pipeline-ransomware-attack-others-targeted","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/posts/darkside-oil-pipeline-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/05/11/a-defenders-view-inside-a-darkside-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/w1-jun-en-story-of-the-week-ransomware-on-the-darkweb-af491d33868b","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labs.bitdefender.com/2021/01/darkside-ransomware-decryption-tool/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2021/05/a-closer-look-at-the-darkside-ransomware-gang/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2021/07/blackmatter-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2020/08/darkside-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/sisoma2/malware_analysis/tree/master/blackmatter","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/Haxrein/Malware-Analysis-Reports/blob/main/darkside_ransomware_technical_analysis_report.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ghoulsec.medium.com/mal-series-13-darkside-ransomware-c13d893c36a6","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cybergeeks.tech/a-step-by-step-analysis-of-a-new-version-of-darkside-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://community.riskiq.com/article/fdf74f23","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://chuongdong.com/reverse%20engineering/2021/05/06/DarksideRansomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://brandefense.io/darkside-ransomware-analysis-report/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blueteamblog.com/darkside-ransomware-operations-preventions-and-detections","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.keysight.com/blogs/tech/nwvs.entry.html/2021/05/18/darkside_ransomware-QfsV.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.gigamon.com/2021/05/17/tracking-darkside-and-ransomware-the-network-view/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2021/08/05/blackmatter-under-the-lens-an-emerging-ransomware-group-looking-for-affiliates/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.360totalsecurity.com/en/darksides-targeted-ransomware-analysis-report-for-critical-u-s-infrastructure-2/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/34549/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ti.dbappsecurity.com.cn/blog/index.php/2021/05/10/darkside/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://chuongdong.com/reverse%20engineering/2021/05/06/DarksideRansomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.varonis.com/blog/blackmatter-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.theregister.com/2022/03/22/talos-ransomware-blackcat/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tesorion.nl/en/posts/analysis-of-the-blackmatter-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.nozominetworks.com/blog/blackmatter-ransomware-technical-analysis-and-tools-from-nozomi-networks-labs/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.netskope.com/blog/netskope-threat-coverage-blackmatter","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2022/04/13/dismantling-zloader-how-malicious-ads-led-to-disabled-security-tools-and-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/enterprise/blackmatter-ransomware-analysis-the-dark-side-returns/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/cryptography-blackmatter-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ciphertechsolutions.com/rapidly-evolving-blackmatter-ransomware-tactics/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/blackmatter-ransomware-says-its-shutting-down-due-to-pressure-from-local-authorities/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/noberus-blackcat-ransomware-ttps","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/blackmatter-data-exfiltration","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://services.google.com/fh/files/misc/gcat_threathorizons_full_nov2021.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://raw.githubusercontent.com/antonioCoco/infosec-talks/main/InsomniHack_2022_Ransomware_Encryption_Internals.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wblog/blackcat-new-rust-based-ransomware-borrowing-blackmatters-configuration-31c8d330a809","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ke-la.com/the-ideal-ransomware-victim-what-attackers-are-looking-for/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://go.recordedfuture.com/hubfs/reports/cta-2022-0802.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://go.recordedfuture.com/hubfs/reports/MTP-2021-0804.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://chuongdong.com/reverse%20engineering/2021/09/05/BlackMatterRansomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cert.ssi.gouv.fr/uploads/20220427_NP_TLPWHITE_ANSSI_FIN7.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.minerva-labs.com/blackmatter","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.digital-investigations.info/2021-08-05-understanding-blackmatters-api-hashing.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://assets.virustotal.com/reports/2021trends.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=NIiEcOryLpI","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/how-groove-gang-is-shaking-up-the-ransomware-as-a-service-market-to-empower-affiliates/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hhs.gov/sites/default/files/demystifying-blackmatter.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.elliptic.co/blog/darkside-bitcoins-on-the-move-following-government-cyberattack-against-revil-ransomware-group","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/carbon-spider-embraces-big-game-hunting-part-2/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/linux-version-of-blackmatter-ransomware-targets-vmware-esxi-servers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/darkside-ransomware-rushes-to-cash-out-7-million-in-bitcoin/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://us-cert.cisa.gov/ncas/alerts/aa21-291a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/VK_Intel/status/1423188690126266370","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GelosSnake/status/1451465959894667275","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/darkside-ransomware-gang-moves-some-of-its-bitcoin-after-revil-got-hit-by-law-enforcement/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2022/04/researchers-connect-blackcat-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/08/09/blackmatter-ransomware-emerges-from-the-shadow-of-darkside/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/grooves-thoughts-on-blackmatter-babuk-and-interruption-in-the-supply-of-cheese-in-the-b5328bc764f2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/groove-x-ramp-the-relation-between-groove-babuk-ramp-and-blackmatter-f75644f8f92d","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/blackmatter-x-babuk-using-the-same-web-server-for-sharing-leaked-files-d01c20a74751","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2021/09/threat-thursday-blackmatter-ransomware-as-a-service","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.group-ib.com/blackmatter2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.group-ib.com/blackmatter#","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://venturebeat.com/2021/08/23/sophoslabs-research-shows-blackmatter-ransomware-is-closely-acquainted-with-darkside","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tripwire.com/state-of-security/featured/blackmatter-pose-new-ransomware-threat","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://darksidedxcftmqa.onion.foundation/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.wired.com/story/ransomware-gone-corporate-darkside-where-will-it-end/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.digitalshadows.com/blog-and-research/darkside-the-new-ransomware-group-behind-highly-targeted-attacks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://darksidedxcftmqa.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dark24zz36xm4y2phwe7yvnkkkkhxionhfrwp67awpb3r3bdcneivoqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://supp24maprinktc7uizgfyqhisx7lkszb6ogh6lwdzpac23w3mh4tvyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://supp24yy6a66hwszu2piygicgwzdtbwftb76htfj7vnip3getgqnzxid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://chuongdong.com//reverse%20engineering/2021/01/03/BabukRansomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-spotlight/2020/07/threat-spotlight-wastedlocker-customized-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.cisco.com/security/talos/wastedlocker-goes-big-game-hunting-in-2020","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/wp-content/uploads/2020/06/ransomnote.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lockbit","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://yoroi.company/research/hunting-the-lockbit-gangs-exfiltration-infrastructures/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/ransomware-hits-helicopter-maker-kopter/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=C733AyPzkoc","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/ransomware-by-the-numbers/lockbit-conti-and-blackcat-lead-pack-amid-rise-in-active-raas-and-extortion-groups-ransomware-in-q1-2022","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/g/lockbit-ransomware-group-augments-its-latest-variant--lockbit-3-.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/d/Thwarting-Loaders-From-SocGholish-to-BLISTERs-LockBit-Payload.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/h/lockbit-resurfaces-with-version-2-0-ransomware-detections-in-chi.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_no/research/22/d/Thwarting-Loaders-From-SocGholish-to-BLISTERs-LockBit-Payload.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/content/dam/trendmicro/global/en/research/22/d/thwarting-loaders-from-socgholish-to-blisters-lockbit-payload/iocs-thwarting-loaders-socgholish-blister.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/lockbit-ransomware-side-loads-cobalt-strike-beacon-with-legitimate-vmware-utility/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/lockbit-3-0-update-unpicking-the-ransomwares-latest-anti-analysis-and-evasion-techniques/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/living-off-windows-defender-lockbit-ransomware-sideloads-cobalt-strike-through-microsoft-security-tool/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.prodaft.com/m/reports/LockBit_Case_Report___TLPWHITE.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.netskope.com/blog/netskope-threat-coverage-lockbit","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2022/05/09/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mbsd.jp/2021/10/27/assets/images/MBSD_WhitePaper_A-deep-dive-analysis-of-LockBit2.0_Ransomware.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.lemagit.fr/actualites/252516821/Ransomware-LockBit-30-commence-a-etre-utilise-dans-des-cyberattaques","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.intrinsec.com/alphv-ransomware-gang-analysis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.glimps.fr/lockbit3-0/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.dr.dk/nyheder/viden/teknologi/frygtede-skulle-lukke-alle-vindmoeller-nu-aabner-vestas-op-om-hacking-angreb","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/threat-analysis-report-lockbit-2.0-all-paths-lead-to-ransom","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/threat-analysis-report-inside-the-lockbit-arsenal-the-stealbit-exfiltration-tool","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/rising-threat-from-lockbit-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crypsisgroup.com/insights/ransomwares-new-trend-exfiltration-and-extortion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/how-crowdstrike-prevents-volume-shadow-tampering-by-lockbit-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.coveware.com/blog/2022/1/26/ransomware-as-a-service-innovation-curve","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.connectwise.com/resources/lockbit-profile","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/uk-rail-network-merseyrail-likely-hit-by-lockbit-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-attack-hits-italys-lazio-region-affects-covid-19-site/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/lockbit-ransomware-recruiting-insiders-to-breach-corporate-networks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/lockbit-ransomware-now-encrypts-windows-domains-using-group-policies/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/lockbit-ransomware-gang-gets-aggressive-with-triple-extortion-tactic/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/lockbit-ransomware-gang-claims-attack-on-bridgestone-americas/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/energy-group-erg-reports-minor-disruptions-after-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/blackmatter-ransomware-moves-victims-to-lockbit-after-shutdown/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advanced-intel.com/post/from-russia-with-lockbit-ransomware-inside-look-preventive-solutions","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/emerging-ransomware-groups/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://umbrella.cisco.com/blog/cybersecurity-threat-spotlight-blackmatter-lockbit-thor","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MsftSecIntel/status/1522690116979855360","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/missed-opportunity-bug-in-lockbit-ransomware-allowed-free-decryptions/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/conti-ransomware-gang-chats-leaked-by-pro-ukraine-member/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/australian-cybersecurity-agency-warns-of-spike-in-lockbit-ransomware-attacks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://techcommunity.microsoft.com/t5/security-compliance-and-identity/part-2-lockbit-2-0-ransomware-bugs-and-database-recovery/ba-p/3254421","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://techcommunity.microsoft.com/t5/security-compliance-and-identity/part-1-lockbit-2-0-ransomware-bugs-and-database-recovery/ba-p/3254354","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://talos-intelligence-site.s3.amazonaws.com/production/document_files/files/000/095/481/original/010421_LockBit_Interview.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/lockbit-targets-servers","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://skyblue.team/posts/hive-recovery-from-lockbit-2.0/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://seguranca-informatica.pt/malware-analysis-details-on-lockbit-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityscorecard.com/research/the-increase-in-ransomware-attacks-on-local-governments","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/posts/lockbit-ransomware-attacks-surge-affiliate-recruitment/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/new-ransomware-trends-in-2022/106457/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://research.nccgroup.com/2022/08/19/back-in-black-unlocking-a-lockbit-3-0-ransomware-attack","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://redcanary.com/blog/intelligence-insights-november-2021/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2022/04/12/attackers-linger-on-government-agency-computers-before-deploying-lockbit-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2020/10/21/lockbit-attackers-uses-automated-attack-tools-to-identify-tasty-targets","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2020/04/24/lockbit-ransomware-borrows-tricks-to-keep-up-with-revil-and-maze/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/w4-jan-en-story-of-the-week-ransomware-on-the-darkweb-7595544363b1","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@amgedwageh/lockbit-ransomware-analysis-notes-93a542fc8511","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ke-la.com/lockbit-2-0-interview-with-russian-osint/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/privateloader-malware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/search?q=lockbit","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/albertzsigovits/malware-notes/blob/master/Ransomware/Lockbit.md","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://documents.trendmicro.com/assets/pdf/datasheet-ransomware-in-Q1-2022.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cybergeeks.tech/a-technical-analysis-of-the-leaked-lockbit-3-0-builder/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cluster25.io/2022/07/06/lockbit-3-0-making-the-ransomware-great-again/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://chuongdong.com/reverse%20engineering/2022/03/19/LockbitRansomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.morphisec.com/the-babadeda-crypter-targeting-crypto-nft-defi-communities","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.minerva-labs.com/lockbit-3.0-aka-lockbit-black-is-here-with-a-new-icon-new-ransom-note-new-wallpaper-but-less-evasiveness","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.lexfo.fr/lockbit-malware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2022/07/05/lockbit-3-0-ransomware-group-launches-new-version/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2021/08/16/a-deep-dive-analysis-of-lockbit-2-0/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/ko/39682/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/35822/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://amgedwageh.medium.com/lockbit-ransomware-analysis-notes-93a542fc8511","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2022/220204.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/ransomware-roundup-new-variants","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/blog/industry-news/dragos-ics-ot-ransomware-analysis-q4-2021/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/lockbit-victim-estimates-cost-of-ransomware-attack-to-be-42-million/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lifars.com/wp-content/uploads/2022/02/LockBitRansomware_Whitepaper.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.compass-security.com/2022/03/vpn-appliance-forensics/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://usa.kaspersky.com/resource-center/threats/lockbit-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/tales-from-the-trenches-a-lockbit-ransomware-story/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/wp-content/uploads/2020/04/content-in-restore-my-files.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Restore-My-Files.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://lockbitks2tvnmwk.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/suncrypt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tesorion.nl/en/posts/shining-a-light-on-suncrypts-curious-file-encryption-mechanism/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-april-1st-2022-i-can-fight-with-a-keyboard/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/suncrypt-ransomware-is-still-alive-and-kicking-in-2022/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pcsxcetrasupport3.wordpress.com/2021/03/28/suncrypt-powershell-obfuscation-shellcode-and-more-yara/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/w4-july-en-story-of-the-week-ransomware-on-the-darkweb-c61965d0386a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/case-analysis-of-suncrypt-ransomware-negotiation-and-bitcoin-transaction-43a2194ac0bc","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@sapphirex00/diving-into-the-sun-suncrypt-a-new-neighbour-in-the-ransomware-mafia-d89010c9df83","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cdn.pathfactory.com/assets/10555/contents/394789/0dd521f8-aa64-4517-834e-bc852e9ab95d.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.minerva-labs.com/suncrypt-ransomware-gains-new-abilities-in-2022","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tetradefense.com/incident-response-services/cause-and-effect-suncrypt-ransomware-analysis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityboulevard.com/2020/09/the-curious-case-of-suncrypt/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/suncrypt-ransomware-sheds-light-on-the-maze-ransomware-cartel/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.acronis.com/en-us/blog/posts/suncrypt-adopts-attacking-techniques-netwalker-and-maze-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/s/suncrypt/maze-cartel/ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/egregor-ransomware-gang-arrested-in-ukraine/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/20/k/egregor-ransomware-emerges-as-maze-shuts-down-operations.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/egregor-ransomware-linked-to-maze-arrests-made-in-ukraine/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/egregor","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cybersecuritynews.com/egregor-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/crytek-hit-by-egregor-ransomware-ubisoft-data-leaked/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.appgate.com/news-press/appgate-labs-analyzes-new-family-of-ransomware-egregor","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2kjpox12cnap3zv36440iue7-wpengine.netdna-ssl.com/wp-content/uploads/2020/10/egregor-ransom-demanding-message.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2020/september/25/egregor.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"RECOVER-FILES.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://egregornews.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://egregoranrmzapcv.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ech0raix","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.qnap.com/en/security-advisory/QSA-20-02","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.intezer.com/blog/malware-analysis/when-viruses-mutate-did-suncrypt-ransomware-evolve-from-qnapcrypt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.intezer.com/blog-seizing-15-active-ransomware-campaigns-targeting-linux-file-storage-servers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.intezer.com/blog-russian-cybercrime-group-fullofdeep-behind-qnapcrypt-ransomware-campaigns/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ibm.com/downloads/cas/Z81AVOY7","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/qnap-warns-of-ech0raix-ransomware-attacks-roon-server-zero-day/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/ech0raix-ransomware-soho/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intezer.com/blog/linux/elf-malware-analysis-101-linux-threats-no-longer-an-afterthought","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://documents.trendmicro.com/assets/pdf/wp-backing-your-backup-defending-nas-devices-against-evolving-threats.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.netlab.360.com/qnap-nas-users-make-sure-you-check-your-system/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.anomali.com/blog/the-ech0raix-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ongoing-ech0raix-ransomware-campaign-targets-qnap-nas-devices/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://duckduckgo.com/html?q=tor+browser+how+to\\n\\nDo","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sg3dwqfpnr4sl5hh.onion/order/[Bitcoin","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/large-scale-snake-ransomware-campaign-targets-healthcare-more/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tripwire.com/state-of-security/security-data-protection/massive-spike-in-snake-ransomware-activity-attributed-to-new-campaign/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybersecurity-insiders.com/meet-the-snake-ransomware-which-encrypts-all-connected-devices/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/s/SNAKE/may-2020-campaign/snake-ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Decrypt-Your-Files.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-coronavirus-ransomware-acts-as-cover-for-kpot-infostealer/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/c/coronavirus-ransomware/changed-mbrlocker-screen.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/c/coronavirus-ransomware/mbr-locker.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/c/coronavirus-ransomware/ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"CoronaVirus.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/mespinoza","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/pysa","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/france-warns-of-new-ransomware-gang-targeting-local-governments/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/from-the-front-lines-peering-into-a-pysa-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.prodaft.com/resource/detail/pysa-ransomware-group-depth-analysis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.prodaft.com/m/reports/PYSA_TLPWHITE_3.0.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.lacework.com/blog/pysa-ransomware-gang-adds-linux-support/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/threat-analysis-report-inside-the-destructive-pysa-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-gangs-script-shows-exactly-the-files-theyre-after/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/gasket-and-magicsocks-tools-install-mespinoza-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/inversecos/status/1456486725664993287","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/campuscodi/status/1347223969984897026","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2019/10/mespinoza-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://dissectingmalwa.re/another-one-for-the-collection-mespinoza-pysa-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2021/06/pysa-loves-chachi-a-new-golang-rat","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2021/11/29/pysa-ransomware-under-the-lens-a-deep-dive-analysis/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-spotlight/2021/03/pysa-the-ransomware-attacking-schools","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2021/210316.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2020-CTI-002.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/cti/CERTFR-2020-CTI-002/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=ransom:win32/wadhrama.c&ThreatID=2147730655","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/17016-razor-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/images/stories/screenshots202002/razor-ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"www.youtube.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"jxmpp.jp","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"1.jpg.razor","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.knowbe4.com/bart-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/robinhood","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2022/01/11/signed-kernel-drivers-unguarded-gateway-windows-core/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/robinhood-ransomware-coolmaker-function-not-cool/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-exploits-gigabyte-driver-to-kill-av-processes/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/a-closer-look-at-the-robbinhood-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/VK_Intel/status/1121440931759128576","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2020/02/06/living-off-another-land-ransomware-borrows-vulnerable-driver-to-remove-security-software/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2019/06/report-no-eternal-blue-exploit-found-in-baltimore-city-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://goggleheadedhacker.com/blog/post/12","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.quickheal.com/a-new-ransomware-goodwill-hacks-the-victims-for-charity-read-more-to-know-more-about-this-ransomware-and-how-it-affects-its-victims/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://arstechnica.com/information-technology/2019/05/baltimore-city-government-hit-by-robbinhood-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/megacortex","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.quickheal.com/first-node-js-based-ransomware-nodera/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://exchange.xforce.ibmcloud.com/collection/6f18908ce6d9cf4efb551911e00d9ec4","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://bartblaze.blogspot.com/2020/01/satan-ransomware-rebrands-as-5ss5c.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-T0B4txHlNHs/Xh4-raVFVtI/AAAAAAAACTE/R-YoW8QHFLsuD140AF9vD-_rOifULExUgCLcBGAsYHQ/s1600/note.PNG","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://bartblaze.blogspot.com/2018/08/mafia-ransomware-targeting-users-in.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/06/kingouroboros-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"king.ouroboros","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/blackmailware-found-on-porn-site-threatens-to-report-users-are-spreading-child-porn/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/malware/b/blackmailware/pornblackmailer/ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/clop","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/german-tech-giant-software-ag-down-after-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/croatias-largest-petrol-station-chain-impacted-by-cyber-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=PqGaZgepNTE","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.vice.com/en/article/wx5eyx/meet-the-ransomware-gang-behind-one-of-the-biggest-supply-chain-hacks-ever","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-clop","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.telekom.com/en/blog/group/article/inside-of-cl0p-s-ransomware-operation-615824","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.splunk.com/en_us/blog/security/detecting-clop-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.splunk.com/en_us/blog/security/clop-ransomware-detection-threat-research-release-april-2021.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.npu.gov.ua/news/kiberzlochini/kiberpolicziya-vikrila-xakerske-ugrupovannya-u-rozpovsyudzhenni-virusu-shifruvalnika-ta-nanesenni-inozemnim-kompaniyam-piv-milyarda-dolariv-zbitkiv/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.notion.so/S2W-LAB-Analysis-of-Clop-Ransomware-suspiciously-related-to-the-Recent-Incident-c26daec604da4db6b3c93e26e6c7aa26","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.notion.so/S2W-LAB-Analysis-of-Clop-Ransomware-suspiciously-related-to-the-Recent-Incident-English-088056baf01242409a6e9f844f0c5f2e","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hornetsecurity.com/en/security-information/clop-clop-ta505-html-malspam-analysis/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fsec.or.kr/common/proc/fsec/bbs/163/fileDownLoad/2297.do","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2021/02/accellion-fta-exploited-for-data-theft-and-extortion.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2020-CTI-009.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2020-CTI-006.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/cti/CERTFR-2019-CTI-009/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.carbonblack.com/blog/cb-tau-threat-intelligence-notification-cryptomix-clop-ransomware-disables-startup-repair-removes-edits-shadow-volume-copies/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.boho.or.kr/filedownload.do?attach_file_seq=2808&attach_file_id=EpF2808.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ta505-hackers-behind-maastricht-university-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-gang-urges-victims-customers-to-demand-a-ransom-payment/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-gang-says-they-stole-2-million-credit-cards-from-e-land/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/indiabulls-group-hit-by-clop-ransomware-gets-24h-leak-deadline/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/cryptomix-clop-ransomware-says-its-targeting-networks-not-computers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/clop-ransomware-gang-is-back-hits-21-victims-in-a-single-month/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.binance.com/en/blog/421499824684902240/Binance-Helps-Take-Down-Cybercriminal-Ring-Laundering-%24500M-in-Ransomware-Attacks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/darb0ng/status/1338692764121251840","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/ukrainian-police-arrest-clop-ransomware-members-seize-server-infrastructure/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/clop-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/modern-ransomware-groups-ttps/106824/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@Sebdraven/unpacking-clop-416b83718e0f","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/06/23093553/Common-TTPs-of-the-modern-ransomware_low-res.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labs.sentinelone.com/breaking-ta505s-crypter-with-an-smt-solver/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2021/06/ukrainian-police-nab-six-tied-to-clop-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/albertzsigovits/malware-notes/blob/master/Ransomware/Clop.md","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/albertzsigovits/malware-notes/blob/master/Clop.md","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/Tera0017/TAFOF-Unpacker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/wp-content/uploads/2021/01/Analysis_ReportCLOP_Ransomware.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/19542/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://actu.fr/normandie/rouen_76540/une-rancon-apres-cyberattaque-chu-rouen-ce-reclament-pirates_29475649.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/clop-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/malwarebytes-news/2021/02/clop-targets-execs-ransomware-tactics-get-another-new-twist","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http:///2vi357dgf4246nvrcsavrt5jsrm7pfqim4t2n3ykzedjim5bzqezmlyd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://htmxyptur5wfjrd7uvg23snupub2pbtlfelk45n37b3augl2w4eearid.onion/remote0/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://frgp3f3u2ddafv4ny7tqn6tc674m6fyymyywoaxot7xskbjmiyhhsyqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://l4rdimrqyonulqjttebry4t6wuzgjv5m62rnpjho3q22a6maf6d5evyd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6v4q5w7di74grj2vtmikzgx2tnq5eagyg2cubpcnqrvvee2ijpmprzqd.onion/remote0/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://npkoxkuygikbkpuf5yxte66um727wmdo2jtpg2djhb2e224i4r25v7ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qahjimrublt35jlv4teesicrw6zhpwhkb6nhtonwxuqafmjhr7hax2id.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://amnwxasjtjc6e42siac6t45mhbkgtycrx5krv7sf5festvqxmnchuayd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://3ws3t4uo7fehnn4qpmadk3zjrxta5xlt3gsc5mx4sztrsy7ficuz5ayd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/ftcode","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/ps1.ftcode","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://exchange.xforce.ibmcloud.com/collection/FTCODE-Ransomware-45dacdc2d5cf30722ced20b9d37988c2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.certego.net/en/news/malware-tales-ftcode/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qvo5sd7p5yazwbrgioky7rdu4vslxrcaeruhjr7ztn3t2pihp56ewlqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/fake-windows-update-spam-leads-to-cyborg-ransomware-and-its-builder/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://npercoco.typepad.com/.a/6a0133f264aa62970b0240a4ebff1b200b-pi","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/maze","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/ransomware-gang-publishes-tens-of-gbs-of-internal-data-from-lg-and-xerox/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zataz.com/cyber-attaque-a-lencontre-des-serveurs-de-bouygues-construction/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/conti-leaks-examining-the-panama-papers-of-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.telsy.com/wp-content/uploads/Maze_Vaccine.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/gold-village","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/csi-evidence-indicators-for-targeted-ransomware-attacks-part-ii/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2021/02/melting-unc2198-icedid-to-ransomware-operations.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.docdroid.net/dUpPY5s/maze.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/maze-ransomware-deobfuscation/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cityofpensacola.com/DocumentCenter/View/18879/Deloitte-Executive-Summary-PDF","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/cti/CERTFR-2021-CTI-007/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.brighttalk.com/webcast/7451/408167/navigating-maze-analysis-of-a-rising-ransomware-threat","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.blueliv.com/cyber-security-and-cyber-threat-intelligence-blog-blueliv/escape-from-the-maze/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-dev-releases-egregor-maze-master-decryption-keys/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/maze-ransomware-releases-files-stolen-from-city-of-pensacola/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/maze-ransomware-now-encrypts-via-virtual-machines-to-evade-detection/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/maze-ransomware-is-shutting-down-its-cybercrime-operation/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/maze-ransomware-behind-pensacola-cyberattack-1m-ransom-demand/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/it-services-giant-cognizant-suffers-maze-ransomware-cyber-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/data-leak-marketplaces-aim-to-take-over-the-extortion-economy/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/crytek-confirms-egregor-ransomware-attack-customer-data-theft/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/chipmaker-maxlinear-reports-data-breach-after-maze-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/allied-universal-breached-by-maze-ransomware-stolen-data-leaked/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bitdefender.com/files/News/CaseStudies/study/377/Bitdefender-Whitepaper-WMI-creat4871-en-EN-GenericUse.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://web.archive.org/save/https://news.cognizant.com/2020-04-18-cognizant-security-update","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/certbund/status/1192756294307995655","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://techcrunch.com/2020/03/26/chubb-insurance-breach-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.co/wordpress/127826/malware/egregor-sekhmet-decryption-keys.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/targeted-ransomware-encrypting-data/99255/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/maze-ransomware/99137/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/543/original/CTIR_casestudy_1.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://oag.ca.gov/system/files/Letter%204.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2020/12/08/egregor-ransomware-mazes-heir-apparent/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2020/09/22/mtr-casebook-blocking-a-15-million-maze-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2020/05/12/maze-ransomware-1-year-counting/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://nakedsecurity.sophos.com/2020/06/04/nuclear-missile-contractor-hacked-in-maze-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://media-exp1.licdn.com/dms/document/C4E1FAQHyhJYCWxq5eg/feedshare-document-pdf-analyzed/0?e=1584129600&v=beta&t=9wTDR-mZPDF4ET7ABNgE2ab9g8e9wxQrhXsxI1cSX8U","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labs.sentinelone.com/enter-the-maze-demystifying-an-affiliate-involved-in-maze-snow/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labs.sentinelone.com/case-study-catching-a-human-operated-maze-ransomware-attack-in-action/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2019/12/ransomware-gangs-now-outing-victim-businesses-that-dont-pay-up/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://killbit.medium.com/applying-the-diamond-model-to-cognizant-msp-and-maze-ransomware-and-a-policy-assessment-498f01bd723f","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/conti-ransomware-cooperation-maze-lockbit-ragnar-locker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2019/05/chacha-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/albertzsigovits/malware-notes/blob/master/Ransomware/Maze.md","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/albertzsigovits/malware-notes/blob/master/Maze.md","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://download.bitdefender.com/resources/files/News/CaseStudies/study/318/Bitdefender-TRR-Whitepaper-Maze-creat4351-en-EN-GenericUse.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.quickheal.com/maze-ransomware-continues-threat-consumers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2020/12/quarterly-ir-report-fall-2020-q4.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2020/09/CTIR-quarterly-trends-Q4-2020.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2019/12/IR-Lessons-Maze.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.minerva-labs.com/egregor-ransomware-an-in-depth-analysis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://techcrunch.com/2020/11/02/maze-ransomware-group-shutting-down","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/maze-ransomware-now-delivered-by-spelevo-exploit-kit/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.maze","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://mazenews.top","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://Newsmaze.top","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://xjypo5vzgmo7jca6b322dnqbsdnp3amd24ybx26x5nxbusccjkm4pwid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://dnspexdevfbct2agyu3oxrmhm4ggf4ec6iwpnlb3kwb2rigrtuz3sayd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://mazedecrypt.top/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://aoacugmutagkwctu.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2019/01/unnamed-desync-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/doppelpaymer","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2018/01/26/friedex-bitpaymer-ransomware-work-dridex-authors/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/wp-content/uploads/2022/02/S1_-SentinelLabs_SanctionsBeDamned_final_02.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/gold-drake","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/csi-evidence-indicators-for-targeted-ransomware-attacks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.blueliv.com/cyber-security-and-cyber-threat-intelligence-blog-blueliv/research/everis-bitpaymer-ransomware-attack-analysis-dridex/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-evil-corp-ransomware-mimics-payloadbin-gang-to-evade-us-sanctions/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://nakedsecurity.sophos.com/2018/09/11/the-rise-of-targeted-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/ursnif-emotet-dridex-and-bitpaymer-gangs-linked-by-a-similar-loader/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/account-with-admin-privileges-abused-to-install-bitpaymer-ransomware-via-psexec","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://assets.sentinelone.com/sentinellabs/sentinellabs_EvilCorp","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/the-malware-that-usually-installs-ransomware-and-you-need-to-remove-right-away/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/ransomware-gang-says-it-breached-one-of-nasas-it-contractors/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/a/an-overview-of-the-doppelpaymer-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/gold-heron","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/unc2165-shifts-to-evade-sanctions","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/financially-motivated-actors-are-expanding-access-into-ot","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2020/201215-1.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.heise.de/news/Uniklinik-Duesseldorf-Ransomware-DoppelPaymer-soll-hinter-dem-Angriff-stecken-4908608.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2020-CTI-008.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-attackers-use-your-cloud-backups-against-you/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/laptop-maker-compal-hit-by-ransomware-17-million-demanded/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/foxconn-electronics-giant-hit-by-ransomware-34-million-ransom/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/fake-microsoft-teams-updates-lead-to-cobalt-strike-deployment/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/doppelpaymer-ransomware-launches-site-to-post-victims-data/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.armor.com/resources/threat-intelligence/the-evolution-of-doppel-spider-from-bitpaymer-to-grief-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/vikas891/status/1385306823662587905","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BrettCallow/status/1453557686830727177?s=20","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/AltShiftPrtScn/status/1385103712918642688","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://techcrunch.com/2020/03/01/visser-breach/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://redcanary.com/blog/grief-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/operation-synctrek-e5013df8d167","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lifars.com/wp-content/uploads/2022/01/GriefRansomware_Whitepaper-2.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://killingthebear.jorgetesta.tech/actors/evil-corp","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/ransomware-attack-access-merchants-infostealer-escrow-service/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.chainalysis.com/reports/ransomware-connections-maze-egregor-suncrypt-doppelpaymer","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://apnews.com/article/virus-outbreak-elections-georgia-voting-2020-voting-c191f128b36d1c0334c9d0b173daa18c","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/doppelpaymer-continues-cause-grief-through-rebranding","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://aithority.com/security/doppelpaymer-ransomware-attack-sinks-a-global-motor-companys-20-million","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.doppelpaymer","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/doppelpaymer-ransomware-and-dridex-2/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://qkbbaxiuqqcqb5nox4np4qjcniy2q6m7yeluvj7n5i5dn7pgpcwxwfid.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2019/06/freeme-freezing-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Mr.Dec","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/05/mrdec-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.2-spyware.com/remove-mr-dec-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securitynews.sonicwall.com/xmlpost/hildacrypt-ransomware-actively-spreading-in-the-wild/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.acronis.com/en-us/blog/posts/meet-buran-new-delphi-ransomware-delivered-rig-exploit-kit","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nemty","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tesorion.nl/nemty-update-decryptors-for-nemty-1-5-and-1-6/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tesorion.nl/en/posts/nemty-update-decryptors-for-nemty-1-5-and-1-6/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.symantec.broadcom.com/hubfs/SED/SED_Threat_Hunter_Reports_Alerts/SED_FY22Q2_SES_Ransomware-Threat-Landscape_WP.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/nokoyawa-ransomware-new-karma-nemty-variant-wears-thin-disguise/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/karma-ransomware-an-emerging-threat-with-a-hint-of-nemty-pedigree/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/paas-or-how-hackers-evade-antivirus-software/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/nemty-ransomware-learning-by-doing/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.lastline.com/labsblog/nemty-ransomware-scaling-up-apac-mailboxes-swarmed-dual-downloaders/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/nemty-ransomware-early-stage-threat.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-nemty-ransomware-may-spread-via-compromised-rdp-connections/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/nemty-ransomware-gets-distribution-from-rig-exploit-kit/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/nemty-ransomware-decryptor-released-recover-files-for-free/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/fake-paypal-site-spreads-nemty-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/nemty-ransomware-trik-botnet","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/evolution-of-jsworm-ransomware/102428/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://raw.githubusercontent.com/k-vitali/Malware-Misc-RE/master/2019-08-24-nemty-ransomware-notes.vk.raw","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/csis-techblog/the-nemty-affiliate-model-13f5cf7ab66b","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/csis-techblog/inside-view-of-brazzzersff-infrastructure-89b9188fd145","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labs.sentinelone.com/meet-nemty-successor-nefilim-nephilim-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/albertzsigovits/malware-notes/blob/master/Nemty.md","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/nemty-ransomware-possibly-spreads-through-exposed-remote-desktop-connections","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ehackingnews.com/2019/05/getcrypt-ransomware-modus-operandi-and.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/phobos","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/new-phobos-ransomware-exploits-weak-security-to-hit-targets-around-the-world/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/revil","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/kaseya-supply-chain-ransomware-attack-technical-analysis-revil-payload","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/revil-ransomware-gang-launches-auction-site-to-sell-stolen-data/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/revil-ransomware-gang-acquires-kpot-malware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=tZVFMVm5GAk","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=l2P5CMH9TE0","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=QYQQUUpU04s","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=P8o6GItci5w","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=LUxOcpIRxmg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/wp-content/uploads/2020/07/ESET_Threat_Report_Q22020.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.washingtonpost.com/national-security/ransomware-fbi-revil-decryption-key/2021/09/21/4a9417d0-f15f-11eb-a452-4da5fe48582d_story.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/undressing-the-revil/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/diving-deeper-into-the-kaseya-vsa-attack-revil-returns-and-other-hackers-are-riding-their-coattails/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/ransomware-double-extortion-and-beyond-revil-clop-and-conti","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/ransomware-as-a-service-enabler-of-widespread-attacks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/g/gootkit-loaders-updated-tactics-and-fileless-delivery-of-cobalt-strike.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/h/supply-chain-attacks-from-a-managed-detection-and-response-persp.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/a/sodinokibi-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/20/l/the-impact-of-modern-ransomware-on-manufacturing-networks.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tgsoft.it/english/news_archivio_eng.asp?id=1004","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.splunk.com/en_us/pdfs/resources/whitepaper/an-empirically-comparative-analysis-of-ransomware-binaries.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.splunk.com/en_us/blog/security/revil-ransomware-threat-research-update-and-detections.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.splunk.com/en_us/blog/security/kaseya-sera-what-revil-shall-encrypt-shall-encrypt.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.splunk.com/en_us/blog/security/gone-in-52-seconds-and-42-minutes-a-comparative-analysis-of-ransomware-encryption-speed.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/lv-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/blog/revil-development-adds-confidence-about-gold-southfield-reemergence?linkId=164334801","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.reddit.com/r/msp/comments/ocggbv/crticial_ransomware_incident_in_progress/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/blackmatter-ransomware-successor-darkside-revil/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pwc.co.uk/issues/cyber-security-services/insights/what-is-behind-ransomware-attacks-increase.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pandasecurity.com/emailhtml/2007-CAM-RANSOMWARE-AD360-WG/2006-Report-Sodinokibi-EN.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/reports/Unit_42/unit42-ransomware-threat-report-2021.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.nytimes.com/2019/08/22/us/ransomware-attacks-hacking.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.netskope.com/blog/netskope-threat-coverage-revil","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2020/04/28/ransomware-groups-continue-to-target-healthcare-critical-services-heres-how-to-reduce-risk/","to_ids":true,"timestamp":"1786036383","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.kpn.com/security-blogs/Tracking-REvil.htm","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.kaseya.com/potential-attack-on-kaseya-vsa/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.justice.gov/opa/pr/sodinokibirevil-ransomware-defendant-extradited-united-states-and-arraigned-texas","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ironnet.com/blog/ransomware-graphic-blog","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.huntress.com/blog/security-researchers-hunt-to-discover-origins-of-the-kaseya-vsa-mass-ransomware-incident","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.huntandhackett.com/blog/revil-the-usage-of-legitimate-remote-admin-tooling","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.huntandhackett.com/blog/advanced-ip-scanner-the-preferred-scanner-in-the-apt-toolbox","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hsgac.senate.gov/media/minority-media/new-portman-report-demonstrates-threat-ransomware-presents-to-the-united-states","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.hornetsecurity.com/en/security-informationen-en/leakware-ransomware-hybrid-attacks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.grahamcluley.com/travelex-paid-ransom/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.goggleheadedhacker.com/blog/post/sodinokibi-ransomware-analysis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.goggleheadedhacker.com/blog/post/reversing-crypto-functions","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.flashpoint-intel.com/blog/revils-cryptobackdoor-con-ransomware-groups-tactics-roil-affiliates-sparking-a-fallout/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.flashpoint-intel.com/blog/possible-universal-revil-master-key-posted-to-xss/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.flashpoint-intel.com/blog/darkside-ransomware-links-to-revil-difficult-to-dismiss/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.flashpoint-intel.com/blog/cl0p-and-revil-escalate-their-ransomware-tactics/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.flashpoint-intel.com/blog/chatter-indicates-blackmatter-as-revil-successor/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.europol.europa.eu/newsroom/news/five-affiliates-to-sodinokibi/revil-unplugged","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.elastic.co/blog/ransomware-interrupted-sodinokibi-and-the-supply-chain","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.elastic.co/blog/elastic-security-prevents-100-percent-of-revil-ransomware-samples?utm_content=&utm_medium=social&utm_source=twitter","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.domaintools.com/resources/blog/revealing-revil-ransomware-with-domaintools-and-maltego","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.documentcloud.org/documents/21505031-hgsac-staff-report-americas-data-held-hostage-032422","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.digitalshadows.com/blog-and-research/ransomware-as-a-service-rogue-affiliates-and-whats-next/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.digitalshadows.com/blog-and-research/competitions-on-russian-language-cybercriminal-forums-sharing-expertise-or-threat-actor-showboating/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/a-former-darkside-listing-shows-up-on-revils-leak-site/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyjax.com/2021/07/09/revilevolution/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyborgsecurity.com/cyborg_labs/hunting-ransomware-inhibiting-system-backup-or-recovery/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/cybereason-vs-revil-ransomware-the-kaseya-chronicles","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/how-to-defend-against-conti-darkside-revil-and-other-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/how-falcon-complete-thwarted-a-revil-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/how-crowdstrike-stops-revil-ransomware-from-kaseya-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/carbon-spider-sprite-spider-target-esxi-servers-with-ransomware/?utm_campaign=blog&utm_medium=soc&utm_source=twtr&utm_content=sprout","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cronup.com/post/de-ataque-con-malware-a-incidente-de-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.coveware.com/blog/ransomware-attack-vectors-shift-as-new-software-vulnerability-exploits-abound","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.connectwise.com/resources/revil-profile","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cnbc.com/2021/04/23/axis-of-revil-inside-the-hacker-collective-taunting-apple.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.certego.net/en/news/malware-tales-sodinokibi/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2021-CTI-009.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2020-CTI-001.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/cti/CERTFR-2021-CTI-009/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/Lageberichte/Lagebericht2020.pdf?__blob=publicationFile&v=2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.boll.ch/datasheets/WG_Threat_Report_EN.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/three-more-ransomware-families-create-sites-to-leak-stolen-data/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-to-stop-taking-bitcoin-to-hide-money-trail/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-threatens-to-publish-data-of-automotive-group/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-says-travelex-will-pay-one-way-or-another/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-publishes-stolen-data-for-the-first-time/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-may-tip-nasdaq-on-attacks-to-hurt-stock-prices/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-hits-travelex-demands-3-million/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-hits-new-york-airport-systems/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/revils-tor-sites-come-alive-to-redirect-to-new-ransomware-operation/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/revil-ransomwares-servers-mysteriously-come-back-online/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/revil-ransomware-returns-new-malware-sample-confirms-gang-is-back/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/revil-ransomware-hits-managedcom-hosting-provider-500k-ransom/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/revil-ransomware-hits-1-000-plus-companies-in-msp-supply-chain-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/revil-ransomware-gangs-web-sites-mysteriously-shut-down/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/revil-ransomware-gang-claims-over-100-million-profit-in-a-year/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/revil-ransomware-devs-added-a-backdoor-to-cheat-affiliates/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/revil-gang-tries-to-extort-apple-threatens-to-sell-stolen-blueprints/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-threatens-to-reveal-companys-dirty-secrets/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/popular-russian-hacking-forum-xss-bans-all-ransomware-topics/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-jersey-synagogue-suffers-sodinokibi-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/kaseyas-universal-revil-decryption-key-leaked-on-a-hacking-forum/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/kaseya-obtains-universal-decryptor-for-revil-ransomware-victims/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/fbi-revil-cybergang-behind-the-jbs-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/darkside-ransomware-made-90-million-in-just-nine-months/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/blackmatter-ransomware-gang-rises-from-the-ashes-of-darkside-revil/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/another-ransomware-will-now-publish-victims-data-if-not-paid/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/a-look-inside-the-highly-profitable-sodinokibi-ransomware-business/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.blackberry.com/content/dam/blackberry-com/asset/enterprise/pdf/wp-spark-state-of-ransomware.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bankinfosecurity.com/interviews/ransomware-files-episode-6-kaseya-revil-i-5045","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.appgate.com/blog/electric-company-ransomware-attack-calls-for-14-million-in-ransom","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advanced-intel.com/post/the-dark-web-of-intrigue-how-revil-used-the-underground-ecosystem-to-form-an-extortion-cartel","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advanced-intel.com/post/revil-vanishes-from-underground-infrastructure-down-support-staff-adverts-silent","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advanced-intel.com/post/inside-revil-extortionist-machine-predictive-insights","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advanced-intel.com/post/from-qbot-with-revil-ransomware-initial-attack-exposure-of-jbs","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advanced-intel.com/post/adversarial-perspective-advintel-breach-avoidance-through-monitoring-initial-vulnerabilities","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.acronis.com/en-sg/articles/sodinokibi-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.accenture.com/us-en/blogs/cyber-defense/evolving-danger-ransomware-extortion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://web.archive.org/web/20210305181115/https://cisoclub.ru/doc/otchet-kompanii-group-ib-ransomware-uncovered-2020-2021/?bp-attachment=group-ib_ransomware_uncovered_2020-2021.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://vulnerability.ch/2021/04/ransomware-and-date-leak-site-publication-time-analysis/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://vimeo.com/449849549","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://velzart.nl/blog/ransomeware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://us-cert.cisa.gov/ncas/alerts/aa20-345a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/threat-brief-kaseya-vsa-ransomware-attacks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/revil-threat-actors/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/prometheus-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/svch0st/status/1411537562380816384","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/resecurity_com/status/1412662343796813827","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/fwosar/status/1420119812815138824","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/fwosar/status/1411281334870368260","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/_alex_il_/status/1412403420217159694","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/VK_Intel/status/1411066870350942213","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/VK_Intel/status/1374571480370061312?s=20","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/SyscallE/status/1411074271875670022","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/SophosLabs/status/1413616952313004040?s=20","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/SophosLabs/status/1412056467201462276","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/R3MRUM/status/1412064882623713283","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/LloydLabs/status/1411098844209819648","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/Jacob_Pimental/status/1398356030489251842?s=20","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/Jacob_Pimental/status/1391055792774729728","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/revil-ransomware-executes-supply-chain-attack-via-malicious-kaseya-update/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/ransomwhere-project-wants-to-create-a-database-of-past-ransomware-payments/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/i-scrounged-through-the-trash-heaps-now-im-a-millionaire-an-interview-with-revils-unknown/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/darkside-ransomware-gang-says-it-lost-control-of-its-servers-money-a-day-after-biden-threat/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/darkside-gang-estimated-to-have-made-over-90-million-from-ransomware-attacks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/an-interview-with-blackmatter-a-new-ransomware-group-thats-learning-from-the-mistakes-of-darkside-and-revil/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2022/03/ukrainian-hacker-linked-to-revil.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thedfirreport.com/2021/03/29/sodinokibi-aka-revil-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://tehtris.com/fr/peut-on-neutraliser-un-ransomware-lance-en-tant-que-system-sur-des-milliers-de-machines-en-meme-temps/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://teamt5.org/tw/posts/revil-dll-sideloading-technique-used-by-other-hackers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://teamt5.org/en/posts/introducing-the-most-profitable-ransomware-revil/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec.broadcom.com/hubfs/The_Ransomware_Threat_September_2021.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/sodinokibi-ransomware-cobalt-strike-pos","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/kaseya-ransomware-supply-chain","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://sites.temple.edu/care/ci-rw-attacks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityscorecard.com/research/a-detailed-analysis-of-the-last-version-of-revil-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/posts/sodinokibi-revil-ransomware-disrupt-trade-secrets/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/posts/sodinokibi-ransomware-incident-response-intelligence-together/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.co/wordpress/98694/malware/sodinokibi-kenneth-cole-data-breach.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/mcafee-atr-analyzes-sodinokibi-aka-revil-ransomware-as-a-service-what-the-code-tells-us/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/mcafee-atr-analyzes-sodinokibi-aka-revil-ransomware-as-a-service-crescendo/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/revil-ransomware-attack-on-msp-companies/103075/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/ransomware-world-in-2021/102169/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://searchsecurity.techtarget.com/feature/Ransomware-negotiations-An-inside-look-at-the-process","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://resources.malwarebytes.com/files/2020/02/2020_State-of-Malware-Report.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2020/graphology-of-an-exploit-playbit/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://redcanary.com/blog/uncompromised-kaseya/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://raw.githubusercontent.com/k-vitali/Malware-Misc-RE/master/2022-05-01-revil-reborn-ransom.vk.cfg.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://public.intel471.com/blog/revil-ransomware-interview-russian-osint-100-million/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://public.intel471.com/blog/ransomware-as-a-service-2020-ryuk-maze-revil-egregor-doppelpaymer/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2022/03/17/the-ransomware-threat-intelligence-center/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/07/04/independence-day-revil-uses-supply-chain-exploit-to-attack-hundreds-of-businesses","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/06/30/what-to-expect-when-youve-been-hit-with-revil-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/06/30/mtr-in-real-time-hand-to-hand-combat-with-revil-ransomware-chasing-a-2-5-million-pay-day/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2021/06/11/relentless-revil-revealed/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/w4-may-en-story-of-the-week-ransomware-on-the-darkweb-5f5b8d4c3b6f","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wlab/deep-analysis-of-revil-ransomware-written-in-korean-d1899c0e9317","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@underthebreach/tracking-down-revils-lalartu-by-utilizing-multiple-osint-methods-2bf3a6c65a80","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2021/08/ransomware-gangs-and-the-name-game-distraction/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2019/07/is-revil-the-new-gandcrab-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ke-la.com/zooming-into-darknet-threats-targeting-jp-orgs-kela/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ke-la.com/to-attack-or-not-to-attack-targeting-the-healthcare-sector-in-the-underground-ecosystem/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ke-la.com/ransomware-gangs-are-starting-to-look-like-oceans-11/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ke-la.com/how-ransomware-gangs-find-new-monetization-schemes-and-evolve-in-marketing/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ke-la.com/easy-way-in-5-ransomware-victims-had-their-pulse-secure-vpn-credentials-leaked/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ke-la.com/darknet-threat-actors-are-not-playing-games-with-the-gaming-industry/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://kaseya.app.box.com/s/0ysvgss7w48nxh8k1xt7fqhbcjxhas40","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://jsac.jpcert.or.jp/archive/2020/pdf/JSAC2020_1_tamada-yamazaki-nakatsuru_en.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://isc.sans.edu/diary/27012","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://intel471.com/blog/changes-in-revil-ransomware-version-2-2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ics-cert.kaspersky.com/media/KASPERSKY_H1_2020_ICS_REPORT_EN.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ibm.ent.box.com/s/hs5pcayhbbhjvj8di5sqdpbbd88tsh89","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://i.blackhat.com/eu-20/Wednesday/eu-20-Clarke-Its-Not-FINished-The-Evolving-Maturity-In-Ransomware-Operations.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://i.blackhat.com/eu-20/Wednesday/eu-20-Clarke-Its-Not-FINished-The-Evolving-Maturity-In-Ransomware-Operations-wp.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://hatching.io/blog/ransomware-part2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://gist.githubusercontent.com/fwosar/a63e1249bfccb8395b961d3d780c0354/raw/312b2bbc566cbee2dac7b143dc143c1913ddb729/revil.json","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://f.hubspotusercontent10.net/hubfs/7095517/FLINT-Kaseya-Another%20Massive%20Heist%20by%20REvil.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://f.hubspotusercontent10.net/hubfs/5943619/Whitepaper-Downloads/Ransomware_in_ICS_Environments_Whitepaper_10_12_20.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://drive.google.com/file/d/1ph1E0onZ7TiNyG87k4WjofCKNuCafMLk/view","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://download.microsoft.com/download/f/8/1/f816b8b6-bee3-41e5-b6cc-e925a5688f61/Microsoft_Digital_Defense_Report_2020_September.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://doublepulsar.com/kaseya-supply-chain-attack-delivers-mass-ransomware-event-to-us-companies-76e4ec6ec64b","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://docs.google.com/spreadsheets/d/1MI8Z2tBhmqQ5X8Wf_ozv3dVjz5sJOs-3","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://dissectingmalwa.re/germanwipers-big-brother-gandgrabs-kid-sodinokibi.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cti-league.com/wp-content/uploads/2021/02/CTI-League-Darknet-Report-2021.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://community.riskiq.com/article/3315064b","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cisoclub.ru/doc/otchet-kompanii-group-ib-ransomware-uncovered-2020-2021/?bp-attachment=group-ib_ransomware_uncovered_2020-2021.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2022/01/kraken-the-code-on-prometheus","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2021/11/revil-under-the-microscope","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2021/05/threat-thursday-dr-revil-ransomware-strikes-again-employs-double-extortion-tactics","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.truesec.com/2021/07/06/kaseya-vsa-zero-day-exploit","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.truesec.com/2021/07/04/kaseya-supply-chain-attack-targeting-msps-to-deliver-revil-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2021/03/ctir-trends-winter-2020-21.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.sensecy.com/2020/08/20/global-ransomware-attacks-in-2020-the-top-4-vulnerabilities/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.redteam.pl/2020/05/sodinokibi-revil-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.morphisec.com/real-time-prevention-of-the-kaseya-vsa-supply-chain-revil-ransomware-attack","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2020/11/german-users-targeted-with-gootkit-banker-or-revil-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.intel471.com/2020/03/31/revil-ransomware-as-a-service-an-analysis-of-a-ransomware-affiliate-operation/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.group-ib.com/REvil_RaaS","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.gigamon.com/2021/07/08/observations-and-recommendations-from-the-ongoing-revil-kaseya-incident/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.amossys.fr/sodinokibi-malware-analysis.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blag.nullteilerfrei.de/2020/02/02/defeating-sodinokibi-revil-string-obfuscation-in-ghidra/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blag.nullteilerfrei.de/2019/11/09/api-hashing-why-and-how/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://awakesecurity.com/blog/threat-hunting-for-revil-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/ko/19860/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/ko/19640/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://areteir.com/wp-content/uploads/2020/07/Arete_Insight_Sodino-Ransomware_June-2020.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=ptbNMlWxYnE","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=mDUMpYAOMOo","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/docs/vmw-exposing-malware-in-linux-based-multi-cloud-environments.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-revil","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_in/research/21/k/global-operations-lead-to-arrests-of-alleged-members-of-gandcrab.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/blog/revil-ransomware-reemerges-after-shutdown-universal-decryptor-released","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.reuters.com/technology/exclusive-governments-turn-tables-ransomware-gang-revil-by-pushing-it-offline-2021-10-21/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.justice.gov/opa/pr/ukrainian-arrested-and-charged-ransomware-attack-kaseya","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.flashpoint-intel.com/blog/revil-disappears-again/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.flashpoint-intel.com/blog/interview-with-revil-affiliated-ransomware-contractor/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fincen.gov/sites/default/files/advisory/2021-11-08/FinCEN%20Ransomware%20Advisory_FINAL_508_.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fbi.gov/wanted/cyber/yevgyeniy-igoryevich-polyanin","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.elliptic.co/blog/revil-revealed-tracking-ransomware-negotiation-and-payment","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.domaintools.com/resources/blog/the-most-prolific-ransomware-families-a-defenders-guide","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.digitalshadows.com/blog-and-research/revil-analysis-of-competing-hypotheses/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.darktrace.com/en/blog/staying-ahead-of-r-evils-ransomware-as-a-service-business-model/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.darkowl.com/blog-content/page-not-found-revil-darknet-services-offline-after-attack-last-weekend","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/hypervisor-jackpotting-ecrime-actors-increase-targeting-of-esxi-servers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/how-big-game-hunting-ttps-shifted-after-darkside-pipeline-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/big-game-hunting-on-the-rise-again-according-to-ecrime-index/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.br.de/nachrichten/deutschland-welt/mutmasslicher-ransomware-millionaer-identifiziert","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/revil-ransomware-shuts-down-again-after-tor-sites-were-hijacked/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bbc.com/news/technology-59297187","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.advintel.io/post/storm-in-safe-haven-takeaways-from-russian-authorities-takedown-of-revil","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.accenture.com/us-en/blogs/cyber-defense/moving-left-ransomware-boom","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://us-cert.cisa.gov/ncas/current-activity/2021/07/04/cisa-fbi-guidance-msps-and-their-customers-affected-kaseya-vsa","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/VK_Intel/status/1409601311092490248?s=20","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/VK_Intel/status/1409601311092490248","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/IntezerLabs/status/1452980772953071619","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/AdamTheAnalyst/status/1409499591452639242?s=20","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatpost.com/ransomware-revil-sites-disappears/167745/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://threatpost.com/linux-variant-ransomware-vmwares-nas/167511/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/us-arrests-and-charges-ukrainian-man-for-kaseya-ransomware-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://storage.courtlistener.com/recap/gov.uscourts.txnd.352371/gov.uscourts.txnd.352371.1.0_1.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://storage.courtlistener.com/recap/gov.uscourts.txnd.351760/gov.uscourts.txnd.351760.1.0_3.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://russian.rt.com/russia/article/926347-barnaulec-rozysk-fbr-kibermoshennichestvo","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE54L7v","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://otx.alienvault.com/pulse/60da2c80aa5400db8f1561d5","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malienist.medium.com/revix-linux-ransomware-d736956150d0","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2021/11/revil-ransom-arrest-6m-seizure-and-10m-reward/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ke-la.com/will-the-revils-story-finally-be-over/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://home.treasury.gov/news/press-releases/jy0471","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/f0wl/REconfig-linux","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://documents.trendmicro.com/assets/rpt/rpt-navigating-new-frontiers-trend-micro-2021-annual-cybersecurity-report.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://diicot.ro/mass-media/3341-comunicat-de-presa-2-08-11-2021","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cybleinc.com/2021/07/03/uncensored-interview-with-revil-sodinokibi-ransomware-operators/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cybersecurity.att.com/blogs/labs-research/revils-new-linux-version","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.vmware.com/security/2022/09/esxi-targeting-ransomware-the-threats-that-are-after-your-virtual-machines-part-1.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://angle.ankura.com/post/102hcny/revix-linux-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://analyst1.com/file-assets/History-of-REvil.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.fsb.ru/fsb/press/message/single.htm%21id%3D10439388%40fsbMessage.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.theverge.com/2021/7/22/22589643/ransomware-kaseya-vsa-decryptor-revil","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.macrumors.com/2021/04/26/revil-delists-stolen-apple-schematics-threat","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/revil-ransomware-group-resurfaces-after-brief-hiatus","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://landxxeaf2hoyl2jvcwuazypt6imcsbmhb7kx3x33yhparvtmkatpaad.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ttn4gqpgvyy6tuezexxhwiukmm2t6zzawj6p3w3jprve36f43zxr24qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rrjwr4jsju3nuwjz77hbcquiuq5hc3oc7yxlgi5rxeazehf7mlkzcvid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://fsgwyl2xd2h5s43er7epr6vuqu5eddmmtgp6cq7khmkoe3ba4d37w7ad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://65x5syrn4gmgfnicrhyfwkokw5x3xipxer2z4vhhckrh756v6m5272qd.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://54xj22qsftuzs6bhcistgz27reblgijdjggkgb3fdhfgl3ghkmzk7dad.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://2wub3njb7zvmnn6xohbuizjcbvy4w5dvlb4puesry3rrl6gx4452ezid.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blogxxu75w63ujqarv476otld7cyjkq4yoswzt4ijadkjwvg3vrvd5yd.onion/Blog","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/elf.cr1ptt0r","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.coveware.com/blog/2019/3/13/cr1ptt0r-ransomware-targets-nas-devices-with-old-firmware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/12121-planetary-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.2-spyware.com/remove-bigbobross-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malware.wikia.org/wiki/Tellyouthepass","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://spyware-techie.com/blackworm-ransomware-removal-guide","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/analysis-of-new-globeimposter-ransomware-variant.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/jokeroo-ransomware-as-a-service-offers-multiple-membership-packages/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Exploit.in","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/ransomware-as-a-service-princess-evolution-looking-for-affiliates/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"MALXMR.TIDBF","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/lockergoga","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-lockergoga-ransomware-allegedly-used-in-altran-attack/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/u/1100723/Ransomware/LockerGoga-ransom-note.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"README-NOW.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2019-ACT-005.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/wp-content/uploads/2019/01/RansomeNote-fig4.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/wp-content/uploads/2019/01/RansomeNote-fig3.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"RyukReadMe.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1072907748155842565","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"openme.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GrujaRS/status/1072468548977680385","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DuIsIoWXQAEGKlr.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"TERAZ.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1072164314608480257","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"n3.Then","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"n2.We","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"n1.Send","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=uHYY6XZZEw4","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-december-14th-2018-slow-week/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GrujaRS/status/1071349228172124160","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/Dt4xTDjWwAEBjBh.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1071123090564923393","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://ccrypt.sourceforge.net/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=iB019lDvArs","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GrujaRS/status/1071153192975642630","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/december/7/Dt1_DpMXcAMC8J_[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/Emm_ADC_Soft/status/1071716275590782976","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/petrovic082/status/1071003939015925760","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/december/14/Dt-APfCW0AADWV8[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/Dtz4PD2WoAIWtRv.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/1069905624954269696","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/december/7/DtkQKCDWoAM13kD[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GrujaRS/status/1070011234521673728","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=QevoUzbqNTQ","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-december-7th-2018-wechat-ransomware-scammers-and-more/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DtlxfFsW4AAs-Co.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/december/7/Dtlxf0eW4AAJCdZ[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/chinese-police-arrest-dev-behind-unnamed1989-wechat-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-infects-100k-pcs-in-china-demands-wechat-payment/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1067109661076262913","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"3HCBsZ6QQTnSsthbmVtYE4XSZtism4j7qd","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=_aaFon7FVbc","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GrujaRS/status/1066799421080461312","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-november-30th-2018-indictments-sanctions-and-more/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/Ds4IYbfWsAECNuJ.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/Ds4IKL3X4AIHKrj.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/30/Ds4IYbfWsAECNuJ[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1066099799705960448","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/petrovic082/status/1065223932637315074","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/23/DsuMFrZW0AIIUXs[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/23/DsiUA0LXgAAoqkd[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GrujaRS/status/1063930127610986496","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/23/DsPVGaHXcAAtnXz[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1063769884608348160","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/23/vapor.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1060921043957755904","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DrkmCriWwAMCdqF.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"1GstvLM6SumX3TMMgN9PvXQsEy3FR9ZqWX","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1059470985055875074","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"aboutYourFiles.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"1LX3tBkW161hoF5DbGzbrm3sdXaF6XHv2D","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1058775145005887489","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/9/moira.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GrujaRS/status/1040677247735279616","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/siri_urz/status/1039077365039673344","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/september/14/mvp.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-pretends-to-be-proton-security-team-securing-data-from-hackers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1049325784979132417","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"readmy.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1048616343975682048","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"md5","category":"Payload delivery","value":"29b579fb811f05c3c334a2bd2646a27a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/commonransom-ransomware-demands-rdp-access-to-decrypt-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/c/CommonRansom/ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"35M1ZJhTaTi4iduUfZeNA75iByjoQ9ibgF","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"nuke.africa","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/file-locker-ransomware-targets-korean-victims-and-asks-for-50k-won/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/f/file-locker/ransom-note%20-%20Copy.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.localbitcoins.com/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/fallout-exploit-kit-pushing-the-savefiles-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-november-9th-2018-mostly-dharma-variants/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MarceloRivero/status/1059575186117328898","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/kraken-cryptor-ransomware-masquerading-as-superantispyware-security-program/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/fallout-exploit-kit-now-installing-the-kraken-cryptor-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/security/f/fallout-exploit-kit/savefiles/ransom-note-red.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/mongo-lock-attack-ransoming-deleted-mongodb-databases/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"8chan.co","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Shodan.io","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/sigma-ransomware-being-distributed-using-fake-craigslist-malspam/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/s/sigma/craigslist-malspam/payment-portal.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/s/sigma/craigslist-malspam/ransom-note-html-part_02.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/s/sigma/craigslist-malspam/ransom-note-html-part_01.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/siri_urz/status/1035138577934557184","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/august/31/Dl2M9kdX0AAcGbJ[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/B_H101/status/1034379267956715520","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/august/31/DlraMbTWwAA_367[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/leotpsc/status/1034346447112679430","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/august/31/Dlq8W3FXoAAYR1v[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/08/cassetto-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1034213399922524160","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/august/31/DlpDe-kXsAA2lmH[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/leotpsc/status/1033625496003731458","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/08/creampie-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/1033656080839139333","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/08/cryptonar-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1034492151541977088","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/cryptonar-ransomware-discovered-and-quickly-decrypted/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/august/31/ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"INFORMATION.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"partially.cryptoNar","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"fully.cryptoNar","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/08/barack-obamas-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/barack-obamas-blackmail-virus-ransomware-only-encrypts-exe-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1032242391665790981","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/b/barack-obama-ransomware/barack-obama-everlasting-blue-blackmail-virus.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/12/stop-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MarceloRivero/status/1065694365056679936","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/Emm_ADC_Soft/status/1064459080016760833","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/23/DsobVENXcAAR3GC[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/23/DsW33OQXgAAwJzv[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.kaspersky.com/blog/keypass-ransomware/23447/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-keypass-ransomware-campaign-underway/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"bitmessage.ch","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/11/wannasmile-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"www.digiarz.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"www.farhadexchange.net","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"www.payment","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"www.exchangeing","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/10/tyrant-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"webmoney.ir.Shared","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"exchange.ir","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/11/rastakhiz-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/06/dbger-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/dbger-ransomware-uses-eternalblue-and-mimikatz-to-spread-across-networks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/u/986406/Ransomware/DBGer/DBGer-ransom-note.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"image.png.dbger","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.johannesbader.ch/2015/03/the-dga-of-dircrypt/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/03/everbe-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1065675918000234497","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/decryptor-released-for-the-everbe-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/23/DsoIB_0U0AAXgEz[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1007334654918250496","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Notice.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/05/yyto-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1006237353474756610","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"mail.com.ovgm","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/03/b2dr-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1006220895302705154","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.torproject.org/download/download-easy.html.en\\nb)","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ScrewYou.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"protonmail.com.gw","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/09/paradise-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/993499349199056897","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1005420103415017472","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"all-ransomware.info.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"all-ransomware.info","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"ip-dst","category":"Network activity","value":"0.0.0.1","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/01/nemesis-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/nemes1s-raas-is-padcrypt-ransomwares-affiliate-system/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/Damian1338B/status/1005411102660923392","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/06/donut-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-june-15th-2018-dbger-scarab-and-more/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/siri_urz/status/1005438610806583296","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/june/15/DfQI_lnXUAAukGK[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/04/spartacus-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1005136022282428419","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1005138187621191681","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/05/pgpsnippet-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/june/8/pgpsnippet-variant.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/05/aurora-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/aurora-zorro-ransomware-actively-being-distributed/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1004435398687379456","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.spamfighter.com/News-21588-Aurora-Ransomware-Circulating-the-Cyber-Space.htm","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/a/aurora/wallpaper.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/a/aurora/ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"mail.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"18sj1xr86c3YHK44Mj2AXAycEsT2QLUFac","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"n.We","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"1GSbmCoKzkHVkSUxqdSH5t8SxJQVnQCeYf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"vfemail.net","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"nbig.fish","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"anonimus.mr","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/06/redeye-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://bartblaze.blogspot.com/2018/06/redeye-ransomware-theres-more-than.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/1004463935905509376","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/june/8/DfCO0T2WsAQvclJ[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"system.The","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/06/scarab-diskdoctor-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/june/8/De2sj4GW0AAuQer[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/06/pedcont-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/june/8/De00yEDVQAE_p9z[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/06/crybrazil-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1002953824590614528","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/june/8/crybrazil.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/05/sigrun-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/sigrun-ransomware-author-decrypting-russian-victims-for-free/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"RESTORE-SIGRUN.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.dash.org/exchanges/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/04/hpe-ilo-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/M_Shahpasandi/status/989157283799162880","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-hits-hpe-ilo-remote-management-interfaces/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://localbitcoins.com\\nhttps://www.kraken.com\\nPlease","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"yopmail.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-c-ransomware-compiles-itself-at-runtime/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/c/compiled-ransomware/ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/04/tron-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/985152346773696512","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DavxIr-W4AEq3Ny.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/04/ironlocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://bartblaze.blogspot.lu/2018/04/maktub-ransomware-possibly-rebranded-as.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/nmcryptansomware-removal/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://sensorstechforum.com/nmcrypt-files-ransomware-virus-remove-restore-data/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://sensorstechforum.com/wp-content/uploads/2018/04/stf-NMCRYPT-ransomware-virus-ransom-note-tor-onion-network-page-768x827.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lylh3uqyzay3lhrd.onion.link/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://lylh3uqyzay3lhrd.onion.to/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/10/xiaoba-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1004048636530094081","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/968552114787151873","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/926748937477939200","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/923847744137154560","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/xiaoba-ransomware-retooled-as-coinminer-but-manages-to-ruin-your-files-anyway/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/june/8/De8WvF_X0AARtYr[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DNx5Of-X0AASVda.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DNIoIFuX4AAce7J.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"yeah.net","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/minecraft-and-cs-go-ransomware-strive-for-media-attention/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/04/skyfile-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/982229994364547073","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/03/bansomqarewanna-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/981270787905720320","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pastebin.com/xkRaRytW","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"1MFA4PEuDoe2UCKgabrwm8P4KztASKtiuv","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"File.s.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blockchain.info/wallet/#/buy-sell\\n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blockchain.info/fr/wallet/#/signup\\nStep","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://en.wikipedia.org/wiki/Ransomware#Fusob","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://nakedsecurity.sophos.com/2012/08/29/reveton-ransomware-exposed-explained-and-eliminated/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://en.wikipedia.org/wiki/Ransomware#Reveton","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/microsoft-engineer-charged-in-reveton-ransomware-case/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vurten","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/04/vurten-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/siri_urz/status/981191281195044867","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/april/6/vurten.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"UNCRYPT.README","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/10/my-decryptor-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1005133410501787648","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/goodbye-cerber-hello-magniber-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/decrypters-for-some-versions-of-magniber-ransomware-released/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://[victim_id].hotdisk.world/EP866p5M93wDS513\\n\\n\\n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://[victim_id].carefit.agency/EP866p5M93wDS513\\n\\n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://[victim_id].jobsnot.services/EP866p5M93wDS513\\n\\n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://[victim_id].bankme.date/EP866p5M93wDS513\\n\\n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://[victim_id].ofotqrmsrdc6c3rz.onion/EP866p5M93wDS513\\n\\n\\n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/06/lockcrypt-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/1034436350748053504","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/lockcrypt-ransomware-cracked-due-to-bad-crypto/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/august/31/DlsLwUjXsAA0xyY[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/04/pubg-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/pubg-ransomware-decrypts-your-files-if-you-play-playerunknowns-battlegrounds/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/p/pubg-ransomware/pubg-ransomware.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/03/whiterose-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-whiterose-ransomware-is-decryptable-and-tells-a-strange-story/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"nVIII.Everything","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://torbox3uiot6wchz.onion\\","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"IV.II","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"HOW-TO-RECOVERY-FILES.TXT","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://tox.chat/download.html]\\nII","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"BY.WHITEROSE","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.accenture.com/t20180803T064557Z__w__/us-en/_acnmedia/PDF-83/Accenture-Cyber-Threatscape-Report-2018.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/black-ruby-ransomware-skips-victims-in-iran-and-adds-a-miner-for-good-measure/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"HOW-TO-DECRYPT-FILES.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/flotera-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/author-of-polski-vortex-and-flotera-ransomware-families-arrested-in-poland/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/03/zenis-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/zenis-ransomware-encrypts-your-data-and-deletes-your-backups/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"MailFence.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/qwerty-ransomware-utilizes-gnupg-to-encrypt-a-victims-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.lu/2017/04/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.lu/2017/04/rsautil-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/rsautil-ransomware-helppme-india-com-installed-via-hacked-remote-desktop-services/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.securityweek.com/rsautil-ransomware-distributed-rdp-attacks","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-T4lvnNISc_A/WQY1SI1r1mI/AAAAAAAAE-E/tH7p02nS2LUTvXmq66poiyM1RYhHc4HbwCLcB/s200/lock-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-6jE-GW6wCr8/WQY1L_uHsFI/AAAAAAAAE-A/3YR0bwwBJqgp8CsApZq4F_44JkMB0m2WwCLcB/s320/image-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"gmx.de","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2018/02/thanatos-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.eclecticiq.com/resources/thanatos--ransomware-first-ransomware-ask-payment-bitcoin-cash?type=intel-report","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://mobile.twitter.com/EclecticIQ/status/968478323889332226","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.zdnet.com/article/cryakl-ransomware-decryption-keys-now-available-for-free/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.technologynews.tech/cryakl-ransomware-virus","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://sensorstechforum.com/fr/fairytail-files-virus-cryakl-ransomware-remove-restore-data/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/shurl0ckr-ransomware-as-a-service-peddled-on-dark-web-can-reportedly-bypass-cloud-applications","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/gandcrab-ransomware/89631/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa19-024a","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/19/f/uncovering-the-evolution-of-gandcrab-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-shuts-down-after-claiming-to-have-made-over-2-billion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/gandcrab","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2018/01/gandcrab-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/gandcrab-v5-ransomware-utilizing-the-alpc-task-scheduler-exploit/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-fallout-exploit-kit-drops-gandcrab-ransomware-or-redirects-to-pups/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/gandcrab-version-3-released-with-autorun-feature-and-desktop-background/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-version-2-released-with-new-crab-extension-and-other-changes/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-being-distributed-via-malspam-disguised-as-receipts/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-distributed-by-exploit-kits-appends-gdcb-extension/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/security/f/fallout-exploit-kit/gandcrab-fallout.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/g/gandcrab/v3/desktop-background.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"GDCB-DECRYPT.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"sj.ms","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sj.ms/register.php\\n0)","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://psi-im.org/download/\\n1","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gandcrab2pie73et.onion/[id]","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"CRAB-DECRYPT.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://tox.chat/download.html\\n2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gdcbmuveqjsli57x.onion/[id]\\n5","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gdcbghvjyqy7jclk.onion.plus/[id]\\n\\nOn","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gdcbghvjyqy7jclk.onion.rip/[id]\\n5","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gdcbghvjyqy7jclk.onion.guide/[id]\\n4","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gdcbghvjyqy7jclk.onion.casa/[id]\\n3","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gdcbghvjyqy7jclk.onion.top/[id]\\n2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gdcbghvjyqy7jclk.onion/[id]\\n5","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.torproject.org/\\n2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://gandcrabmfe6mnef.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://objective-see.com/blog/blog_0x25.html#FileCoder","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/12/file-spider-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/file-spider-ransomware-targeting-the-balkans-with-malspam/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"computer.File","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/scarab","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/06/scarab-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GrujaRS/status/1072057088019496960","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/Amigo_A_/status/1039105453735784448","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1049316344183836672","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1007694117449682945","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1006908267862396928","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1006222754385924096","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://myonlinesecurity.co.uk/necurs-botnet-malspam-delivering-a-new-ransomware-via-fake-scanner-copier-messages/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/933643147766321152","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.forcepoint.com/security-labs/massive-email-campaign-spreads-scarab-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labsblog.f-secure.com/2017/11/23/necurs-business-is-booming-in-a-new-partnership-with-scarab-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/scarab-ransomware-pushed-via-massive-spam-campaign/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DuC07vPWkAAMekP.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/december/7/DtzAAIAW0AEHC86[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/30/Ds8PMFpW0AIcYuJ[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/23/DsnFZrGX4AE2H1c[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/september/14/Scarab-ransomware.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ReadMeToDecrypt.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"airmail.cc.TXT","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://en.wikipedia.org/wiki/Bitcoin\\n\\n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.buybitcoinworldwide.com/\\nhttps://localbitcoins.net\\n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://buy.blockexplorer.com/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"cyrill.fedor","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.coindesk.com/information/how-can-i-buy-bitcoins\\n\\nAttention!","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://localbitcoins.com/buy_bitcoins\\n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"mr.leen","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"cock.li.TXT","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"THIS.TXT","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/11/qkg-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/qkg-ransomware-encrypts-only-word-documents-hides-and-spreads-via-macros/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/11/hc6-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/935622942737817601?ref_src=twsrc%5Etfw","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/12/hc7-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/hc7-gotya-ransomware-installed-via-remote-desktop-services-spread-with-psexec/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"15aM71TGtRZRrY97vdGcDEZeJYBWZhf4FP","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/11/storagecrypter.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/storagecrypt-ransomware-infecting-nas-devices-using-sambacry/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://localbitcoins.com/buy_bitcoins\\n\\nhttps://paxful.com/buy-bitcoin\\n\\nhttp://bitcointalk.org/\\n\\n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/11/halloware-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/halloware-ransomware-on-sale-on-the-dark-web-for-only-40/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.intezer.com/notpetya-returns-bad-rabbit/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/10/badrabbit-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.talosintelligence.com/2017/10/bad-rabbit.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/wp-content/uploads/2017/10/mbr_cut.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/08/synccrypt-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/synccrypt-ransomware-hides-inside-jpg-files-appends-kk-extension/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/synack","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/synack-ransomware-gang-releases-decryption-keys-for-old-victims/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/synack-ransomware-group-releases-decryption-keys-as-they-rebrand-to-el-cometa","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/09/synack-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/synack-ransomware-uses-process-doppelg-nging-technique/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/synack-ransomware-sees-huge-spike-in-activity/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"test.jpg.XbMiJQiuoh","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"INFO-4ABFA0EF.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/08/flatchestware-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/900238572409823232","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2017/august/25/DH5KChhXsAADOIu[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/08/xolzsec-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/899916577252028416","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/899537940539478016","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2017/august/25/DHvM552WsAAuDbi[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/899528477824700416","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2017/august/25/DHvDae7XoAE9usO[1].jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/08/cyron-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/899524853426008064","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2017/august/25/DHvA8CDWAAIR5er.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/analyzing-fileless-code-injecting-sorebrect-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/files/2017/06/SOREBRECT-3.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/05/uiwix-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/uiwix-ransomware-using-eternalblue-smb-exploit-to-infect-victims/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/jaff-ransomware-infected-over-100000-computers-in-just-a-few-days/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2017/05/jaff-ransomware-analysis/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/connect/blogs/jaff-new-ransomware-spread-necurs-botnet","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/jaff","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/05/jaff-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/jaff-ransomware-distributed-via-necurs-malspam-and-asking-for-a-3-700-ransom/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.talosintelligence.com/2017/05/jaff-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://rktazuzi7hbln7sy.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/01/vxlock-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/zyklon-locker-ransomware-windows-250.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/zorro-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/844538370323812353","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/zimbra-ransomware-aes-optzimbrastore.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/617874/zimbra-ransomware-written-in-python-help-and-support-topic-crypto-howtotxt/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"how.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"priest.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/zcrypt-ransomware-rsa-2048-email.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.technet.microsoft.com/mmpc/2016/05/26/link-lnk-to-ransom/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/808280549802418181","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/xrtn-ransomware-rsa-1024-gnu-privacy.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/siri_urz/status/1006833669447839745","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/xorist","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://support.kaspersky.com/viruses/disinfection/2911","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/Dfj9H66WkAEHazN.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/Dfj9G_2XkAE0ZS2.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/wildfire-locker-ransomware-aes-256-cbc.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labs.opendns.com/2016/07/13/wildfire-ransomware-gaining-momentum/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.nomoreransom.org/en/decryption-tools.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/crysis-ransomware/78775/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/crysis-ransomware-distributed-through-remote-desktop-services","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/crysis-ransomware-master-decryption-keys-released/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/crysis","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/crysis-targeting-businesses-in-australia-new-zealand-via-brute-forced-rdps/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/virus-encoder.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.welivesecurity.com/2016/11/24/new-decryption-tool-crysis-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"india.com.xtbl","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.welivesecurity.com/2014/12/22/win32virlock-first-self-reproducing-ransomware-also-shape-shifter/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/Virlock.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/08/venuslocker-ransomware-aes-256.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/venusLocker.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2016/08/venus-locker-another-net-ransomware/?utm_source=twitter&utm_medium=social","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/817851339078336513","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/vaultcrypt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/russianRansom.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"VAULT.hta","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"trun.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"xort.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"VAULT.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://restoredz4xpmuqr.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/839771195830648833","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/02/unlock26-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/839038399944224768","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/bitmessage-ransomware-aes-256-25-btc.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"YOUGOTHACKED.TXT","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Hellothere.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/09/unblockupc-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/627582/unblockupc-ransomware-help-support-topic-files-encryptedtxt/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/umbrecrypt-ransomware-aes.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.thewindowsclub.com/emsisoft-decrypter-hydracrypt-umbrecrypt-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/turkishRansom.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/821991600637313024","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/04/truecrypter-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/truecrypter-ransomware-accepts-payment-in-bitcoins-or-amazon-gift-card/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/shade","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/troldesh-ransomware-email.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/kelihos-botnet-delivering-shade-troldesh-ransomware-with-no-more-ransom-extension/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/Troldesh.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.nomoreransom.org/uploads/ShadeDecryptor_how-to_guide.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"original.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cryptorz76e7vuik.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/12/braincrypt-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/811249250285842432","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://download.bleepingcomputer.com/demonslay335/BrainCryptDecrypter.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/toxcrypt-ransomware-aes-crypto-0.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/towerweb-ransonware-100.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/618055/towerweb-ransomware-help-support-topic-payment-instructionsjpg/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.ru/2016/05/torrentlocker-ransomware-aes-cbc-2048.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.talosintelligence.com/2017/03/crypt0l0cker-torrentlocker-old-dog-new.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/804008236600934403","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/547708/torrentlocker-ransomware-cracked-and-decrypter-has-been-made/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Dateien.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/teslacrypt-4-2-released-with-quite-a-few-modifications/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.endgame.com/blog/your-package-has-been-successfully-encrypted-teslacrypt-41a-and-malware-attack-chain","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"xeyye.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"gwote.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.kaspersky.com/raknidecryptor-vs-teslacrypt/12169/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.welivesecurity.com/2016/05/18/eset-releases-decryptor-recent-variants-teslacrypt-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.talosintel.com/teslacrypt_tool/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/576600/tesladecoder-released-to-decrypt-exx-ezz-ecc-files-encrypted-by-teslacrypt/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"arquivos.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/szflocker-polish-ransomware-email.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://now.avg.com/dont-pay-the-ransom-avg-releases-six-free-decryption-tools-to-retrieve-your-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/in-dev-ransomware-forces-you-do-to-survey-before-unlocking-computer/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ThxForYurTyme.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/surprise-ransomware-aes-256.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"HOWTO.Notepad","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/Strictor.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/stampado-ransomware-1.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/the-economics-behind-ransomware-prices/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cdn.streamable.com/video/mp4/kfh3.mp4","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/stampado","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/stampado-ransomware-campaign-decrypted-before-it-started/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/sns-locker-ransomware-aes-256-066.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nyxbone.com/images/articulos/malware/snslocker/16.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nyxbone.com/malware/SNSLocker.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/08/smrss32-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/smash-ransomware-is-cute-rather-than-dangerous/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/04/pompous-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/SkidLocker.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/pompous-ransomware-dev-gets-defeated-by-backdoor/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/tilde-ransomware-aes-08.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/chinese-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/chinese-language-ransomware-makes-appearance/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/chineseRansom.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/08/shinolocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/new-educational-shinolocker-ransomware-project-released/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/760560147131408384","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/shark-ransomware-rebrands-as-atom-for-a-fresh-start/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/the-shark-ransomware-project-allows-to-create-your-own-customized-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/08/serpico-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/Serpico.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://securelist.com/blog/research/69481/a-flawed-ransomware-encryptor/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/satana-ransomware-0.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.kaspersky.com/satana-ransomware/12558/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2016/06/satana-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ausi.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/835955409953357825","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/sanctions-2017-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/sanctions-ransomware-makes-fun-of-usa-sanctions-against-russia/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/sanction-ransomware-3.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/samsam","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/03/samsam.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.sophos.com/en-us/medialibrary/PDFs/technical-papers/SamSam-The-Almost-Six-Million-Dollar-Ransomware.pdf","to_ids":true,"timestamp":"1786036383","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/samsam-ransomware-crew-made-nearly-6-million-from-ransom-payments/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-samsam-variant-requires-special-password-before-infection/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.intelsecurity.com/advanced-threat-research/content/Analysis_SamSa_Ransomware.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.talosintel.com/2016/03/samsam-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://download.bleepingcomputer.com/demonslay335/SamSamStringDecrypter.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malwarebreakdown.com/2017/03/10/finding-a-good-man/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malwarebreakdown.com/2017/03/16/sage-2-2-ransomware-from-good-man-gate","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/sadstory-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/845356853039190016","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/823925410392080385","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/801812325657440256","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/02/allyourdocuments-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/siri_urz/status/842452104279134209","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/04/rokku-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.org/threat-analysis/2016/04/rokku-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"UNLOCK.TXT","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/remindme-ransomware-2.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i.imgur.com/gV6i5SN.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/RemindMe.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/08/rektlocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://support.kaspersky.com/viruses/disinfection/4264","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/08/razy-ransomware-aes.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nyxbone.com/malware/Razy.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/Razy(German).html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/09/rarvault-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/security_response/writeup.jsp?docid=2009-041513-1400-99&tabid=2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/04/ransom32.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransoc-ransomware-extorts-users-who-accessed-questionable-content/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/ransoc-desktop-locking-ransomware-ransacks-local-files-social-media-profiles","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-ranran-ransomware-uses-encryption-tiers-political-messages/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2017/03/unit42-targeted-ransomware-attacks-middle-eastern-government-organizations-political-purposes/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/pan-unit42/public_tools/tree/master/ranran_decryption","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Agent.iih","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/bandarchor-ransomware-aes-256.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://support.kaspersky.com/us/viruses/disinfection/10556","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/04/radamant-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/radamant.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/new-radamant-ransomware-kit-adds-rdm-extension-to-encrypted-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/radamant","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"FILES.url","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/CryptoInsane/status/846181140025282561","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/raa-ransomware-aes-256-039-250.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/the-new-raa-ransomware-is-created-entirely-using-javascript/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://reaqta.com/2016/06/raa-ransomware-delivering-pony/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/07/r980-ransomware-aes-256-rsa4096-05.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://otx.alienvault.com/pulse/57976b52b900fe01376feb01/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"rtext.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/r-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/846705481741733892","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Ransomware.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/jiriatvirlab/status/803297700175286273","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.enigmasoftware.com/prismyourcomputerhasbeenlockedransomware-removal/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/09/princess-locker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2016/11/princess-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/introducing-her-royal-highness-the-princess-locker-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://hshrzd.wordpress.com/2016/11/17/princess-locker-decryptor/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"JJnY.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/04/powerware-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2016/07/unit42-powerware-ransomware-spoofing-locky-malware-family/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.carbonblack.com/2016/03/25/threat-alert-powerware-new-ransomware-written-in-powershell-targets-organizations-via-microsoft-word/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://download.bleepingcomputer.com/demonslay335/PowerLockyDecrypter.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/pan-unit42/public_tools/blob/master/powerware/powerware_decrypt.py","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/blog/research/76182/polyglot-the-fake-ctb-locker/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://support.kaspersky.com/8547","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/08/pokemongo-ransomware-aes-256.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/pokemongo-ransomware-installs-backdoor-accounts-and-spreads-to-other-drives/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/pokemonGO.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/pizzacrypts-ransomware-1.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://download.bleepingcomputer.com/BloodDolly/JuicyLemonDecoder.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"pizzacrypts.info","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.ru/2016/09/philadelphia-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"www.bleepingcomputer.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/philadelphia","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/petya","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.org/threat-analysis/2016/04/petya-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=mSqxFjZq_z4","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.thewindowsclub.com/petya-ransomware-decrypt-tool-password-generator","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://petya5koahtsf7sv.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://petya37h5tbhyvki.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-macos-patcher-ransomware-locks-data-for-good-no-way-to-recover-your-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/cybercrime/2017/02/decrypting-after-a-findzip-ransomware-infection/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/811635075158839296","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/04/padcrypt-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/798141978810732544","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/padcrypt-the-first-ransomware-with-live-support-chat-and-an-uninstaller/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/10/cryptowire-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/842342996775448576","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"log.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"file.encrypted","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://news.thewindowsclub.com/operation-global-iii-ransomware-decryption-tool-released-70341/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://arxiv.org/pdf/2102.06249.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"data.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.digital.nhs.uk/cyber-alerts/2018/cc-2542","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/free-decryption-tool-released-for-cryakl-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/the-return-of-fantomas-or-how-we-deciphered-cryakl/86511","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/11220-cryakl-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cryakl","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bartblaze.blogspot.com.co/2016/02/vipasana-ransomware-new-ransom-on-block.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/odcodc-ransomware-rsa-2048.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/images/articulos/malware/odcodc/1c.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/813762510302183424","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/odcodc.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://download.bleepingcomputer.com/BloodDolly/ODCODCDecoder.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ARCHIVO.ext","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/08/nullbyte-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-nullbyte-ransomware-pretends-to-be-the-necrobot-pokemon-go-application/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://download.bleepingcomputer.com/demonslay335/NullByteDecrypter.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/10/nuke-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/noobcrypt-ransomare-250-nzd.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/noobcrypt-ransomware-dev-shows-noobness-by-using-same-password-for-everyone/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/757267550346641408","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"id-ransomware.blogspot.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/fwosar/status/803682662481174528","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/nmoreira","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/nhtnwcuf-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/839221457360195589","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"PLEASE.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/01/netflix-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/04/nemucod-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.cisecurity.org/malware-analysis-report-nemucod-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/decryptor-released-for-the-nemucod-trojans-crypted-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/Antelox/NemucodFR","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/nemucod","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Decrypted.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/nanolocker-ransomware-aes-256-rsa-01.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://github.com/Cyberclues/nanolocker-decryptor","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ATTENTION.RTF","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/09/n1n1n1-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/831891344897482754","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/790608484303712256","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=dAVMgX8Zti4&feature=youtu.be&list=UU_TMZYaLIgjsdJMwurHAi4Q","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/815961663644008448","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/844826339186135040","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/mobef-yakes-ransomware-4-bitcoins-2000.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nyxbone.com/images/articulos/malware/mobef/0.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2016/07/unit42-cryptobit-another-ransomware-family-gets-an-update/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nyxbone.com/malware/Mobef.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"4-14-2016-INFECTION.TXT","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"IMPORTANT.README","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/mm-locker-ransomware-aes-2256-1.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/05/petya-mischa-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/petya-is-back-and-with-a-friend-named-mischa-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/mireware-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/mircop-ransomware-4848.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/Mircop.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/instruction-less-ransomware-mircop-channels-guy-fawkes/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.avast.com/ransomware-decryption-tools#!","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/618457/microcop-ransomware-help-support-lock-mircop/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/meteoritan-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/844614889620561924","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/siri_urz/status/840913419024945152","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/09/jokefrommars-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/MarsJoke-Ransomware-Mimics-CTB-Locker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.ru/blog/issledovaniya/29376/polyglot-the-fake-ctb-locker/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/04/maktub-locker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.org/threat-analysis/2016/03/maktub-locker-beautiful-and-dangerous/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/04/magic-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ReadMe1.TXT","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/macandchess-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=9nJv_PN2m1Y","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/12/m4n1f3sto-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/jiriatvirlab/status/808015275367002113","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/04/lowlevel04-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/lortok-ransomware-aes-256-5.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/locky","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/02/locky.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/locky-ransomware-switches-to-egyptian-mythology-with-the-osiris-extension/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://nakedsecurity.sophos.com/2016/10/06/odin-ransomware-takes-over-from-zepto-and-locky/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/new-locky-ransomware-spotted-in-the-brazilian-underground-market-uses-windows-script-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/new-locky-version-adds-the-zepto-extension-to-encrypted-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://i3ezlvkoi7fwyood.onion","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://6dtxgqam4crv6rr6.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/09/locklock-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/626750/locklock-ransomware-locklock-help-support/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/04/locker-ransomware-2015.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/577246/locker-ransomware-support-and-help-topic/page-32#entry3721545","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/lltp-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-lltp-ransomware-appears-to-be-a-rewritten-venus-locker/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"LEAME.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/lk-encryption-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/845183290873044994","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Linux.Encoder","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://labs.bitdefender.com/2015/11/linux-ransomware-debut-fails-on-predictable-encryption-key/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.2-spyware.com/remove-lick-ransomware-virus.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/842404866614038529","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/lechiffre-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.org/threat-analysis/2016/01/lechiffre-a-manually-run-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/lechiffre","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/lanran-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/847689644854595584","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/kryptolocker-ransomware-aes-256.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/kratoscrypt-ransomware-aes-256-0.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/746090483722686465","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/kozy.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/617802/kozyjozy-ransomware-help-support-wjpg-31392e30362e32303136-num-lsbj1/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/KozyJozy.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"kozy.jozy","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"selectedkozy.jozy","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/08/korean-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/koreanRansom.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/04/kimcilware-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/the-kimcilware-ransomware-targets-web-sites-running-the-magento-platform/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.fortinet.com/post/kimcilware-ransomware-how-to-decrypt-encrypted-files-and-who-is-behind-it","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/10/killerlocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/782232299840634881","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/keyholder-ransomware-xor-cfb-cipher.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/559463/keyholder-ransomware-support-and-help-topic-how-decryptgifhow-decrypthtml","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"READ.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/03/keranger-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.welivesecurity.com/2016/03/07/new-mac-ransomware-appears-keranger-spread-via-transmission-app/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://news.drweb.com/show/?i=9877&lng=en&c=5","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/09/kawaiilocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://safezone.cc/resources/kawaii-decryptor.195/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/04/johnycryptor-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/jobcrypter-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/828914052973858816","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://forum.malekal.com/jobcrypter-geniesanstravaille-extension-locked-crypto-ransomware-t54381.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/jobcrypter.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"fichiers.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/jigsaw-ransomware-makes-victims-play-a-game","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/connect/blogs/jigsaw-ransomware-saw-movie-deletes-files-hour","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-jigsaw-ransomware-decrypted/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/jigsaw","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/04/jigsaw-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/795819556166139905","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.helpnetsecurity.com/2016/04/20/jigsaw-crypto-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/jigsaw-ransomware-decrypted-will-delete-your-files-until-you-pay-the-ransom/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"nemo-hacks.at.sigaint.org","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/822509105487245317","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://download.bleepingcomputer.com/demonslay335/DoNotOpenDecrypter.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/the-rise-and-fall-of-encryptor-raas/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/RaaS.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"raas.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/757873976047697920","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/11/iransom-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/796134264744083460","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://download.bleepingcomputer.com/Nathan/StopPirates_Decrypter.exe","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/817085367144873985","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/hydracrypt-ransomware-aes-256-cbc-rsa.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.malware-traffic-analysis.net/2016/02/03/index2.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/803288396814839808","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/holycrypt-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/new-python-ransomware-called-holycrypt-discovered/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/08/hitler-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/jiriatvirlab/status/825310545800740864","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/development-version-of-the-hitler-ransomware-discovered/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.ru/2016/05/hi-buddy-ransomware-aes-256-0.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/hibuddy.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/herbst-autumn-ransomware-aes-256-01.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.fortinet.com/2016/06/03/cooking-up-autumn-herbst-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/09/helpdcfile-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"dcfile.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/11/heimdall-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/heimdall-open-source-php-ransomware-targets-web-servers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/09/hddcryptor-ransomware-mbr.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"blog.trendmicro.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.linkedin.com/pulse/mamba-new-full-disk-encryption-ransomware-family-member-marinho","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://diskcryptor.net","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2017/03/happydayzz-blackjocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/847114064224497666","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/12/hackedlocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/806878803507101696","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/angler-shift-ek-landscape-new-crytpo-ransomware-activity/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.com/2016/05/gomasom-ransonware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.ru/2016/05/gnl-locker-ransomware-gnl-locker-ip.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/611342/gnl-locker-support-and-help-topic-locked-and-unlock-files-instructionshtml/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/07/purge-kind-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/the-globe-ransomware-wants-to-purge-your-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/ni_fi_70/status/796353782699425792","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/05/ghostcrypt-ransomware-aes-256-2-bitcoins.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/614197/ghostcrypt-z81928819-help-support-topic-read-this-filetxt/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://download.bleepingcomputer.com/demonslay335/GhostCryptDecrypter.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-web-profile-fsociety-flocker-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyberint.com/blog/research/fsociety-funksec-collaborate-on-future-attacks/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/fsociety","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/08/fsociety-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/siri_urz/status/795969998707720193","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/new-fsociety-ransomware-pays-homage-to-mr-robot/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/628199/fs0ciety-locker-ransomware-help-support-fs0cietyhtml/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://flock4cvoeqm4c62gyohvmncx6ck2e7ugvyqgyxqtrumklhd5ptwzpqd.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/12/roga-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/812135608374226944","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/842302481774321664","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"pronk.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"help-file-decrypt.enc","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/09/flyper-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/773771485643149312","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/01/bleedgreen-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/jiriatvirlab/status/836616468775251968","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/03/filefrozr-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/rommeljoven17/status/846973265650335744","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/09/fenixlocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/fwosar/status/777197255057084416","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/fenixlocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/fantom-ransomware-encrypts-your-files-while-pretending-to-be-windows-update/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/812312402779836416","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/fakben-team-ransomware-aes-256-1505.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.fortinet.com/post/fakben-team-ransomware-uses-open-source-hidden-tear-code","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/new-fairware-ransomware-targeting-linux-computers/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/839022018230112256","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/05/enigma-ransomware-aes-128-0.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/the-enigma-ransomware-targets-russian-speaking-users/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"encr.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"enigma.hta","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/11/encryptojjs-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"recover.enc","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Encoder.xxxx","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://vms.drweb.ru/virus/?_is=1&i=8747343","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/el-polocker-ransomware-aes-450-aud.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/845652520202616832","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BroadAnalysis/status/845688819533930497","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/747031171347910656","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.filedropper.com/decrypter_1","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/hiddentear-2.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.utkusen.com/blog/dealing-with-script-kiddies-cryptear-b-incident.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/09/dxxd-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-dxxd-ransomware-displays-legal-notice-before-users-login/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/627831/dxxd-ransomware-dxxd-help-support-readmetxt/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/794108322932785158","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/03/donotchange-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/643330/donotchange-ransomware-id-7es642406cry-do-not-change-the-file-namecryp/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"id-7ES642406.cry","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/08/domino-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/the-curious-case-of-the-domino-ransomware-a-windows-crack-and-a-cow/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/Domino.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/822500056511213568","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.org/threat-analysis/2016/02/dma-locker-strikes-back/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.org/threat-analysis/2016/02/dma-locker-a-new-ransomware-but-no-reason-to-panic/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://drive.google.com/drive/folders/0Bzb5kQFOXkiSMm94QzdyM3hCdDg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/hasherezade/dma_unlocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"start.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"decrypting.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"cryptinfo.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/revoyem-dirtydecrypt-ransomware-doc.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/752586334527709184","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/829727052316160000","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Readme0.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/08/detoxcrypto-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/new-detoxcrypto-ransomware-pretends-to-be-pokemongo-or-uploads-a-picture-of-your-screen/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/10/cryptodemo-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/798573300779745281","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/dedcryptor-ransomware-aes-256rsa-2.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/DEDCryptor.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/617395/dedcryptor-ded-help-support-topic/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.malwareremovalguides.info/decrypt-files-with-decrypt_mblblock-exe-decrypt-protect/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JaromirHorejsi/status/815555258478981121","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/09/cyber-splitter-vbs-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/806758133720698881","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/778871886616862720","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/aaaddress1/my-Little-Ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/aaaddress1/my-Little-Ransomware/tree/master/decryptoTool","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/ctb-locker-for-websites-04.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/eyecatchup/Critroni-php","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://thisissecurity.net/2016/02/26/a-lockpicking-exercise/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/ctb-faker-ransomware-008.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/09/crypy-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/ctb-faker-ransomware-does-a-poor-job-imitating-ctb-locker/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/cryptxxx-ransomware-learns-samba-other-new-tricks-with-version3100","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/cryptxxx-updated-to-version-3-0-decryptors-no-longer-work/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blogs.cisco.com/security/cryptxxx-technical-deep-dive","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/cryptxxx2-ransomware-authors-strike-back-against-free-decryption-tool","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/connect/blogs/cryptxxx-ransomware-evolves-v30","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-spotlight/2016/05/cryptxxx-ransomware-now-steals-more/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/kaspersky-releases-decryptor-for-cryptxxx-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/cryptxxx-unveiled/74731/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/cryptxxx","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/04/cryptxxx-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/virus-removal/cryptxxx-ransomware-help-information","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://apvc24autvavxuc6.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.virustotal.com/en/file/45317968759d3e37282ceb75149f627d648534c5b4685f6da3966d8f6fca662d/analysis/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blogs.technet.microsoft.com/mmpc/2015/01/13/crowti-update-cryptowall-3-0/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"TOR.URL","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"INSTRUCTION.URL","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://news.softpedia.com/news/new-open-source-linux-ransomware-shows-infosec-community-divide-508669.shtml","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/04/cryptotorlocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/565020/new-cryptotorlocker2015-ransomware-discovered-and-easily-decrypted/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/cryptoshocker-ransomware-aes-200.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/617601/cryptoshocker-ransomware-help-and-support-topic-locked-attentionurl/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ATTENTION.url","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/821992610164277248","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"INMEDIATAMENTE.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/cryptoroger-aes-256-0.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/new-ransomware-called-cryptoroger-that-appends-crptrgr-to-encrypted-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/817672617658347521","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/cryptomix-ransomware-exploits-sick-children-to-coerce-payments/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.coveware.com/blog/cryptomix-ransomware-exploits-cancer-crowdfunding","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1072227523755470848","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-backup-cryptomix-ransomware-variant-actively-infecting-users/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/mole66-cryptomix-ransomware-variant-released/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/system-cryptomix-ransomware-variant-released/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/work-cryptomix-ransomware-variant-released/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/test-cryptomix-ransomware-variant-released/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/xzzx-cryptomix-ransomware-variant-released/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/0000-cryptomix-ransomware-variant-released/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-empty-cryptomix-ransomware-variant-released/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/804009831518572544","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.pl/en/news/single/technical-analysis-of-cryptomixcryptfile2-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/CryptoMix.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DuFQ4FdWoAMy7Hg.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"INSTRUCTION.TXT","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"techie.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"keemail.me","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"consultant.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"yahooweb.co","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"techmail.info","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"post.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"dr.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/782890104947867649","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/839747940122001408","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://reaqta.com/2016/04/uncovering-ransomware-distribution-operation-part-2/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/executive-perspective/2014/08/your-locker-of-information-for-cryptolocker-decryption.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2017/07/cryptojoker-2017-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"GetYouFiles.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/04/cryptohost-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/cryptohost-decrypted-locks-files-in-a-password-protected-rar-file/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/05/cryptofortress-ransomware-aes-256-1.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/search?q=CryptoFinancial","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://nakedsecurity.sophos.com/2016/07/13/ransomware-that-demands-money-and-gives-you-back-nothing/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.talosintel.com/2016/07/ranscam.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/04/cryptodefense-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"DECRYPT.URL","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/04/cryptobit-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://news.softpedia.com/news/new-cryptobit-ransomware-could-be-decryptable-503239.shtml","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.pandasecurity.com/mediacenter/panda-security/cryptobit/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"OKSOWATHAPPENDTOYOURFILES.TXT","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/cryptfile2-ransomware-rsa-email.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"usa.com.scl","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/jiriatvirlab/status/802554159564062722","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/regist-crypt38-ransomware-aes-1000-15.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.fortinet.com/2016/06/17/buggy-russian-ransomware-inadvertently-allows-free-decryption","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://download.bleepingcomputer.com/demonslay335/Crypt38Keygen.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/images/articulos/malware/crypren/0.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/Crypren.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/pekeinfo/DecryptCrypren","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/crypmic-ransomware-aes-256.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/crypmic-ransomware-wants-to-follow-cryptxxx/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/the-crylocker-ransomware-communicates-using-udp-and-stores-data-on-imgur-com/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/cryfile-ransomware-100.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Instructionaga.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"SHTODELATVAM.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://virusinfo.info/showthread.php?t=185396","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://support.kaspersky.com/viruses/disinfection/8547","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/04/coverton-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/paying-the-coverton-ransomware-may-not-get-your-data-back/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/794956809866018816","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.org/threat-analysis/2015/12/inside-chimera-ransomware-the-first-doxingware-in-wild/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/chimera-ransomware-decryption-keys-released-by-petya-devs/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/cerber-renames-itself-as-crbr-encryptor-to-be-a-pita/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://community.rsa.com/community/products/netwitness/blog/2016/11/04/the-evolution-of-cerber-v410","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.org/threat-analysis/2016/03/cerber-ransomware-new-but-mature/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"README.hta","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/09/cry-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/625820/central-security-treatment-organization-ransomware-help-topic-cry-extension/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/05/buyunlockcode-ransomware-rsa-1024.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"BUYUNLOCKCODE.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/05/bucbi-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2016/05/unit42-bucbi-ransomware-is-back-with-a-ukrainian-makeover/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/845199679340011520","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/ransomware-explosion-continues-cryptflle2-brlock-mm-locker-discovered","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/821831437884211201","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/images/articulos/malware/brazilianRansom/0.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/brazilianRansom.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"MENSAGEM.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/05/booyah-ransomware-1-2-btc.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/614456/bloccato-ransomware-bloccato-help-support-leggi-questo-filetxt/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/06/silentshade-ransomware-blackshades.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nyxbone.com/malware/BlackShades.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"YourID.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/ransomware-007867.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://download.bleepingcomputer.com/demonslay335/BitStakDecrypter.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/05/bitcryptor-ransomware-aes-256-1-btc.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://noransom.kaspersky.com/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/New-Bart-Ransomware-from-Threat-Actors-Spreading-Dridex-and-Locky","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://phishme.com/rockloader-downloading-new-ransomware-bart/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://now.avg.com/barts-shenanigans-are-no-match-for-avg/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"recover.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-bandarchor-ransomware-variant-spreads-via-malvertising-on-adult-sites/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://reaqta.com/2016/03/bandarchor-ransomware-still-active/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"decryptservice.info","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://0xc1r3ng.wordpress.com/2016/06/24/bakso-crypt-simple-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/760482299007922176","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/images/articulos/malware/badblock/5.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/BadBlock.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/badblock","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/828902907668000770","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/autolocky","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://decrypter.emsisoft.com/download/apocalypsevm","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.emsisoft.com/2016/06/29/apocalypse-ransomware-which-targets-companies-through-insecure-rdp/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/apocalypse","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"dr.compress","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ransomware.attack","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/842047409446387714","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/844531418474708993","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/ambaransomware-removal/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/benkow_/status/747813034006020096","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"riseup.net","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwarebread/status/804714048499621888","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/decrypted-alpha-ransomware-accepts-itunes-gift-cards-as-payment/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://download.bleepingcomputer.com/demonslay335/AlphaDecrypter.zip","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/new-alma-locker-ransomware-being-distributed-via-the-rig-exploit-kit/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://info.phishlabs.com/blog/alma-ransomware-analysis-of-a-new-ransomware-threat-and-a-decrypter","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://news.softpedia.com/news/cerber-devs-create-new-ransomware-called-alfa-506165.shtml","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/new-alfa-or-alpha-ransomware-from-the-same-devs-as-cerber/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/al-namrood","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/796079699478900736","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/forums/t/614025/8lock8-help-support-topic-8lock8-read-ittxt/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"IT.txt","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/7ev3n-HONE$T.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=RDNbH5HDO1E&feature=youtu.be","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/hasherezade/malware_analysis/tree/master/7ev3n","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"BACK.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/777","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ninja.gaiver","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.nyxbone.com/malware/CryptoHasYou.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"LOCKED.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://gist.github.com/rain-1/989428fa5504f378b993ee6efbc0b168","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/09/erebus-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-E9WbSxLgaYs/WGn8gC6EfvI/AAAAAAAAC8A/bzd7uP9fcxU6Fyq1n6-9ZbUUGWlls9lrwCLcB/s1600/note-txt_2.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/fs0ciety-locker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-nskzYgbg7Ac/V_jpJ3GApqI/AAAAAAAABos/EbG_-BLDPqA9bRVOWdzHjPnDWFiHYlsJwCLcB/s1600/ransom-note.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/the-week-in-ransomware-october-14-2016-exotic-lockydump-comrade-and-more/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/kostya-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-4YmIkWfYfRA/V_lAALhfSvI/AAAAAAAABpE/Dj35aroKXSwbLXrSPqGCzbvhsTNHdsbAgCLcB/s1600/kostya.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-E_MI2fT33J0/V_k_9Gjkj4I/AAAAAAAABpA/-30UT5HhPAAR9YtVkFwgrYqLIdWPprZ9gCLcB/s1600/lock-screen.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/globe2-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-MYI30xhrcZU/V_qcDyASJsI/AAAAAAAABpU/Pej5jDk_baYBByLx1cXwFL8LBiT8Vj3xgCLcB/s1600/note22.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/comrade-circle-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-PdYtm6sRHAI/WAEngHQBg_I/AAAAAAAABsA/nh8m7__b0wgviTEBahyNYK4HFhF1v7rOQCLcB/s1600/icon-stalin-2.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-hRoC-UFr-7o/V__tAEFuZWI/AAAAAAAABrQ/xDawlulx8Bg4uEtX4bU2ezPMY-x6iFiuQCLcB/s1600/note-1ch.JPG","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-MmzOC__9qPA/V__t2kNX-SI/AAAAAAAABrc/t8ypPa1jCIUbPfvR7UGbdGzdvKrbAv_DgCLcB/s1600/wallpaper.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/785533373007728640","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/deadly-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-XZiiaCYM9Bk/WAUsUkrCJEI/AAAAAAAABtk/z-sMHflz3Q8_aWc-K9PD0N5TGkSGwwQnACLcB/s1600/note-html.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/enigma-2-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://kf2uimw5omtgveu6.onion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"A.RSA","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.torproject.org/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://ru.wikipedia.org/wiki/Advanced_Encryption_Standard)","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pastebin.com/HuK99Xmj","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/Antelox/status/785849412635521024","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/venis-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-IFEOWjw-aaQ/WAXTu9oEN4I/AAAAAAAABuY/APqBiaHn3pAX8404Noyuj7tnFJDf2m_XACLcB/s1600/note1.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/ncrypt-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-k7T79DnBk8w/WBc67QXyjWI/AAAAAAAAB3w/QbA-E9lYdSMOg3PcG9Vz8fTc_OhmACObACLcB/s1600/note-html.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Trojan.Encoder","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyber.nj.gov/threat-profiles/ransomware-variants/apt-ransomware-v2","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/ws-go-ransonware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-NfRePJbfjbY/WAe5LHFsWaI/AAAAAAAABwE/1Pk116TDqAYEDYvnu2vzim1l-H5seW9mQCLcB/s1600/note.png","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/apt-ransomware-2.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-VTUhk_Py2FA/WAVCO1Yn69I/AAAAAAAABuI/N71wo2ViOE0UjrIdbeulBRTJukHtA2TdACLcB/s1600/ransom-note.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/exotic-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyber.nj.gov/threat-profiles/ransomware-variants/exotic-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-october-14-2016-exotic-lockydump-comrade-and-more/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/eviltwins-exotic-ransomware-targets-executable-files/","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-SMXOoWiGkxw/WAaGOMdecrI/AAAAAAAABu8/S-YjlWlPKbItSN_fe8030tMDHWzouHsIgCLcB/s1600/note2.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-2QxJ3KCRimI/WAaCcWcE2uI/AAAAAAAABus/9SGRY5iQT-ITfG_JrY7mn6-PUpQrSKg7gCLcB/s1600/note1-2.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-WJYR7LkWHWY/WAaCYScljOI/AAAAAAAABuo/j18AGhzv7WUPb2r4HWkYm4TPgYw9S5PUwCLcB/s1600/note1-1.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"random.exotic","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/xtplocker-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"gmx.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"www.coinbase.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://nyxbone.com/malware/Anubis.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/anubis-ransomware.html","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-0YMsPH5WuTk/WAepI4BnqZI/AAAAAAAABv0/yXt4tdrmmAIf-N9KUmehY6mK1kTV-eFFQCLcB/s1600/note-wal2.jpg","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.fortinet.com/2016/10/19/japanlocker-an-excavation-to-its-indonesian-roots","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://github.com/fortiguard-lion/schRansomwareDecryptor/blob/master/schRansomwarev1_decryptor.php","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.cyber.nj.gov/threat-profiles/ransomware-variants/japanlocker","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/japanlocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-sdlDK4OIuPA/WAehWZYHaMI/AAAAAAAABvc/TcAcLG2lw10aOFY3FbP1A5EuLjL6LR62ACLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=Xe30kV4ip8w","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/click-me-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-1zgO3-bBazs/WAkPYqXuayI/AAAAAAAABxI/DO3vycRW-TozneSfRTdeKyXGNEtJSMehgCLcB/s1600/all-images.gif","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malwarebreakdown.com/2017/03/02/rig-ek-at-92-53-105-43-drops-asn1-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/asn1-encoder-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-5gZpxeEWqZg/WBeNnEP9GzI/AAAAAAAAB4g/ELCCp88whLMI6CzpGTjlxbmXBMFIKhwtwCLcB/s1600/onion-site.JPG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/789882488365678592","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/lock93-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-S6M83oFxSdM/WA4_ak9WATI/AAAAAAAABx0/3FL3q21FdxMQvAgrr2FORQIaNtq2-P2jACLcB/s1600/note2.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-WuD2qaaNIb0/WA4_g_FnIfI/AAAAAAAABx4/pn6VNqMXMzI_ryvKUruY3ctYtzomT1I4gCLcB/s1600/note3.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/790334746488365057","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/angryduck-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-k3s85Fx9N_E/WBIfuUNTMmI/AAAAAAAAByM/rQ10tKuXTlEJfLTOoBwJPo7rhhaiK2OoQCLcB/s1600/screen-lock.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/811940037638111232","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/winnix-cryptor-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"HowToBuyBitcoins.info","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"CoinMama.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"BTCDirect.eu","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"CoinCafe.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"LocalBitcoins.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"13gYXFxpzm7hAd4esdnJGt9JvYqyD1Y6by","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/846241982347427840","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.avast.com/hucky-ransomware-a-hungarian-locky-wannabe","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/hucky-ransomware-hungarian-locky.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-lLZZBScC27U/WBmkDQzl9FI/AAAAAAAAB5Y/gozOy17Yv0EWNCQVSOXn-PkTccYZuMmPQCLcB/s1600/note-bmp_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"instructions.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"utasitasok.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"mail2tor.com","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"Https://hu.wikipedia.org/wiki/Advanced_Encryption_Standard","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"Https://hu.wikipedia.org/wiki/RSA-elj\u00e1r\u00e1s","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/-proof-of-concept-cryptowire-ransomware-spawns-lomix-and-ultralocker-families/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/791554654664552448","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/cryptowire-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-b0QiEQec0Pg/WBMf2HG6hjI/AAAAAAAABz8/BtN2-INZ2KQ4W2_iPqvDZTtlA0Aq_4gVACLcB/s1600/Screenshot_2.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-vIMgkn8WVJM/WBJAxkbya7I/AAAAAAAABys/tCpaTOxfGDw8A611gudDh46mhZT70dURwCLcB/s1600/lock-screen.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/in-dev-ransomware-forces-you-do-to-survey-before-unlocking-computer/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/fileice-ransomware-survey.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-GAPCc3ITdQY/WBMTmJ4NaRI/AAAAAAAABzM/XPbPZvZ8vbUrOWxtwPmfHFJiNT_2gfaOgCLcB/s1600/fileice-source.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-2AlvtcvdyUY/WBMVptG_V5I/AAAAAAAABzc/1KvAMeDmY2w9BN9vkqZO8LWkBu7T9mvDACLcB/s1600/ThxForYurTyme.JPG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-72ECd1vsUdE/WBMSzPQEgzI/AAAAAAAABzA/i8V-Kg8Gstcn_7-YZK__PDC2VgafWcfDgCLcB/s1600/survey-screen.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/encryptile-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-_jxt6kCRnwM/WBNf7mi92nI/AAAAAAAAB0g/homx8Ly379oUKAOIhZU6MxCiWX1gA_TkACLcB/s1600/wallp.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/630835/esmeralda-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/esmeralda-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-vaWu8OjSiXE/WBzkLBdB8DI/AAAAAAAAB_Y/k8vvtYEIdTkFJhruRJ6qDNAujAn4Ph-xACLcB/s1600/esmeralda-lock_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/792796055020642304","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/alcatraz-locker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-y5a6QnjAiv0/WBcMKV0zDDI/AAAAAAAAB3c/ytOQHJgmy30H_jEWPcfht7RRsh4NhcrvACLcB/s1600/Screenshot_2.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-b0-Uvnz703Q/WBcMGkZqtwI/AAAAAAAAB3Y/a6clIjdp_tI2T-OE_ykyjvB2qNY3gqWdQCLcB/s1600/Screenshot_1.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/791576159960072192","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/ifn643-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-JuBZKpEHV0Q/WBYNHFlW7pI/AAAAAAAAB20/z0DPYA_8l6U8tB6pbgo8ZwyIJRcrIVy2ACLcB/s1600/Note1.JPG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/791557636164558848","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/onyx-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-cukkC4KAhZE/WBY1jJbcQoI/AAAAAAAAB3I/p8p-iNQRnQwnP6c6H77h_SHMQNAlkJ1CgCLcB/s1600/onyx.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Jack.Pot","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-october-28-2016-locky-angry-duck-and-more/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/791639214152617985","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/jackpot-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-oaElZvUqbfo/WBUOGdD8unI/AAAAAAAAB1w/Ya1_qq0gfa09AhRddUITQNRxKloXgD_BwCLcB/s1600/wallp.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/791943837874651136","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/masterbuster-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-gqEyoqXbZnE/WBXoF5bPZZI/AAAAAAAAB2U/YGpgIdjXyQQeDnwc9PlJs37YWtWTnH_wgCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"CreatesReadThisFileImportant.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://goo.gl/forms/VftoBRppkJ","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/ishtar-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ISHTAR.DATA","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://bitmsg.me/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"3ctSgr67iciT43rRNmHdHPAYBBK7","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1050117756094476289","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/rotorcrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"INFO.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"TUTAMAIL.COM","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/zerocrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-0AGEY4vAlA0/WBi_oChzFNI/AAAAAAAAB4w/8PrPRfFU30YFWCwHzqnsx4bYISVNFyesQCLcB/s1600/note.PNG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/russian-globe-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/winrarer-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-zb0TP0wza7I/WBpShN0tCMI/AAAAAAAAB64/oTkSFwKFVx8hY1rEs5FQU6F7oaBW-LqHwCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/encryptss77-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://virusinfo.info/showthread.php?t=201710","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/dummyencrypter-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-2rS0Yq27wp0/WBtKfupZ2sI/AAAAAAAAB8I/0MR-9Xx0n-0zV_NBSScDCiYTp1KH-edtACLcB/s1600/Lockscreen_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-kangaroo-ransomware-not-only-encrypts-your-data-but-tries-to-lock-you-out-of-windows/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/kangaroo-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-1jyI1HoqJag/WBzj9SLvipI/AAAAAAAAB_U/_sp8TglWEPQphG8neqrztfUUIjcBbVhDwCLcB/s1600/kangaroo-lock_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Recovery.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"filename.Instructions","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/btclocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/--7M0dtKhOio/WBxJx1PflYI/AAAAAAAAB-g/DSdMjLDLnVwwaMBW4H_98SzSJupLYm9WgCLcB/s1600/note_2.PNG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/hollycrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-PdtXGwSTn24/WBxIoomzF4I/AAAAAAAAB-U/lxTwKWc7T9MJhUtcRMh1mn9m_Ftjox9XwCLcB/s1600/note_2.PNG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/794444032286060544","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/gremit-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/11-4-16/CwZubUHW8AAE4qi[1].jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/794077145349967872","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/zscreenlocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/new-serpent-ransomware-targets-danish-speakers","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-november-4th-2016-cerber-paydos-alcatraz-locker-and-more/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ransomware-goes-retro-with-paydos-and-serpent-written-as-batch-files/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/paydos-ransomware-serpent.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/fucksociety-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.ru/2016/05/remindme-ransomware-2.html\\","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/795630452128227333","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.tripwire.com/state-of-security/security-data-protection/cyber-security/november-2016-month-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/cerbertear-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-ftA6aPEXwPM/WCDY3IiSq6I/AAAAAAAACCU/lnH25navXDkNccw5eQL9fkztRAeIqDYdQCLcB/s1600/note111.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/blog/research/76558/the-first-cryptor-to-exploit-telegram/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2016/11/telecrypt-the-ransomware-abusing-telegram-api-defeated/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malwarebytes.app.box.com/s/kkxwgzbpwe7oh59xqfwcz97uk0q05kp3","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.securityweek.com/telecrypt-ransomwares-encryption-cracked","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/telecrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-UFksnOoE4Ss/WCRUNbQuqyI/AAAAAAAACFI/Gs3Gkby335UmiddlYWJDkw8O-BBLt-BlQCLcB/s1600/telegram_rans.gif","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/796083768155078656","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/paysafegen-german-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-r2kaNLjBcEk/WCNCqrpHPZI/AAAAAAAACEE/eFSWuu4mUZoDV5AnduGR4KxHlFM--uIzACLcB/s1600/lock-screen.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://forum.drweb.com/index.php?showtopic=315142","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/kolobo-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomware.wiki/tag/kolobo/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://researchcenter.paloaltonetworks.com/2015/09/updated-pclock-ransomware-still-comes-up-short/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/suppteam-ransomware-sysras.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/old-cryptolocker-copycat-named-pclock-resurfaces-with-new-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/wickedlocker-ht-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-CTLT300bjNk/WCg9mrJArSI/AAAAAAAACGk/weWSqTMVS9AXdxJh_SA06SOH4kh2VGW1gCLcB/s1600/note_2.PNG.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-november-18th-2016-crysis-cryptoluck-chip-and-more/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/researcher-finds-the-karma-ransomware-being-distributed-via-pay-per-install-network/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/karma-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/k/karma-ransomware/ransom-note.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/nemesis","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/829353444632825856","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/crypton-ransomware-is-here-and-its-not-so-bad-/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/crypton","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/crypton-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-2fAMkigwn4E/WCs1vKiB9UI/AAAAAAAACIs/_kgk8U9wfisV0MTYInIbArwL8zgLyBDIgCLcB/s1600/note-eng.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://k7kzrgcoxsjm7fujj5votltw44vhidneye2dkzcnrw7k7gihhpxmctqd.onion/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"maria.lopez","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"tom.cruz","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"julia.crown","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwareforme/status/798258032115322880","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.bleepingcomputer.com/news/security/cryptoluck-ransomware-being-malvertised-via-rig-e-exploit-kits/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/cryptoluck-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-tCYSY5fpE5Q/WDLLZssImkI/AAAAAAAACMg/7TmWPW3k4jQuGIYZN_dCxcSGcY_c4po9wCLcB/s1600/note3_2.PNG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-skwh_-RY50s/WDK2XLhtt3I/AAAAAAAACL0/CaZ0A_fl2Zk-YZYU9g4QCQZkODpicbXpQCLcB/s1600/note_2.PNG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/798268218364358656","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/angela-merkel-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-QaJ-Z27tL7s/WDCvwYY2UVI/AAAAAAAACKg/swpf1eKf1Y8oYIK5U8gbfi1H9AQ3Q3r8QCLcB/s1600/angela-merkel.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GrujaRS/status/1072139616910757888","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=qjoYtwLx2TI","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-november-23rd-2018-stop-dharma-and-more/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/1064061275863425025","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/1060825783197933568","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1059940414147489792","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1059521042383814657","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/1038680437508501504","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1049313390097813504","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-bip-dharma-ransomware-variant-released/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-cmb-dharma-ransomware-variant-released/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/kaspersky-releases-decryptor-for-the-dharma-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/dharma-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DuEBIMBW0AANnGW.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DrWqLWzXgAc4SlG.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/Dmof_FyXsAEJmgQ.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/Dmof_FiXsAAAvTN.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/d/dharma/cmb/hta-ransom-note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ENCRYPTED.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Info.hta","to_ids":true,"timestamp":"1786036382","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://localbitcoins.com/buy_bitcoins","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.coindesk.com/information/how-can-i-buy-bitcoins/\\nAttention!\\nDo","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://localbitcoins.com/buy_bitcoins\\nAlso","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"420blaze.it","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"firemail.cc","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/rig-e-exploit-kit-now-distributing-new-chip-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://malware-traffic-analysis.net/2016/11/17/index.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/chip-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-OvB9TMJoimE/WC9QXRPFNwI/AAAAAAAACJU/iYcCC9tKvGIu4jH2bd6xLvmO7KMVVCLdgCLcB/s1600/note_2.PNG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/799388289337671680","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/shelllocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-0N1ZUh4WcxQ/WDCfENY1eyI/AAAAAAAACKE/_RVIxRCwedMrD0Tj9o6-ew8u3pL0Y5w8QCLcB/s1600/lock-note2.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-nagini-ransomware-sics-voldemort-on-your-files/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.co.il/2016/09/nagini-voldemort-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-qJHhbtoL1Y4/V-lOClxieEI/AAAAAAAABis/IbnVAY8hnmEfU8_iU1CgQ3FWeX4YZOkBACLcB/s1600/Nagini.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"voldemort.horcrux","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-donald-trump-ransomware-tries-to-build-walls-around-your-files/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-RwJ6R-uvYg0/V-qfeRPz7GI/AAAAAAAABi8/7x4MxRP7Jp8edbTJqz4iuEye0q1u5k3pQCLcB/s1600/donald-trump-ransomware.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://id-ransomware.blogspot.co.il/2016/09/donald-trump-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/vindowslocker-ransomware-mimics-tech-support-scam-not-the-other-way-around/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/800729944112427008","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://rol.im/VindowsUnlocker.zip","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://malwarebytes.app.box.com/s/gdu18hr17mwqszj3hjw5m3sw84k8hlph","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/vindowslocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-61DcGSFljUk/WDM2UpFZ02I/AAAAAAAACMw/smvauQCvG3IPHOtEjPP4ocGKmBhVRBv-wCLcB/s1600/lock-note.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/10/airacrop-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/nmoreira-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-4HNc9S8SY4I/WBMkpdKyDsI/AAAAAAAAB0I/udESgro7YB4pF98Dv2KrrecyymFGsvV2QCLcB/s1600/note.JPG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-_i9AjhlvjB8/WDVuLKBnmlI/AAAAAAAACOA/xISXMTBLMbEH4PBS35DQ416woPpkuiVvQCLcB/s1600/note-2.PNG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/virus-removal/threat/ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/crypute-ransomware-m0on.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-8-8X7Nd1MYs/WDSZN6NIT1I/AAAAAAAACNg/ltc7ppfZZL0vWn8BV3Mk9BVrdmJbcEnpgCLcB/s1600/222.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/801503401867673603","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/ozozalocker","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/ozozalocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-r-vBnl-wLwo/WDg7fHph9BI/AAAAAAAACRc/VuMxWa1nUPIGHCzhCf2AyL_uc7Z9iB6MACLcB/s1600/note_2.PNG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/--jubfYRaRmw/WDaOyZXkAaI/AAAAAAAACQE/E63a4FnaOfACZ07s1xUiv_haxy8cp5YCACLcB/s1600/ozoza2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/siri_urz/status/801815087082274816","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/lomix-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-nXv88GxxOvQ/WE1gqeD3ViI/AAAAAAAACf4/wcVwQ9Pi_JEP2iWNHoBGmeXKJFsfwmwtwCLcB/s1600/Lomix.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/jiriatvirlab/status/801910919739674624","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/cockblocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/--45C2Cr8sXc/WDiWLTvW-ZI/AAAAAAAACSA/JnJNRr8Kti0YqSnfhPQBF2rsFf-au1g9ACLcB/s1600/Cockblocke.gif","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/801486420368093184","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/07/stampado-ransomware-1.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/thanksgiving-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-2dC_gQTed4o/WDxRSh_R-MI/AAAAAAAACT4/yWxzCcMqN_8GLjd8dOPf6Mw16mkbfALawCLcB/s1600/lblMain.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/renlocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-281TI8xvMLo/WDw2Nl72OsI/AAAAAAAACTk/nT_rL0z-Exo93FzoOXnyaFgQ7wPe0r7IgCLcB/s1600/Crypter1.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/chartwig-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/807169774098796544","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/634754/locked-in-ransomware-help-support-restore-corupted-fileshtml/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/novalid-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-BK_31ORE0ZY/WD284cEVoLI/AAAAAAAACWA/bU0n3MBMD8Mbgzv9bD6VLJb51Q_kr5AJgCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/804810315456200704","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/rip-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-D-j_9_LZen0/WEPq4G5w5FI/AAAAAAAACXs/GTnckI3CGYQxuDMPXBzpGXDtarPK8yJ5wCLcB/s1600/note_2.PNG","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/11/satan666-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-anaLWyg_iJI/WFaxDs8KI3I/AAAAAAAACro/yGXh3AV-ZpAKmD4fpQbBkAyYXXnkqgR3ACLcB/s1600/note666_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1039907030570598400","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-september-14th-2018-kraken-dharma-and-matrix/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1050118985210048512","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1049314118409306112","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-october-12th-2018-notpetya-gandcrab-and-more/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-fox-ransomware-matrix-variant-tries-its-best-to-close-all-file-handles/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1034212374805278720","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-august-31st-2018-devs-on-vacation/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-matrix-ransomware-variants-installed-via-hacked-remote-desktop-services/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/rommeljoven17/status/804251901529231360","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/matrix-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-december-2nd-2016-screenlockers-kangaroo-the-sfmta-and-more/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/Do_pn7bX0AYh1F-.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DZ4V8uXWsAI0r1v.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://pbs.twimg.com/media/DZ4VCRpWsAYtckw.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/m/matrix/4-7-2018/2/wallpaper.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/m/matrix/4-7-2018/1/background.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/m/matrix/4-7-2018/1/ransom-note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-RGHgroHt5cU/WEUWnFBn2hI/AAAAAAAACYA/zwSf7rmfWdo4ESQ8kjwj6mJrfzL2V22mgCLcB/s1600/note-eng.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"cock.li","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://en.wikipedia.org/wiki/RSA_(cryptosystem)\\nhttp://en.wikipedia.org/wiki/Advanced_Encryption_Standard\\nIt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/sq-vo-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-Lhq40sgYUpI/WEWpGkkWOKI/AAAAAAAACZQ/iOp9g9Ya0Fk9vZrNKwTEMVcEOzKFIwqgACLcB/s1600/english-2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/634747/sage-20-ransomware-sage-support-help-topic/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/634978/sage-file-sample-extension-sage/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/sage-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-GasUzax8cco/WEar0U0tPqI/AAAAAAAACZw/6V_1JFxLMH0UnmLa3-WZa_ML9JbxF0JYACEw/s1600/note-txt2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/634778/golden-eye-virus/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/petya-ransomware-returns-with-goldeneye-version-continuing-james-bond-theme/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/goldeneye-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-avE8liOWdPY/WEcEbdTxx6I/AAAAAAAACa8/KOKgXzU1h2EJ0tTOKMdQzZ_JdWWNeFMdwCLcB/s1600/goldeneye-1-2.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-qcJxWivTx1w/WEcEW14om5I/AAAAAAAACa4/xLAlsQGZjeg7Zlg3F2fQAcgQ_6b_cNQLACLcB/s1600/goldeneye-1.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/hackedlocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-G-xrI4N08hs/WFJjQgB3ojI/AAAAAAAACnM/DEfy_skSg044UmbBfNodiQY4OaLkkQPOwCLcB/s1600/note-hacked.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-scheme-spread-popcorn-time-ransomware-get-chance-of-free-decryption-key/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/popcorntime-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-sLwR-6y2M-I/WEmVIdJuPMI/AAAAAAAACeY/gpQDT-2-d7kkrfTHgiEZCfxViHu7dNE7ACLcB/s1600/med.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-WxtRn5yVcNw/WEmgAPgO4AI/AAAAAAAACeo/M7iS6L8pSOEr8EUDkCK_g6h0aMKQQXfGwCLcB/s1600/note2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/ransomware/p/Popcorn-time/refer-a-friend.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/flkr-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-Fh2I6542zi4/WEpmphY0i1I/AAAAAAAACe4/FBP3J6UraBMkSMTWx2tm-FRYnmlYLtFWgCLcB/s1600/note2.png.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"meta.ua","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/code-virus-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-eBeh1lzEYsI/WFJ4l1oJ4fI/AAAAAAAACno/P5inceelNNk-zfkJGhE3XNamOGC8YmBwwCLcB/s1600/str123.gif","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-Lyd1uRKG-94/WFJ3TbNqWfI/AAAAAAAACnc/4LoazYU0S1s1YRz3Xck3LN1vOm5RwIpugCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/634258/aes-key-gen-assistprotonmailcom-help-support/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/09/dxxd-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/aeskeygenassist-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-6NIoKnSTwcs/WExcV900C_I/AAAAAAAACfI/_Hba3mOwk3UQ0T5rGercOglMsCTjVtCnQCLcB/s1600/note2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/807161652663742465","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/ultralocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-DOjKnuzCMo8/WE1Xd8yksiI/AAAAAAAACfo/d93v2xn857gQDg4o5Rd4oZpP3q-Ipv9xgCLcB/s1600/UltraLocker.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/m4n1f3sto-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-9MsC3A3tuUA/WFGZM45Pw5I/AAAAAAAACms/NbDFma30D9MpK2Zc0O6NvDizU8vqUWWlwCLcB/s1600/M4N1F3STO.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/slimhem-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/808316635094380544","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/payday-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-MWEyG49z2Qk/WE78wLqCXPI/AAAAAAAAChw/SIlQSe_o_wMars2egfZ7VqKfWuan6ThwQCLcB/s1600/note1.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/antix-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-6iMtvGe3T58/WE8Ftx7zcUI/AAAAAAAACiE/2ISTxSYzgKEgnfQ7FSUWo3BiCeVLHH_uwCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/kraken-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-b5caw8XAvIQ/WFBUuOto40I/AAAAAAAACjQ/_yzwIU17BHw4Ke4E3wM_XBI1XfnAvGSZQCLcB/s1600/005.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-E4brsgJRDHA/WFBU7wPaYLI/AAAAAAAACjU/sLEkzMiWp5wuc8hpFbylC7lLVMhftCLGgCLcB/s1600/111m.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/loveserver-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-LY1A0aeA_c0/WFEduvkiNQI/AAAAAAAACjk/B2-nFQoExscMVvZqvCaf9R4z_C6-rSdvACLcB/s1600/note2.png.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://guides.yoosecurity.com/cia-special-agent-767-virus-locks-your-pc-screen-how-to-unlock/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-december-16th-2016-samas-no-more-ransom-screen-lockers-and-more/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/virus-removal/remove-cia-special-agent-767-screen-locker","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/cia-special-agent-767-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-6I7jtsp5Wi4/WFLqnfUvg5I/AAAAAAAACow/BCOv7etYxxwpIERR1Qs5fmJ2wKBx3sqmACLcB/s1600/screen-locker.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-T8iSbbGOz84/WFGZEbuRfCI/AAAAAAAACm0/SO8Srwx2UIM3FPZcZl7W76oSDCsnq2vfgCPcB/s1600/code2.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/antihacker2017-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-k7iDPgj17Zo/WFKEfMvR4wI/AAAAAAAACn4/8irB4Tf1x_MjfTmWaAjuae6mFJbva6GcwCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/cryptorium-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-I0fsQu2YXMI/WFLb9LPdkFI/AAAAAAAACoY/xqRhgO1o98oruVDMC6rO4RxCk5MFDSTYgCLcB/s1600/lock.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/v8locker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-Acmbpw6fEaQ/WFUFKU9V9ZI/AAAAAAAACqc/47AceoWZzOwP9qO8uenjNVOVXeFJf7DywCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/17/g/globeimposter-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.emsisoft.com/en/23639/globeimposter-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/globeimposter-ransomware-spreading-via-spam-campaigns/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ransomlook.io/group/globeimposter","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GrujaRS/status/1004661259906768896","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/809795402421641216","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/globeimposter","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/fwosar/status/812421183245287424","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-december-30th-2016-infected-tvs-and-open-source-ransomware-sucks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/fake-globe-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-F8oAU82KnQ4/WFWgxjZz2vI/AAAAAAAACrI/J76wm21b5K4F9sjLF1VcEGoif3cS-Y-bwCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/koolova-ransomware-decrypts-for-free-if-you-read-two-articles-about-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/koolova-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-kz7PePfAiLI/WGTpY3us5LI/AAAAAAAAC3A/wu1rkx-BWlMzglJXXmCxeuYzbZKN5FP4gCLcB/s1600/koolova-v2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/aes-ni-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-GdF-kk1j9-8/WFl6NVm3PAI/AAAAAAAACvE/guFIi_FUpgIQNzX-usJ8CpofX45eXPvkQCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/drProct0r/status/810500976415281154","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/cryptoblock-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-4Y7GZEsWh7A/WFfnmQFF7nI/AAAAAAAACsQ/j3rXZmWrDxMM6xhV1s4YVl_WLDe28cpAwCLcB/s1600/001.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/810766686005719040","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/msn-cryptolocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-R-lKbH_tLvs/WGPRa-hCtqI/AAAAAAAAC1Y/zgKYZmys_jciaYhtTUsVLen5IHX8_LyiACLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/braincrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-8bxTSAADM7M/WFmBEu-eUXI/AAAAAAAACvU/xaQBufV5a-4GWEJhXj2VVLqXnTjQJYNrwCLcB/s1600/note-brain2.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-KrKO1vYs-1w/WFlw6bOfI_I/AAAAAAAACug/42w1VSl2GIoxRuA2SPKJr6xYp3c4OBnJQCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/811264254481494016","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/811343914712100872","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/enkripsipc-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-owEtII_eezA/WFmOp0ccjaI/AAAAAAAACvk/gjYcSeflS4AChm5cYO5c3EV4aSmzr14UwCLcB/s1600/enc100.gif","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/811587154983981056","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-december-23rd-2016-cryptxxx-koolova-cerber-and-more/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/manifestus-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-85wiBKXIqro/WFrFOaNeSsI/AAAAAAAACwA/UyrPc2bKQCcznmtLTFkEfc6lEvhseyRYACLcB/s1600/lock1.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/811613888705859586","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/812002960083394560","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.archersecuritygroup.com/what-is-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/proposalcrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-TkMikT4PA3o/WFrb4it2u9I/AAAAAAAACww/_zZgu9EHBj8Ibar8i5ekwaowGBD8EoOygCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/cryptolocker3-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-LDSJ7rws1WI/WGDR-oDSshI/AAAAAAAACyw/_Kn0mnjpm2YN5tS9YldEnca-zOLJpXjcACLcB/s1600/crypto1-2.gif","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/roga-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-ZIWywQMf2mY/WGJD-rqLZYI/AAAAAAAACzQ/p5PWlpWyHjcVHKq74DOsE7yS-ornW48_QCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-ClUef8T55f4/WGKb8U4GeaI/AAAAAAAACzg/UFD0X2sORHYTVRNBSoqd5q7TBrOblQHmgCLcB/s1600/site.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/812131324979007492","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/guster-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-0-kDVCM-kuI/WGVH-d2trGI/AAAAAAAAC4A/4LlxFpwkhEk89QcJ5ZhO1i-T6dQ_RcVegCEw/s1600/guster-note-2.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/pclock4-sysgop-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-T9Mt0pE7kwY/WF7NKAPfv1I/AAAAAAAACxw/gOjxeSR0x7EurKQTI2p6Ym70ViYuYdsvQCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/l33taf-locker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-yncl7-Jy198/WGDjdgNKXjI/AAAAAAAACzA/bfkDgwWEGKggUG3E1tgPBAWDXwi-p-7AwCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"HACKED.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://removevirusadware.com/tips-for-removeing-kokokrypt-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/kokokrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-NiQ6rSIprB8/WF-uxTMq6hI/AAAAAAAACyA/tA6qO3aJdGc0Dn_I-IOZOM3IwN5rgq9sACLcB/s1600/note-koko.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/812331918633172992","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/alphabet-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-bFPI3O1BI3s/WGPpvnDvNNI/AAAAAAAAC10/mLUiFOCWnEkjbV91PmUGnc3qsFMv9um8QCLcB/s1600/wallp.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/adamlocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-9IgXt6L0hLY/WGARdzJgfvI/AAAAAAAACyQ/1bfnX_We65AirDcAFpiG49NPuBMfGH9wwCLcB/s1600/note-adam.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/813064189719805952","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/badencript-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-hApL-ObdWsk/WGAYUyCzPcI/AAAAAAAACyg/NuL26zNgRGcLnnF2BwgOEn3AYMgVu3gQACLcB/s1600/More-note.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-derialock-ransomware-active-on-christmas-includes-an-unlock-all-command/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/derialock-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-9vg_tRPq8rQ/WGOjf4ULuGI/AAAAAAAACzw/d16uRmEOotsCbRM4hwvzQ6bB8xAVNJ7ogCLcB/s1600/DeriaLock.gif","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"unlock-everybody.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://cyberx-labs.com/en/blog/new-killdisk-malware-brings-ransomware-into-industrial-domain/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.welivesecurity.com/2017/01/05/killdisk-now-targeting-linux-demands-250k-ransom-cant-decrypt/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.securityweek.com/destructive-killdisk-malware-turns-ransomware","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.zdnet.com/article/247000-killdisk-ransomware-demands-a-fortune-forgets-to-unlock-files/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/killdisk-ransomware-now-targets-linux-prevents-boot-up-has-faulty-encryption/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/killdisk-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-8MqANWraAgE/WGT7mj-XirI/AAAAAAAAC3g/H_f1hTxa7Sc_DEtllBe-vYaAfY-YqMelgCLcB/s1600/wallp.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/seoirse-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/mrcr","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/merry-christmas-ransomware-and-its-dev-comodosecurity-not-bringing-holiday-cheer/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.zdnet.com/article/not-such-a-merry-christmas-the-ransomware-that-also-steals-user-data/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/-merry-christmas-ransomware-now-steals-user-private-data-via-diamondfox-malware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/12/mrcr1-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-_w8peyLMcww/WHNJ1Gb0qeI/AAAAAAAADBw/EVbR-gKipYoNujo-YF6VavafsUfWDANEQCLcB/s1600/8-1-17.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-3F3QAZnDxsI/WGpvD4wZ2OI/AAAAAAAAC80/-2L6dIPqsgs8hZHOX0T6AFf5LwPwfZ-rwCLcB/s1600/note.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"BRUCE.HTA","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"DEAD.HTA","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-ZnWdPDprJOg/WJCPeCtP4HI/AAAAAAAADfw/kR0ifI1naSwTAwSuOPiw8ZCPr0tSIz1CgCLcB/s1600/netflix-akk.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-bQQ4DTIClvA/WJCIh6Uq2nI/AAAAAAAADfY/hB5HcjuGgh8rRJKeLHo__IRz3Ezth22-wCEw/s1600/form1.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.darkreading.com/attacks-breaches/netflix-scam-spreads-ransomware/d/d-id/1328012","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/rogue-netflix-app-spreads-netix-ransomware-that-targets-windows-7-and-10-users/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/netflix-scam-delivers-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/netflix-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-Cw4e1drBKl4/WJCHmgp1vtI/AAAAAAAADfI/QqFxUsuad","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-vODt2aB9Hck/WJCFc3g5eCI/AAAAAAAADe8/OrEVkqUHMU4swRWedoZuBu50AWoKR1FGACLcB/s1600/netflix-note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.forbes.com/sites/leemathews/2017/01/27/fake-ransomware-is-tricking-people-into-paying/#777faed0381c","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/sureransom-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-zShnOIf3R_E/WJBfhC4CdSI/AAAAAAAADdo/6l4hwSOmI0Evj4W0Esj1S_uNOy5Yq6X0QCLcB/s1600/note1-2-3.gif","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/GrujaRS/status/826153382557712385","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://download.bleepingcomputer.com/demonslay335/StupidDecrypter.zip","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.pcrisk.com/removal-guides/10899-zyka-ransomware","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/zyka-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-SF4RsOANlI0/WJBQd4SJv6I/AAAAAAAADdY/hI-Ncw9FoFMi5jvljUftpzTgdykOfR3vgCLcB/s1600/lock-wallp_2.png.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-ClM0LCPjQuk/WI-BgHTpdNI/AAAAAAAADc8/JyEQ8-pcJmsXIntuP-MMdE-pohVncxTXQCLcB/s1600/7-zip-logo.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/7zipper-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-BR0DvtIft7g/WI95IF7IdUI/AAAAAAAADck/gzWAMbpFvaYicHFuMzvlM3YGJpgulMQBQCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/825790584971472902","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/xcrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-XZNMg5P75r4/WI985j-EKHI/AAAAAAAADcw/jGdtXoq2pnwjlAbFAJia4UsXuJrV5AU3gCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/first-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-T0PhVuoFSyA/WGk5mYkRFAI/AAAAAAAAC64/j14Pt84YUmQMNa_5LSEn6fZ5CoYqz60swCLcB/s1600/note-lock.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JaromirHorejsi/status/815557601312329728","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/red-alert-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-tDS74fDwB1Q/WGk2D5DcUYI/AAAAAAAAC6s/vahju5JD9B4chwnNDUvDPp4ejZOxnj_awCLcB/s1600/note-wallp.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"MESSAGE.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/815392891338194945","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/edgelocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-dNBgohC1UYg/WGnXhem546I/AAAAAAAAC7w/Wv0Jy4173xsBJDZPLMxe6lXBgI5BkY4BgCLcB/s1600/note-lock.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://chuongdong.com/reverse%20engineering/2020/11/17/RegretLocker/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/816112218815266816","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/gog-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-TDK91s7FmNM/WGpcwq5HmwI/AAAAAAAAC8Q/i0Q66vE7m-0kmrKPXWdwnYQg6Eaw2KSDwCLcB/s1600/note-pay_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-cAnilnXjK7k/WG_OHhC_UdI/AAAAAAAAC_4/sdbzTx9hP4sryM7xE59ONdk7Zr8D_m6XwCLcB/s1600/note-txt_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"DecryptFile.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/x3m-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-hMAakgAORvg/WG_i-lk09II/AAAAAAAADAI/Uq2iCHC5ngYzeVcuxQF0mcbrLqyOGcA_wCLcB/s1600/note.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/btcamant.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-uiHluU553MU/WGzoFpEWkfI/AAAAAAAAC9o/M34ndwHUsoEfZiLJv9j4PCgBImS8oyYaACLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/firecrypt-ransomware-comes-with-a-ddos-component/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/bleedgreen-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-np8abNpYeoU/WG1KX4_H0yI/AAAAAAAAC98/gxRJeDb01So5yTboXYP7sZWurJFBbWziACLcB/s1600/note-html.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-xrr6aoB_giw/WG1UrGpmZJI/AAAAAAAAC-Q/KtKdQP6iLY4LHaHgudF5dKs6i1JHQOBmgCLcB/s1600/green1.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/globe3","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decryptors.blogspot.co.il/2017/01/globe3-decrypter.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-globe-ransomware-wants-to-purge-your-files/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/624518/globe-ransomware-help-and-support-purge-extension-how-to-restore-fileshta/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/globe3-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-lYkopoRH0wQ/WHOt1KhhzhI/AAAAAAAADCA/nPdhHK3wEucAK1GHodeh5w3HcpdugzSHwCLcB/s1600/globe3-9-1-17.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-Wk1_IdcEHbk/WG6FVnoaKlI/AAAAAAAAC-4/WeHzJAUJ0goxxuAoGUUebSgzGHrnD6LQQCLcB/s1600/Globe-ransom-note_2.png.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"mia.kokers","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/817069320937345024","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-january-6th-2017-fsociety-mongodb-pseudo-darkleech-and-more/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/mafiaware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-BclLp7x1sUM/WG6acqtDBbI/AAAAAAAAC_I/ToVEXx-G2DcKD4d7TZ0RkVqA1wRicxnZQCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ME.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/817079028725190656","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/skyname-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-OlKgHvtAUHg/WHFDCx4thaI/AAAAAAAADAw/wzBXV17Xh-saaFGlrxw3CDNhGSTaVe2dQCLcB/s1600/lock1.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-i4ksJq-UzX8/WHFFXQL5wAI/AAAAAAAADA8/awfsqj1lr7IMBAPtE0tB44PNf1N6zkGDwCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"INFOK1.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/817648547231371264","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/ocelot-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-DMxJm5GT0VY/WHEyEOi_vZI/AAAAAAAADAc/6Zi3IBuBz1I7jdQHcSrzhUGagGCUfs6iACLcB/s1600/lock2.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-3iMAtqvAmts/WHEyA_dW5OI/AAAAAAAADAY/tE5FtaVMJcc3aQQvWI4XOdjtvbXufFgywCLcB/s1600/lock1.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/826508611878793219","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/jiriatvirlab/status/818443491713884161","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://usproins.com/evil-ransomware-is-lurking/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.enigmasoftware.com/evilransomware-removal/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/evil-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-xxJ9xdRuWis/WHO_FL-hWcI/AAAAAAAADCU/VqI02AhzopQY1WKk-k6QYSdHFWFzg1NcACLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-0NFy_yDghZ0/WHO_ClbPdMI/AAAAAAAADCQ/RX2cgYg3z381gro6UUQtAED7JgXHbvGLgCLcB/s1600/note-txt_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/nemesis-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-dLSbqOiIbLU/WHPh-akYinI/AAAAAAAADC0/6nFQClDBJ5M7ZhrjkhnxfkdboOh7SlE-ACLcB/s1600/v5YZMxt.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/startups/Windows_Update_Host-16362.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/updatehost-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-BOmKmroIvEI/WJn-LAUmyyI/AAAAAAAADsI/W987TEaOnEAd45AOxO1cFyFvxEx_RfehgCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/watch-your-computer-go-bonkers-with-cancer-trollware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/cancer-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-ozPs6mwKfEI/WJjTwbrOx9I/AAAAAAAADqE/4gewG-f_dLQQDevajtn8CnX69lvWgCZQACLcB/s1600/wallp.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/ransomuhahawhere.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-7KRVg6kt418/WJnwxDOV5NI/AAAAAAAADrk/or9DbPMl-7ksN7OwIAH6BMJwE5fGc_BfgCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/erebus-ransomware-utilizes-a-uac-bypass-and-request-a-90-ransom-payment/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/erebus-2017-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-tAp9wE6CJxM/WJrvOOyIfRI/AAAAAAAADts/iMfaiDRyRcQuPXgtQV--qt7q8ZI3ZV0tQCLcB/s1600/note1%252B.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/serpent-danish-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.torproject.org/projects/torbrowser.html.en#downloads\\n2","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"hnxrvobhgm.pw","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"vdpbkmwbnp.pw","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/dyna-crypt-not-only-encrypts-your-files-but-also-steals-your-info/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/dyna-crypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-Qx8RhielSbI/WJypR9Zw9nI/AAAAAAAADus/Opsfy8FxRIIBmouywdl7uT94ZpfwKr6JACLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/04/magic-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.ozbargain.com.au/node/228888?page=3","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/hugeme-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-kolk6sABFzQ/WJ95ddcAxNI/AAAAAAAADwI/oP8ZFD7KnqoQWgpfgEHId843x3l0xfhjACLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/838700700586684416","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/829768819031805953","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/fadesoft-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-5t-5eBl4Tng/WKARmYV5GVI/AAAAAAAADxA/OuS7Eo__z1sh2tRbBpQIxJQ6IVbSiQakwCLcB/s1600/lock-note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/830116190873849856","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-february-10th-2017-serpent-spora-id-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ultranationalist-developer-behind-serbransom-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/serbransom-2017.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-DQQ5tk0C9lY/WKALND0dYPI/AAAAAAAADwo/EuKiO_F0Mn0ImrGLVE-Sks-j93pHoTjKACLcB/s1600/konstr.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-OY8jgTN5Y9Q/WKAI6a9xfMI/AAAAAAAADwc/ng36hAXsvfYQ5rdkSFeVgEvLY88pJmnWACLcB/s1600/note-html-wallp.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/allyourdocuments-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-mwIvQNkFH4g/WKAydZnGn_I/AAAAAAAADxs/6xHgbD3OUFUbebeuNVkI6tp_cMRVUQHtQCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/cryptokill-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://blog.emsisoft.com/2017/01/10/from-darknet-with-love-meet-spora-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://blog.gdatasoftware.com/2017/01/29442-spora-worm-and-ransomware","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/spora-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-0COE3ADdaYk/WHpnHzuo7OI/AAAAAAAADHY/yfDF3XG720Yyn3xQHwFngt1T99cT-Xt3wCLcB/s1600/rus-note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-KkJXiHG80S0/WHX4TBpkamI/AAAAAAAADDg/F_bN796ndMYnzfUsgSWMXhRxFf3Ic-HtACLcB/s1600/spam-email.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/marlboro-ransomware-defeated-in-one-day/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/marlboro","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/marlboro.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-MWRTa6aXtdk/WHflJFyb-GI/AAAAAAAADFs/dc-l-RrWSCAPE8akw2SCb1uuj-a-2shiwCLcB/s1600/docm.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-7UmhPM2VSKY/WHe5tDsHfuI/AAAAAAAADFM/FRdUnAyxAggvF0hX0adtrpq48F7HXPbawCLcB/s1600/check-decrypt.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016_03_01_archive.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/hakunamatata.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-DUXeyyzqwKs/WHkrGvLyFvI/AAAAAAAADGg/SPfrNMZYGs8edE7X5z-3MBroIqS5GQ8kACLcB/s1600/note_1-str_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://cfoc.org/how-to-restore-files-affected-by-the-lambdalocker-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/lambdalocker.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-B3o6bGziu_M/WHkyueI902I/AAAAAAAADGw/la7psCE9JEEe17GipFh69xVnIDYGFF38wCLcB/s1600/note-1-2.gif","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/819927858437099520","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/kaandsona-ransomtroll.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-v3jncd77m3U/WHkjPoEusKI/AAAAAAAADGE/xJOIgzm-ST0L4kpNeThKTyfukq3e1Th-QCLcB/s1600/troll-22.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://sensorstechforum.com/remove-cryptosweettooth-ransomware-restore-locked-files/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/cryptosweettooth.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-KE6dziEK4To/WHnvPzKOs7I/AAAAAAAADHI/KPBjmO9iChgAa12-f1VOxF49Pv27-0XfQCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/havoc-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-Xs7yigomWw8/WH0mqn0QJLI/AAAAAAAADKA/0Fk5QroMsgQ3AsXbHsbVtopcJN4qzDgdACLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/Xylit0l/status/821757718885236740","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-satan-ransomware-available-through-a-ransomware-as-a-service-/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-january-20th-2017-satan-raas-spora-locky-and-more/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/637811/satan-ransomware-help-support-topic-stn-extension-help-decrypt-fileshtml/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/satan-raas.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-5BgSHIym-8Y/WIH92q4ymHI/AAAAAAAADSk/MF2T-mmhuY4irQZFqmpGZjmUI2onlNCyACLcB/s1600/ransom-note.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-7fwX40eYL18/WH-tfpNjDgI/AAAAAAAADPk/KVP_ji8lR0gENCMYhb324mfzIFFpiaOwACLcB/s1600/site-raas.gif","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/garryweber.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-w6lxK0qHj8A/WIO_iAngUzI/AAAAAAAADTk/dLGlrwwOh508AlG2ojLRszpUxL0tHrtSQCLcB/s1600/note-html.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"protonmail.ch","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/dn-donotopen.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-ilIaUD5qOuk/WIJuV1TuC1I/AAAAAAAADTA/SOj8St_qXMsgDexK1BGgZT0yFDkNDz_7QCLcB/s1600/lock.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-llR46G5zOBE/WIJuTTHImXI/AAAAAAAADS8/Ww_QU1Z7Q3geZgiSStJB3siO3oQJpIcowCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/BleepinComputer/status/822653335681593345","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://bestsecuritysearch.com/cloudsword-ransomware-virus-removal-steps-protection-updates/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/cloudsword.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-OTxFEWf7LiY/WIO0rJmBgJI/AAAAAAAADTQ/U3BLcd2-CPQQ_73eIKIyg28cKFmw4nctgCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.govcert.admin.ch/blog/27/sage-2.0-comes-with-ip-generation-algorithm-ipga","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/sage-2-0-ransomware-gearing-up-for-possible-greater-distribution/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.securityweek.com/sage-20-ransomware-demands-2000-ransom","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://isc.sans.edu/forums/diary/Sage+20+Ransomware/21959/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/sage-2-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-_c5vGu4nCvE/WIT_pWP_FSI/AAAAAAAADUs/8hK8a4E48sY3U_aAHC2qNzYDBL0bQcNjgCLcB/s1600/note-wallp111.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-6YhxRaqa_9Q/WISA9dW31bI/AAAAAAAADUE/78mNNKpPMyc2Gzi1N9CooyQp7RNT40NNgCLcB/s1600/note1_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.2-spyware.com/remove-zekwacrypt-ransomware-virus.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2016/06/zekwacrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-CLo4JTpveKY/WI4sVXEQSPI/AAAAAAAADcU/n8qrwehDEQMlG845cjNow_fC4PDqlvPIQCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"jabbim.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.enigmasoftware.com/funfactransomware-removal/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/funfact.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"note.iti","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"sigaint.org","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/vxlock-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/zxz-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/638191/zxz-ransomware-support-help-topic-zxz/?hl=%2Bzxz#entry4168310","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1004803373747572736","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/1004351990493741057","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/824705553201057794","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/638344/cryptconsole-uncrypteoutlookcom-support-topic-how-decrypt-fileshta/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/cryptconsole-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://xchange.cc","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.coinbase.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://localbitcoins.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/jiriatvirlab/status/825411602535088129","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/ransomplus-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.2-spyware.com/remove-ransomplus-ransomware-virus.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-uIb_TdWTk3Q/WI2qRSlsXJI/AAAAAAAADcE/h92XEY6AraQMUwEIOBZ9moxN1J2So8xpwCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://localbitcoins.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/opentodecrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-RPeHrC9Trqk/WGk1kQlBQQI/AAAAAAAAC6o/FutnWrlUf44hq54_xI_6Uz2migCR0rwlwCLcB/s1600/Note-wallp.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"india.comIdentification","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/01/polato-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-E9GDxEoz95k/WIop79nWZ2I/AAAAAAAADZU/CnsvOl96yesoH07BZ2Q05Fp40kLcTMmqQCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/ranion-ransomware-as-a-service-available-on-the-dark-web-for-educational-purposes/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/ranion-raas.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-ORiqmM6oWXc/WJV7X4IvTWI/AAAAAAAADlE/wXvz5Hsv1gQ-UrLoA1plVjLTVD7iDDxwQCLcB/s1600/buy_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/_ddoxer/status/827555507741274113","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/yourransom-is-the-latest-in-a-long-line-of-prank-and-educational-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/yourransom-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-dFQlF_6uTkI/WJYigC5GwiI/AAAAAAAADlk/jm-ZwqJ2mVYd2gtAQgYW_lOd78u5N2x0ACLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/polski-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-ahpZEI1FHQM/WJd7_dpYlyI/AAAAAAAADm8/4-nFXqc9bjEI93VDJRdsLSlBOwQiaM7swCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/x-files-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017_02_01_archive.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/bleepincomputer/status/816053140147597312?lang=en","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/dumb-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-Vx9ZtCODajg/WKiMr2QX5cI/AAAAAAAAD64/QAh37o_CRIImaxUfIhoEh8qE4JLn5HaNwCLcB/s1600/dumb.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-_Udncaac_gM/WKROBN00ORI/AAAAAAAAD2U/HsHkEspG85YSfPg-8MbPYYTYmBU4PAJAgCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/wcry-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-iUq492KUatk/WKH-GXnO4-I/AAAAAAAADzw/9uwo1LF5ciIvMJ6jAn3mskSqtdiTkxvlACLcB/s1600/lock-note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/lovelock-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-YdCKWLUFBOo/WKRCD2BLzTI/AAAAAAAAD14/BPtYMLvQpEMAbT-ZdiCVPi_LZCrXYJMhwCLcB/s1600/ReadME%2521.txt.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/hermes-ransomware-decrypted-in-live-video-by-emsisofts-fabian-wosar/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/642019/hermes-ransomware-help-support-decrypt-informationhtml/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/hermes-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-Yisae5e5Pjs/WKbXmIXU8YI/AAAAAAAAD3g/WZs5XzL4l4snT2j4yfc3CAaF7KonH_DQACLcB/s1600/note_1.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-nzY6thZOXSk/WKbYmWxa0rI/AAAAAAAAD3s/t_3d90FGOe8je8rfeeYLF1jzJinG5JMVgCLcB/s1600/note_2_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/cryptomix-variant-named-cryptoshield-1-0-ransomware-distributed-by-exploit-kits/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/cryptoshield-2-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-A-N9zQgZrhE/WJHAHzuitvI/AAAAAAAADhI/AHkLaL9blZgqQWc-sTevVRTxVRttbugoQCLcB/s1600/note-2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/locky-ransomware-switches-to-thor-extension-after-being-a-bad-malware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/locky-impersonator.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-locky-ransomware-encrypts-local-files-and-unmapped-network-shares/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"sigaint.net","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"13DYdAKb8nfo1AYeGpJXwKZYupyeqYu2QZ","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-february-17th-2017-live-hermes-reversing-and-scada-poc-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MarceloRivero/status/832302976744173570","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/kasiski-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-ehXlWPLxtR8/WKdHF_Y-MeI/AAAAAAAAD5A/KKXO-S9OtMQAcNM-IOV2ees8qKlAJ3pzACLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"INSTRUCCIONES.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/vhd-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-viZiAZr3_ns/WKrIDWEEBXI/AAAAAAAAD8c/8n1RJ9m2Odoe3bvMMmIm421NdxS-OIRzQCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/suchsecurity-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-OCBIabrrZNg/WLm1RGFVKEI/AAAAAAAAEHY/1MASb-0Y7jsBlE2TzyqgknrfDhuEsNx2gCLcB/s1600/Screenshot_1.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/avastvirusinfo-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017_03_01_archive.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/userfileslocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-0D8XdlTNIsA/WLXFiBWz5II/AAAAAAAAEFQ/Hojw0BHHysUieiCnidoVwTrqXVCckLkSQCLcB/s1600/lock-screen.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/cryptolocker-by-ntk-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-hvTBarxSO8Y/WKs5kjdpgDI/AAAAAAAAD9Q/m3louiSE6xY0BcGjnWvg_NNDU6K1ok3ggCLcB/s1600/lock.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/835668540367777792","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/barraxcrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-june-8th-2018-crybrazil-cryptconsole-and-magniber/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/cryptconsole-2-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-M2CMU8RPgqw/WLfqOCgNXrI/AAAAAAAAEGA/W-uAf30qQgoZxqRwblUcSKzYrM5QmcLfgCLcB/s1600/note-html_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"files.hta","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/youarefuckedransomware-removal/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-S0-Bop8XUgk/WLD_RVgldgI/AAAAAAAAEBU/r2LmgjTHUbMTtIKGH2pHdKfFXcUEOQdMgCLcB/s1600/lock-act2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/833636006721122304","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/xyzware-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"indonesianbacktrack.or.id","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"decrypt.Email","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335/status/835664067843014656","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://decrypter.emsisoft.com/damage","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/damage-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-february-24th-2017-trump-locker-macos-rw-and-cryptomix/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/trumplocker.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-trump-locker-ransomware-is-a-fraud-just-venuslocker-in-disguise/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepstatic.com/images/news/u/986406/Ransomware/TrumpLocker/TrumpLocker-wallpaper.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"files.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-8qIiBHnE9yU/WK1mZn3LgwI/AAAAAAAAD-M/ZKl7_Iwr1agYtlVO3HXaUrwitcowp5_NQCLcB/s1600/lock.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/Jan0fficial/status/834706668466405377","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/pyl33t-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JAMESWT_MHT/status/834783231476166657","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/vanguard-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bitcoin.com/buy-bitcoin","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.coindesk.com/information/how-can-i-buy-bitcoins/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://translate.google.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/834821166116327425","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/pickles-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"DECRYPT.txt","to_ids":true,"timestamp":"1786036381","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-raas-portal-preparing-to-spread-unlock26-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/unlock26-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-E1vV0sqaw2o/WLB1OvOLCPI/AAAAAAAAEAg/D4OkAOBT_uM4DeVS1hAu6eBGcmga8CSYwCLcB/s1600/site1.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-92aP_sumdLo/WLAy3D2kLvI/AAAAAAAAEAQ/FA1j--rOIygsNbDAWqrDqufT7zSwuEnvQCLcB/s1600/note-html_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"attachments.All","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/02/dotransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-BoKI2-Lhsp8/WLHq34zCtdI/AAAAAAAAECo/YkfIG29vRRsLvdn51ctrMEypptRzZS2IgCLcB/s1600/raas.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/search?updated-min=2017-01-01T00:00:00-08:00&updated-max=2018-01-01T00:00:00-08:00&max-results=50","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-qsS0x-tHx00/WLM3kkKWKAI/AAAAAAAAEDg/Zhy3eYf-ek8fY5uM0yHs7E0fEFg2AXG-gCLcB/s1600/failed-key.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/836995570384453632","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/krider-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/consoleapplication1-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/redants-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/lock2017-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-FllHGqIx_JQ/WL1QF2uMCCI/AAAAAAAAEJQ/Fn-8j2t8dwgSo8YTHM1iOkL-3U_hbcaKwCLcB/s1600/Note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"unseen.is","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"name.file","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/837565766073475072","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/fabsyscrypto-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-QuBYcLAKRPU/WLnE3Rn3MhI/AAAAAAAAEH4/WnC5Ke11j4MO7wmnfqBhtA-hpx6YN6TBgCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/PolarToffee/status/843527738774507522","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/cryptodevil-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-9ovaMSUgtFQ/WM7dXo84tlI/AAAAAAAAEVc/_Zx9gZuvHA0tU9-jtzP492bXa5fQiL7kgCLcB/s1600/key-price.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-i5iUwC8XWDo/WM7dSVNQ8UI/AAAAAAAAEVY/uXmUErkLgHcWbfpdw1zGTvwY9DimiAH8wCLcB/s1600/lock-panel.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/642409/motd-ransomware-help-support-topics-motdtxt-and-enc-extension/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/642409/motd-of-ransome-hostage/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/motd-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-suCNGXgzWuM/WM7HPujx_qI/AAAAAAAAEUk/gIvzbsbB_BUrBmmBsgpb_8w7zjwudu_mACLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"motd.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/839467168760725508","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.fixinfectedpc.com/uninstall-crptxxx-ransomware-from-pc","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/609690/ultracrypter-cryptxxx-ultradecrypter-ransomware-help-topic-crypt-cryp1/page-84","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/crptxxx-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-itq9nR2EedY/WM2OPtDKCgI/AAAAAAAAEUI/KcC8vtnmlHENz0CSOvxqoYeZL8qdx1IZgCLcB/s1600/note_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/842781575410597894","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/demonslay335?lang=en","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/zinocrypt-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-t1Q-a7sJlag/WMw8MBNIrkI/AAAAAAAAET4/aycY-m5GXVYQjcbZJ8N0kIfUZ3onYt8AgCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.virustotal.com/en/file/39a2201a88f10d81b220c973737f0becedab2e73426ab9923880fb0fb990c5cc/analysis/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.grahamcluley.com/kirk-ransomware-sports-star-trek-themed-decryptor-little-known-crypto-currency/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.securityweek.com/star-trek-themed-kirk-ransomware-emerges","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://www.networkworld.com/article/3182415/security/star-trek-themed-kirk-ransomware-has-spock-decryptor-demands-ransom-be-paid-in-monero.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/forums/t/642239/kirk-ransomware-help-support-topic-kirk-extension-ransom-notetxt/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/kirkspock-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-USLFJX6OMD4/WMwmKIsJnEI/AAAAAAAAETQ/S8uzyHF5mWQZjra6EGBidZ6wqgzrNqIMgCLcB/s1600/full-ransom-note.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"kirk.payments","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"scryptmail.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"kirk.help","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"NOTE.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"encryption.In","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/JakubKroustek/status/842034887397908480","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/turkish-fileencryptor.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-ccU4txzjpWg/WMl33c7YD3I/AAAAAAAAESU/moLHgQnVMYstKuHKuNgWKz8VbNv5ECdzACLcB/s1600/lock-note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"www.localbitcoins.co","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"lelantos.org","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"Oku.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/revenge-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/revenge-ransomware-a-cryptomix-variant-being-distributed-by-rig-exploit-kit/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-KkPVDxjy8tk/WM7LtYHmuAI/AAAAAAAAEUw/kDJghaq-j1AZuqjzqk2Fkxpp4yr9Yeb5wCLcB/s1600/revenge-note-2.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/malwrhunterteam/status/841747002438361089","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/karmen-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-OmuOKzLOHnw/WMl74fSSaJI/AAAAAAAAESg/4CsOYOSuUeEhsO4jSi6k10sbb_1NnfYxACLcB/s1600/lock-screen.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/blog/research/77762/petrwrap-the-new-petya-based-ransomware-used-in-targeted-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-march-17th-2017-revenge-petrwrap-and-captain-kirk/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/petrwrap-ransomware-is-a-petya-offspring-used-in-targeted-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/petrwrap-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-ZbWrN1LR-14/WMhPB7M8LBI/AAAAAAAAERQ/ZGG3RDHd8V0hwK_pf-vYChTn9VRpLBgNQCLcB/s1600/petya-based_ru_3.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/project34-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"2IP.RU","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"india.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/gg-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/cryptomeister-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"wvw.coinbase.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/jiriatvirlab/status/840863070733885440","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/rozalocker-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"btc","category":"External analysis","value":"3FjtFZWjyj46UcfDY4AiUrEv7wLtyzZv5o","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://x-pay.cc/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/gc47-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://3.bp.blogspot.com/-i4i0joM4qRk/WMO7sKLu4dI/AAAAAAAAENU/vLR4B1Xg39wduycHe2f0vEYSv_dtJ-gxwCLcB/s1600/note.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/struppigel/status/839778905091424260","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/vortex-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"airmail.cc","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"openmailbox.org","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"form.The","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/dangerous-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"someting.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/embittered-enjey-ransomware-developer-launches-ddos-attack-on-id-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-march-10th-2017-spora-cerber-and-technical-writeups/","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/enjey-crypter-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://2.bp.blogspot.com/-rkOR4L9jDZc/WMG1uI6vqQI/AAAAAAAAEMk/SAu_FleTLHcagf_maS31xt3D_qnwAx2RQCLcB/s1600/note-enjey_2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"india.com.enjey","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"encrypted.contact","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/kaenlupuf-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-yTOgGw5v_vo/WMBUGHN7bnI/AAAAAAAAELY/8DDyxB4pSWgje_-iVbXgy2agNty1X6D6ACLcB/s1600/C6TUfkZWAAEewi_.jpg","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/jiriatvirlab/status/838779371750031360","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/cryptojacky-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://1.bp.blogspot.com/-pSmSehFx0bI/WL8Rp7RoMHI/AAAAAAAAEKw/eyfsAjikl9sDHlcjdyQeRxZsLto4hxvGwCLcB/s1600/note-1-2.png","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.co.il/2017/03/nhtnwcuf-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://4.bp.blogspot.com/-OkiR6pVmYUw/WMFiLGPuJhI/AAAAAAAAEME/wccYzFDIzJYWKXVxaTQeB4vM-4X6h3atgCLcB/s1600/note-nhtnwcuf.gif","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"domain","category":"Network activity","value":"ransomlook.io","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://id-ransomware.blogspot.com/2016/07/ransomware-list.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"http://pastebin.com/raw/GHgpWjar","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://docs.google.com/spreadsheets/d/1TWS238xacAto-fLKh1n5uTsdijWdCEsGIM0Y0Hvmc5g/pubhtml","to_ids":true,"timestamp":"1786036380","comment":"Category: Ransomware Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/free-tools/ransomware-intelligence/groups/gammax","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/booba-project","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2026/07/31/captivecrunch-midnight-blizzard-targets-travelers-worldwide-for-malware-delivery-and-credential-theft/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/94847/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/94685/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://stealthmole-intelligence-hub.blogspot.com/2026/07/the-many-faces-of-modernstealer-tracing.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybersecuritynews.com/modernstealer-threat-actor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/blog/dark-web-profile-exfilsquad/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://ransomfeed.it/index.php?page=post_details&id_post=34186","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://ransomfeed.it/index.php?page=post_details&id_post=34211","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://ransomfeed.it/index.php?page=post_details&id_post=34231","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://ransomfeed.it/index.php?page=post_details&id_post=34219","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/94786/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/free-tools/ransomware-intelligence/groups/orova","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/microsoft-disrupts-fox-tempest-malware-signing-service","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.microsoft.com/on-the-issues/2026/05/19/disrupting-fox-tempest-a-cybercrime-service/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2026/05/19/exposing-fox-tempest-a-malware-signing-service-operation/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socfortress.medium.com/jadepuffer-the-dawn-of-agentic-ransomware-operations-003a59848007","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securereading.com/jadepuffer-ai-ransomware-autonomous-llm-attack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://nsfocusglobal.com/ai-security-incident-jadepuffer-ransomware-leverages-ai-agent-to-automate-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://krypt3ia.wordpress.com/2026/07/13/threat-intelligence-report-jadepuffer-agentic-ransomware-and-automated-extortion/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2026/07/new-encforge-ransomware-targets-ai.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-react2shell-vulnerability-cve-2025-55182/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.polyswarm.io/multiple-threat-actors-leveraging-cve-2025-55182-react2shell","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-11795-deploys-novel-starland-rat-and-bespoke-wldr-c2-implant-in-financially-motivated-campaign/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2026/cavern-manticore-exposing-iran-linked-modular-c2-framework/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.security.com/threat-intelligence/goddamn-ransomware-beast-rebrand","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-7810/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.volexity.com/blog/2026/07/17/proxying-to-compromise-sonicwall-secure-mobile-access-0-day-exploitation/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2021/05/unc2529-triple-double-trifecta-phishing-campaign.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.resecurity.com/blog/article/trinity-of-chaos-the-lapsus-shinyhunters-and-scattered-spider-alliance-embarks-on-global-cybercrime-spree","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.levelblue.com/blogs/spiderlabs-blog/scattered-lapsuss-hunters-anatomy-of-a-federated-cybercriminal-brand","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://falconfeeds.io/blogs/scattered-lapsus-hunters-slsh-threat-intelligence-2025/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://pushsecurity.com/blog/scattered-lapsus-hunters/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/scattered-lapsus-hunters/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2025/11/meet-rey-the-admin-of-scattered-lapsus-hunters/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://sosransomware.com/en/ransomware-groups/scattered-lapsus-hunters-the-cybercrime-alliance-that-will-shake-global-businesses-in-2025/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.picussecurity.com/resource/blog/scattered-lapsus-hunters-2025s-most-dangerous-cybercrime-supergroup","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/tr/armored-likho-apt-with-busysnake-stealer/120292/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.anomali.com/blog/anomali-cyber-watch-f5-breach-mysterious-elephant-apt-malicious-mcp-servers","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/mysterious-elephant-apt-ttps-and-tools/117596/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.techrepublic.com/article/news-novo-nordisk-1-3tb-theft-25m-demand-emea/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.bushidotoken.net/2026/06/uk-cybercrime-journal-arup-group.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.resecurity.com/blog/article/cybercriminals-are-targeting-edtech-data-breaches-and-ransomware-attacks-on-the-rise","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/prc-targets-us-medical-research","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thecyberexpress.com/cyberattacks-on-jordan/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/ta4922-suspected-chinese-crime-group-going-global","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://teamt5.org/tw/posts/alert-exploitation-of-cve-2026-34197-in-apache-active-mq?utm_source=rss&tm_medium=rss","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/latin-america-and-the-caribbean-cybercrime-landscape","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://intelinsights.substack.com/p/profiling-hacktivist-groupsalliances","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://outpost24.com/blog/hacktivist-cyber-operations-iran-israel/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2025/06/us-agencies-warn-of-rising-iranian.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"sundhed.dk","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/26/e/banana-rat.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.f6.ru/blog/narketing163/?utm_referrer=https%3A//www.f6.ru/blog/narketing163/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2026/05/18/storm-2949-turned-compromised-identity-into-cloud-wide-breach/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://hacknotice.com/2026/03/16/hualun-new-materials-suffers-massive-data-breach-by-snowsoul/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://dailydarkweb.net/guangdong-caiding-market-group-faces-data-breach-after-extortion/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://dailydarkweb.net/snowsoul-attack-hits-multiple-chinese-organizations/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/windows-backdoor-for-novel-c2-communication/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.qualys.com/qualys-insights/2026/06/02/hazybeacon-aws-lambda-function-url-command-control-abuse","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://labs.withsecure.com/publications/greyvibe","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://hackernoon.com/zeffsec-resurfaces-on-telegram-claims-breach-of-gozine2ir","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/cl-unk-1068-targets-critical-sectors/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.wiz.io/blog/threat-actors-target-crypto-orgs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/ghost-stadium-football-fraud/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://trojan-killer.net/drivesurge-clickfix-fake-browser-updates/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://raw.githubusercontent.com/microsoft/mstic/master/PublicFeeds/ThreatActorNaming/MicrosoftMapping.json","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2026/03/12/storm-2561-uses-seo-poisoning-to-distribute-fake-vpn-clients-for-credential-theft/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://darkwebinformer.com/polish-eco-friendly-retailer-vegehome-suffers-data-breach-exposing-100k-customers/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://darkwebinformer.com/almaex-iranian-cryptocurrency-exchange-breach-allegedly-exposes-over-50-000-user-records/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://darkwebinformer.com/singapore-traditional-chinese-medicine-clinic-kin-teck-tong-allegedly-suffers-data-breach-exposing-150-000-patient-records/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"histories.Sample","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ibm.com/think/x-force/slopoly-start-ai-enhanced-ransomware-attacks","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/26/d/inside-shadow-earth-053.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.xlab.qianxin.com/mr_rot13-the-elusive-6-year-hacker-group-weaponizing-critical-cpanel-flaws-for-backdoor-deployment/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2024/12/19/phishing-platform-rockstar-2fa-trips-and-flowerstorm-picks-up-the-pieces/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://darkwebinformer.com/alleged-breach-of-chiles-ley-del-lobby-platform-exposes-250gb-of-government-lobbying-records-spanning-2018-to-2026/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://darkwebinformer.com/alleged-breach-of-chiles-servicio-civil-platform-exposes-110k-public-servant-records-with-full-names-and-user-ids/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://redpiranha.net/news/threat-intelligence-report-april-21-april-27-2026","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/j/premier-pass-as-a-service.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-8302/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sophos.com/en-us/blog/nickel-alley-strategy-fake-it-til-you-make-it","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/unc6692-social-engineering-custom-malware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://expel.com/blog/inside-lazarus-how-north-korea-uses-ai-to-industrialize-attacks-on-developers/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"tasks.json","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://web-assets.esetstatic.com/wls/en/papers/white-papers/gopherwhisper-burrow-full-malware.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/26/a/shadow-aether-015-earth-preta-mitre.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/new-lua-based-malware-lucidrook/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.confiant.com/news/cashrewindo-investment-scam-unveiled","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.redpacketsecurity.com/krybit-ransomware-victim-fraper-com/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.redpacketsecurity.com/krybit-ransomware-victim-hacked-0apt/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyberdaily.au/security/13464-exclusive-krybit-hackers-claim-breach-of-new-zealand-it-services-provider","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"fraper.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"asesoriauriel.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dataminr.com/resources/intel-brief/pro-iran-actor-ababil-of-minab-claims-cyberattack-on-la-metro/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/graycharlie-hijacks-law-firm-sites-suspected-supply-chain-attack","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://businessinsights.bitdefender.com/coinbase-cartel-ransomware-group-extortion-tactics","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybelangel.com/blog/ruskinet-hacktivism-apt-threats/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/6288047","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/uac-0255-distributing-agewheeze-rat/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://bi.zone/eng/expertise/blog/arcane-werewolf-vernulsya-s-obnovlennym-implantom-loki/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-10608-inside-a-large-scale-automated-credential-harvesting-operation-targeting-web-applications/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.f6.ru/blog/bearlyfy/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/ransomware-ukraine-russia-bearlyfy","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/92988/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cstromblad.com/posts/threat-actor-profile-teampcp/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://flare.io/learn/resources/blog/teampcp-cloud-native-ransomware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/en-us/adversaries/altered-spider/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://tracebit.com/blog/detecting-cicd-supply-chain-attacks-with-canary-credentials","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/26/c/inside-litellm-supply-chain-compromise.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/26/c/teampcp-telnyx-attack-marks-a-shift-in-tactics.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/talos-developing-situation-in-the-middle-east/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sophos.com/en-us/blog/hacktivist-campaigns-increase-as-united-states-iran-and-israel-conflict-intensifies","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/research/firewalls-and-frontlines-the-india-pakistan-cyber-battlefield-crisis/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.netscout.com/blog/asert/keymous-threat-actor-profile","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.radware.com/security/threat-advisories-and-attack-reports/ddos-activity-following-operation-epic-fury-roaring-lion/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rapid7.com/blog/post/tr-iran-cyber-playbook-escalating-regional-conflict/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securitybrief.com.au/story/fake-captcha-scam-targets-2-353-wordpress-sites-warns-cybercx","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/threats-to-defense-industrial-base","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.picussecurity.com/resource/blog/how-noname05716-uses-ddosia-to-attack-nato-targets","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.intel471.com/blog/winter-olympics-2026-hacktivism-surges-ahead-of-protests-and-suspected-sabotage","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/blog/telegram-activity-timeline-iran-israel-us-war/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/security/report/resources/cloud-threat-horizons-report-h1-2026","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://origin-unit42.paloaltonetworks.com/espionage-campaign-against-military-targets/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/groups/G1052/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2026/03/11/contagious-interview-malware-delivered-through-fake-developer-job-interviews/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://about.gitlab.com/blog/gitlab-threat-intelligence-reveals-north-korean-tradecraft/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://botcrawl.com/nippon-medical-school-musashi-kosugi-hospital-data-breach-claimed-by-netrunnerpr/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/gtfire-phishing-scheme/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-9244/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"bloopencil.net","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-8616-sd-wan/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/k/lumma-stealer-browser-fingerprinting.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/j/the-impact-of-water-kurita-lumma-stealer-doxxing.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/g/lumma-stealer-returns.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/c/ai-assisted-fake-github-repositories.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/from-castleloader-to-castlerat-tag-150-advances-operations","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/graybravos-castleloader-activity-clusters-target-multiple-industries","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://nsfocusglobal.com/top-security-incidents-of-2025-the-emergence-of-the-chainedshark-apt-group/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/disrupting-gridtide-global-espionage-campaign/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sprocketsecurity.com/blog/tracing-a-threat-actors-footprints-on-tor","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/the-gentlemen-ransomware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/i/unmasking-the-gentlemen-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/blog/dark-web-profile-the-gentlemen-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit?linkId=59478481","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://isovalent.com/blog/post/voidlink-cloud-malware-detection/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/voidlink/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/new-windows-based-malware-family-airstalk/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.koi.ai/blog/whitecobra-vscode-cursor-extensions-malware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.humansecurity.com/learn/blog/satori-threat-intelligence-alert-slopads-covers-fraud-with-layers-of-obfuscation/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/italian-university-la-sapienza-goes-offline-after-cyberattack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/access-granted-phishing-device-code-authorization-account-takeover","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://flare.io/learn/resources/blog/paytool-targets-canadians-traffic-scams","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cloudsek.com/blog/pivoting-from-paytool-tracking-various-frauds-and-e-crime-targeting-canada","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://harfanglab.io/insidethelab/redkitten-ai-accelerated-campaign-targeting-iranian-protests/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/shadow-campaigns-uncovering-global-espionage/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://ics-cert.kaspersky.com/publications/reports/2025/12/01/apt-and-financial-attacks-on-industrial-organizations-in-q3-2025/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.oligo.security/blog/shadowray-2-0-attackers-turn-ai-against-itself-in-global-campaign-that-hijacks-ai-into-self-propagating-botnet","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/l/SHADOW-VOID-042.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/6286219","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/drat-v2-updated-drat-emerges-tag-140s-arsenal","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/expansion-shinyhunters-saas-data-theft/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.checkpoint.com/research/amaranth-dragon-targeted-cyber-espionage-campaigns-across-southeast-asia/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://rewterz.com/threat-advisory/apt-ung0002-expands-cyber-espionage-campaigns-across-asia-active-iocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.seqrite.com/blog/ung0002-espionage-campaigns-south-asia/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/sedgwick-cyber-incident-ransomware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/unveiling-the-weaponized-web-shell-encystphp","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/digium-phones-web-shell/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2020/inj3ctor3-operation-leveraging-asterisk-servers-for-monetization/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/en/eset-research/bladedfeline-whispering-dark/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://catalyst.prodaft.com/public/report/lucid/overview#paragraph-1055|388","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sgdsn.gouv.fr/publications/analyse-du-mode-operatoire-informationnel-russe-storm-1516","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.defense.gouv.fr/actualites/storm-1516-dessous-dune-operation-dinfluence-russe","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/stimmen-aus-moskau-russian-influence-operations-target-german-elections","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/russian-influence-assets-converge-on-moldovan-elections","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/copycop-deepens-its-playbook-with-new-websites-and-targets","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/10-things-i-hate-about-attribution-romcom-vs-transferloader","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-6382-exploits-cityworks-vulnerability/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.lookout.com/threat-intelligence/article/cryptochameleon-fcc-phishing-kit","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://any.run/cybersecurity-blog/salty2fa-tycoon2fa-hybrid-phishing-2025/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.kelacyber.com/blog/bytetobreach-a-deep-dive-into-a-persistent-data-leak-operator/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-8099-chinese-speaking-cybercrime-group-seo-fraud/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-8099-new-persistence-mechanisms-and-regional-focus/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://global.ptsecurity.com/en/research/pt-esc-threat-intelligence/taxoff-um-you-ve-got-a-backdoor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://global.ptsecurity.com/analytics/pt-esc-threat-intelligence/team46-and-taxoff-two-sides-of-the-same-coin","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"global.ssl.fastly.net","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.sekoia.io/vicioustrap-infiltrate-control-lure-turning-edge-devices-into-honeypots-en-masse/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/dark-pink-episode-2/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/dark-pink-apt/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/news/weekly-intelligence-report-12-december-2025/#:~:text=well%2Dstructured%20operations.-","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.esentire.com/blog/threat-actors-deploy-sinobi-ransomware-via-compromised-sonicwall-ssl-vpn-credentials","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.linkedin.com/feed/update/urn:li:activity:7401414126620884992/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/cant-stop-wont-stop-ta584-innovates-initial-access","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.helpnetsecurity.com/2025/12/18/tracking-scripted-sparrow-phishing-campaigns/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.seqrite.com/blog/operation-cargotalon-ung0901-targets-russian-aerospace-defense-sector-using-eaglet-implant/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.koi.ai/blog/greedybear-650-attack-tools-one-coordinated-campaign","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://redcanary.com/blog/threat-intelligence/mocha-manakin-nodejs-backdoor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/cl-sta-1062-tinyrct-backdoor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-7237-targets-web-hosting-infra/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2025/10/06/investigating-active-exploitation-of-cve-2025-10035-goanywhere-managed-file-transfer-vulnerability/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.spixnet.com/cybersecurity-blog/2023/04/03/newly-exposed-apt43-hacking-group-targeting-us-orgs-since-2018/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://botcrawl.com/saudi-icon-data-breach/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://databreaches.net/2025/11/18/from-bad-to-worse-doctor-alliance-hacked-again-by-same-threat-actor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.hipaajournal.com/doctor-alliance-data-breach-claim/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://botcrawl.com/national-civil-service-commission-of-colombia-data-breach/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/research/cyber-threat-landscape-report-united-arab-emirates-uae/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cip.gov.ua/en/news/zlovmisniki-atakuyut-sili-oboroni-ukrayini-ta-organi-miscevogo-samovryaduvannya-vikoristovuyuchi-temu-protidiyi-rosiiskim-drg","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-8837/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/i/how-ransomhub-ransomware-uses-edrkillshifter-to-disable-edr-and-.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.aryaka.com/blog/batshade-vampire-bot-social-engineering-malware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"samsung-work.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.volexity.com/blog/2025/10/08/apt-meets-gpt-targeted-operations-with-untamed-llms/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.com/183222/apt/ukraine-sees-surge-in-ai-powered-cyberattacks-by-russia-linked-threat-actors.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cip.gov.ua/ua/news/novi-kiberzagrozi-kogo-i-yak-atakuyut-vorozhi-ugrupovannya","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/en/eset-research/ghostredirector-poisons-windows-servers-backdoors-side-potatoes/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2025/10/09/investigating-targeted-payroll-pirate-attacks-affecting-us-universities/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.silentpush.com/blog/poisonseed/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.nviso.eu/2025/08/12/shedding-light-on-poisonseeds-phishing-kit/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sophos.com/fr-fr/blog/doubled-dll-sideloading-dragon-breath","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/blog/ai-powered-gtg-1002-campaign/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybershafarat.com/2025/01/22/darkgaboon-targets-russian-finserv/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/new-hacker-group-lockbit-target-russia","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/92183/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/en/podcasts/eset-apt-activity-report-q4-2024q1-2025-malware-sharing-wipers-exploits/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2023/educated-manticore-iran-aligned-threat-actor-targeting-israel-via-improved-arsenal-of-tools/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.checkpoint.com/security/check-point-research-uncovers-rare-techniques-used-by-iranian-affiliated-threat-actor-targeting-israeli-entities/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2025/iranian-educated-manticore-targets-leading-tech-academics","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.varonis.com/blog/salesforce-vishing-threat-unc604","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/technical-analysis-vishing-threats/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/prc-nexus-espionage-targets-diplomats/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/triofox-vulnerability-cve-2025-12480","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/dprk-adopts-etherhiding","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/sonicwall-secure-mobile-access-exploitation-overstep-backdoor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.jamf.com/blog/chillyhell-a-modular-macos-backdoor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/creative-phishing-academics-critics-of-russia","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/cybercriminals-weaponize-fake-ai-websites","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/l/water-saci.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/j/active-water-saci-campaign-whatsapp-update.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"terra.com.br","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.koi.ai/blog/4-million-browsers-infected-inside-shadypanda-7-year-malware-campaign","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-9686/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secpod.com/blog/zero-day-crisis-cve-2025-20393-unpatched-on-cisco-email-gateways-exploited-by-china-linked-hackers/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://botcrawl.com/chinese-apt-longnosedgoblin-targets-government-networks-in-southeast-asia-and-japan/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/e/earth-lamia.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/threat-actors-exploit-react2shell-cve-2025-55182","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/91139/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://meterpreter.org/anssi-exposes-houken-china-linked-apt-exploiting-ivanti-csa-zero-days-deploying-linux-rootkits/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cert.ssi.gouv.fr/cti/CERTFR-2025-CTI-009/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bitdefender.com/en-us/blog/businessinsights/curly-comrades-new-threat-actor-targeting-geopolitical-hotbeds","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bitdefender.com/en-us/blog/businessinsights/curly-comrades-evasion-persistence-hidden-hyper-v-virtual-machines","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.eclecticiq.com/china-nexus-nation-state-actors-exploit-sap-netweaver-cve-2025-31324-to-target-critical-infrastructures","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/espionage-campaign-targets-south-asian-entities/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/en/eset-research/thewizards-apt-group-slaac-spoofing-adversary-in-the-middle-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.com/182866/data-breach/cybercrime-group-claims-to-have-breached-red-hat-s-private-github-repositories.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.techzine.eu/news/security/135120/red-hat-hit-by-github-breach-570gb-stolen-including-client-info/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybersecuritynews.com/red-hat-data-breach/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/phish-china-aligned-espionage-actors-ramp-up-taiwan-semiconductor-targeting","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybersecuritynews.com/nighteagle-apt-exploiting-0-days/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2025/07/nighteagle-apt-exploits-microsoft.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.authentic8.com/blog/cyber-intel-brief-nighteagle-apt-ai-deepfakes-spnego-flaw","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/cleaning-out-inboxes-ta488-comes-outlook-another-half-click-exploit","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/6286942","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.aivd.nl/actueel/nieuws/2025/05/27/onbekende-russische-groep-achter-hacks-nederlandse-doelen","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2025/05/27/new-russia-affiliated-actor-void-blizzard-targets-critical-sectors-for-espionage/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.volexity.com/blog/2025/04/22/phishing-for-codes-russian-threat-actors-target-microsoft-365-oauth-workflows/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/posts/hive00117-fileless-malware-delivery-eastern-europe/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.eclecticiq.com/from-callback-phishing-to-extortion-luna-moth-abuse-reamaze-helpdesk-and-rmm-tools-against-u.s.-legal-and-financial-sectors","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.malwarebytes.com/blog/social-engineering/2020/09/malvertising-campaigns-come-back-in-full-swing","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2020/11/malsmoke-operators-abandon-exploit-kits-in-favor-of-social-engineering-scheme/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.malwarebytes.com/blog/news/2025/04/fake-social-security-statement-emails-trick-users-into-installing-remote-tool","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"gomolatori.cyou","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.trailofbits.com/2025/04/17/mitigating-elusive-comet-zoom-remote-control-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.forescout.com/blog/threat-analysis-sap-vulnerability-exploited-in-the-wild-by-chinese-threat-actor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cip.gov.ua/en/news/cert-ua-poperedzhaye-pro-cilespryamovani-ataki-na-sili-oboroni-z-vikoristannyam-novogo-bekdoru-cabinetrat","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/tag-124-multi-layered-tds-infrastructure-extensive-user-base","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/uncovering-mintsloader-with-recorded-future-malware-intelligence-hunting","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2025/04/23/understanding-the-threat-landscape-for-kubernetes-and-containerized-assets/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/russia-carmoney-data-breach-ukrainian-cyber-alliance","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybersecurity88.com/news/algerias-ministry-of-pharmaceutical-industry-data-leaked-in-retaliatory-cyberattack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/d/earth-kurma-apt-campaign.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.infoblox.com/threat-intelligence/uncovering-actor-ttp-patterns-and-the-role-of-dns-in-investment-scams/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ibm.com/think/x-force/strela-stealer-todays-invoice-tomorrows-phish","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/detect-uac-0226-attacks-against-ukraine/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/6282946","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://github.com/tihanyin/PSSW100AVB)","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://s2w.inc/en/resource/detail/581","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://trojan-killer.net/how-to-remove-lilith-rat-complete-removal-guide/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.aquasec.com/blog/pg_mem-a-malware-hidden-in-the-postgres-processes/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.wiz.io/blog/postgresql-cryptomining","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/c/deep-dive-into-water-gamayun.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/c/the-espionage-toolkit-of-earth-alux.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/operation-forumtroll/115989/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/detect-uac-0219-attacks-against-ukrainian-state-bodies","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/6282902","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.security.com/threat-intelligence/jewelbug-apt-russia","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.elastic.co/security-labs/fragile-web-ref7707","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/advanced-backdoor-squidoor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybershafarat.com/2025/03/10/dienet-and-shiite_harvest-claimed-responsibility-for-disabling-ten-significant-iraqi-websites/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.seqrite.com/blog/operation-hollowquill-russian-rd-networks-malware-pdf/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2025/04/08/exploitation-of-clfs-zero-day-leads-to-ransomware-activity/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.resecurity.com/blog/article/cybercriminals-attacked-national-social-security-fund-of-morocco-millions-of-digital-identities-at-risk-of-data-breach","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-5918-targets-critical-infra-in-taiwan/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/goffee-apt-new-attacks/116139/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2025/04/03/threat-actors-leverage-tax-season-to-deploy-tax-themed-phishing-campaigns/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.seqrite.com/blog/swan-vector-apt-targeting-taiwan-japan-dll-implants/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/fingerprint-heists/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyjax.com/resources/blog/new-extortion-ransomware-group-linkc-emerges-what-you-need-to-know/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/research/tracking-ransomware-february-2025/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.redhotcyber.com/en/post/linkc-ransomware-the-new-cybercriminal-group-targeting-artificial-intelligence-data/#google_vignette","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.forescout.com/blog/new-ransomware-operator-exploits-fortinet-vulnerability-duo/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@knownsec404team/love-and-hate-under-war-the-gamacopy-organization-which-imitates-the-russian-gamaredon-uses-560ba5e633fa?source=rss-f1efd6b74751------2","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2025/02/13/storm-2372-conducts-device-code-phishing-campaign/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/research/tracking-ransomware-january-2025/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://services.google.com/fh/files/misc/threat_horizons_report_h1_2025.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/b/updated-shadowpad-malware-leads-to-ransomware-deployment.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.virusbulletin.com/virusbulletin/2019/11/vb2019-paper-vine-climbing-over-great-firewall-longterm-attack-against-china/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.antiy.net/p/greenspotoperations-grow-for-many-years/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://hunt.io/blog/greenspot-apt-targets-163com-fake-downloads-spoofing","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/86535/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.darkowl.com/blog-content/what-are-cves/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/cyber-anarchy-squad-attacks-with-uncommon-trojans/114990/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/unit-42-ransomware-leak-site-data-analysis/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://catalyst.prodaft.com/public/report/larva-208/overview","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.scworld.com/brief/over-600-organizations-subjected-to-global-encrypthub-attacks","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.microsoft.com/on-the-issues/2025/02/27/disrupting-cybercrime-abusing-gen-ai/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/en/eset-research/plushdaemon-compromises-supply-chain-korean-vpn-service/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.morphisec.com/blog/sticky-werewolfs-aviation-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/angry-likho-apt-attacks-with-lumma-stealer/115663/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/javaghost-cloud-phishing/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://go.crowdstrike.com/rs/281-OBQ-266/images/ebook-modern-adversaries-and-evasion-techniques-2023.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/adversaries/wandering-spider/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/threat-actor-groups-tracked-by-palo-alto-networks-unit-42/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/-/media/files/us/reports/state-of-the-threat/secureworks-se-2023-sott-report.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/-/media/files/us/reports/ir-quarterly-reports/secureworks-learning-from-ir-jan-mar-2023.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/-/media/files/us/reports/secureworks-learning-from-incident-response-2022.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/-/media/Files/US/Reports/state%20of%20the%20threat/secureworks-state-of-the-threat-report-2024.ashx","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/gold-rebellion","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"issues.Other","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"others.GOLD","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"scheme.Several","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://applied-gai-in-security.ghost.io/security-copilot-promptbook-threat-actor-profile/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=U7p0J8aMZhM&t=193s","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"access.This","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://global.ptsecurity.com/analytics/pt-esc-threat-intelligence/excobalt-gored-the-hidden-tunnel-technique","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/fortigate-firewall-configs-cve-2022-40684-exploitation/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-data-posting","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/operation-drbcontrol-uncovering-a-cyberespionage-campaign-targeting-gambling-companies-in-southeast-asia","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/catching-ec2-grouper-no-indicators-required","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/eagerbee-backdoor/115175/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cisoseries.com/cyber-security-news-cyber-trust-label-uk-deepfake-laws-treasury-attack-details/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/blog/2022-ics-ot-threat-landscape-recap-what-to-watch-for-this-year/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/6281632","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2023/02/16/altoufan-team-targets-the-middle-east/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/en-us/blog/liminal-panda-telecom-sector-threats/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/burrowing-your-way-into-vpns","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/darkside-affiliate-supply-chain-software-compromise","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/shining-a-light-on-darkside-ransomware-operations","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.silentpush.com/blog/aiz-retail-crypto-phishing/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybershafarat.com/2024/07/22/hacking-group-anonymous-ksa-a-notorious-threat-actor-is-targeting-india-in-a-series-of-cyber-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://x.com/DailyDarkWeb/status/1807783849608286296","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyjax.com/resources/blog/take-me-down-to-funksec-town-funksec-ransomware-dls-emergence/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.techspot.com/news/105785-mas-developers-achieve-major-breakthrough-windows-office-cracking.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"massgrave.dev","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-peep-17-dark-web-hacker-forums-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2025/09/chinese-hackers-rednovember-target.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/tag-100-uses-open-source-tools-in-suspected-global-espionage-campaign","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2024/11/22/microsoft-shares-latest-intelligence-on-north-korean-and-chinese-threat-actors-at-cyberwarcon/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ncsc.admin.ch/ncsc/en/home/aktuell/im-fokus/2024/gorilla_bericht.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/k/water-barghest.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.volexity.com/blog/2024/11/15/brazenbamboo-weaponizes-forticlient-vulnerability-to-steal-vpn-credentials-via-deepdata/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyjax.com/resources/blog/an-elephant-in-kairos-data-leak-site-emerges-for-new-extortion-group/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.clearskysec.com/irdreamjob24/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.eclecticiq.com/inside-intelligence-center-financially-motivated-chinese-threat-actor-silkspecter-targeting-black-friday-shoppers","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/china-nexus-tag-112-compromises-tibetan-websites","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.clearskysec.com/0d-vulnerability-exploited-in-the_wild/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://quointelligence.eu/2024/06/analyzing-shift-in-ransomware-dynamics/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://jp.security.ntt/insights_resources/tech_blog/en-waterplum-ottercookie/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/d/russian-infrastructure-north-korean-cybercrime.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/fake-north-korean-it-worker-activity-cluster/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://web-assets.esetstatic.com/wls/en/papers/threat-reports/eset-apt-activity-report-q2-2024-q3-2024.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://databreaches.net/2024/11/12/amazon-confirms-employee-data-breach-after-vendor-hack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-web-profile-spacebears/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thecyberexpress.com/killnet-2-0-and-sylhet-gang-hackers/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.checkpoint.com/security/evolving-cyber-dynamics-amidst-the-israel-hamas-conflict/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/mastercard-data-leak-new-fully-undetectable-ransomware-elusive-stealer-source-code-leak-and-more/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://x.com/MonThreat/status/1821478543001293136","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://x.com/MonThreat/status/1851901195201163720","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/research/hamas-leadership-assassination-explainer/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.seqrite.com/blog/operation-cobalt-whisper-targets-industries-hong-kong-pakistan/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/internet-archive-data-breach-and-ddos-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityboulevard.com/?p=2033037","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.radware.com/security/threat-advisories-and-attack-reports/six-day-web-ddos-attack-campaign/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thecyberexpress.com/sn-blackmeta-claim-snapchat-cyberattack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://dailydarkweb.net/darkraas-allegedly-breached-a-major-oil-and-gas-company/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyberpress.org/darkraas-ransomware-intelligence-data/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyberpress.org/darkraas-ransomware-oil-gas-company/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://nao-sec.org/2024/10/IcePeony-with-the-996-work-culture.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/6281076","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyble.com/blog/phishing-campaign-targeting-ukraine-uac-0215/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/j/water-makara-uses-obfuscated-javascript-in-spear-phishing-campai.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/fortimanager-zero-day-exploitation-cve-2024-47575/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.scworld.com/brief/austria-subjected-to-pro-russian-ddos-intrusions","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/biggest-education-industry-attacks-in-2024/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://dailydarkweb.net/lulzsec-black-claims-cyberattacks-on-emirati-government-and-other-sector-targets/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyjax.com/the-hacktivist-response-to-uk-foreign-policy/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.radware.com/blog/security/2024/08/megamedusa-rippersec-public-web-ddos-attack-tool/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.checkpoint.com/security/hacktivists-call-for-release-of-telegram-founder-with-freedurov-ddos-campaign/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bitdefender.com/en-us/blog/hotforsecurity/us-offers-10-million-bounty-for-members-of-iranian-hacking-gang/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityonline.info/shahid-hemmat-hackers-10m-reward-offered-by-us/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2024/10/31/pacific-rim-timeline/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2024/10/31/pacific-rim-neutralizing-china-based-threat/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.theregister.com/2024/09/25/china_anonymous_64_taiwan_accusations/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/luigicamastra/apt-group-targeting-governmental-agencies-in-east-asia/?utm_source=rss&utm_medium=rss&utm_campaign=apt-group-targeting-governmental-agencies-in-east-asia","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/task/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"BackDoor.RemShell","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.ptsecurity.com/upload/corporate/ww-en/analytics/APT-Attacks-eng.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/en/eset-research/separating-bee-panda-ceranakeeper-making-beeline-thailand/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://bi.zone/eng/expertise/blog/core-werewolf-protiv-opk-i-kriticheskoy-infrastruktury/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/awaken-likho-apt-new-implant-campaign/114101/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@criminalip/skidsec-hacker-group-announces-plans-to-spread-north-korean-propaganda-through-hacked-printers-in-fdd314178dc4","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-peep-7-shadows-of-betrayal-and-leadership-in-flux/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/unc1860-iran-middle-eastern-networks","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/en/eset-research/cosmicbeetle-steps-up-probation-period-ransomhub/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://intezer.com/blog/research/stealth-wiper-israeli-infrastructure/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/blogs/research/handalas-wiper-targets-israel/","to_ids":true,"timestamp":"1786036382","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.splunk.com/en_us/blog/security/handalas-wiper-threat-analysis-and-detections.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thecyberexpress.com/azzasec-noname-join-hands-to-target-ukriane/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-peep-16-play-ransomware-lockbits-alliance-breachforums-leak-and-cyberniggers-revival/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.techtarget.com/searchsecurity/news/366547445/CrowdStrike-observes-massive-spike-in-identity-based-attacks","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/dragon-rank-seo-poisoning/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://x.com/MsftSecIntel/status/1836456406276342215","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cisoseries.com/cybersecurity-news-inc-targets-healthcare-providence-schools-cyberattack-apple-ipads-bricked/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.cloudflare.com/unraveling-sloppylemming-operations/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/content/dam/trendmicro/global/en/research/24/i/earth-baxia-uses-spear-phishing-and-geoserver-exploit-to-target-apac/IOCs%20-%20Earth%20Baxia%20Uses%20Spear-Phishing%20and%20GeoServer%20Exploit%20to%20Target%20APAC.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/i/earth-baxia-spear-phishing-and-geoserver-exploit.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://jp.security.ntt/tech_blog/appdomainmanager-injection","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.tgsoft.it/news/news_archivio.asp?id=1568","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://dailydarkweb.net/sensitive-israeli-ministry-data-allegedly-leaked-on-dark-web/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://hackread.com/hacker-leaks-data-of-vk-users-russian-social-network/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyble.com/blog/analysing-the-utg-q-010-campaign/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://malware.news/t/playstation-5-hacked-twice/54441/1","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://arstechnica.com/gaming/2021/11/uncovered-ps5-encryption-keys-are-the-first-step-to-unlocking-the-console/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.0x7d0.dev/history/how-the-nintendo-wii-security-was-defeated/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.microsoft.com/on-the-issues/2024/06/02/russia-cyber-bots-disinformation-2024-paris-olympics/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/moonpeak-malware-infrastructure-north-korea/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://news.risky.biz/risky-biz-news-doppelganger-gets-a-kick-in-the-butt-from-uncle-sam/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://flashpoint.io/blog/pro-kremlin-hacktivist-groups/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.scmagazine.com/brief/significant-ransom-payment-by-major-iranian-it-firm-underway","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybershafarat.com/2024/09/04/major-ir-leaks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.oodaloop.com/briefs/2024/01/04/pilfered-data-from-iranian-insurance-and-food-delivery-firms-leaked-online/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cisoseries.com/cyber-security-headlines-google-5b-suit-settled-orbit-chain-loses-80m-fda-cyber-agreement/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.hackread.com/iranian-food-delivery-snappfood-cyber-attack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.securonix.com/blog/securonix-threat-labs-monthly-intelligence-insights-september-2023/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.googlecloudcommunity.com/gc/Community-Blog/Finding-Malware-Unveiling-NUMOZYLOD-with-Google-Security/ba-p/789551","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://dailydarkweb.net/a-threat-actor-alleged-breach-of-sri-lankan-farmers-community-database/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://dailydarkweb.net/threat-actor-claimed-to-breach-database-of-dimecuba/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://dailydarkweb.net/threat-actor-claims-breach-of-siam-cement-group-database/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"DimeCuba.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/lightshow-north-korea-unc2970","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.oodaloop.com/briefs/2024/08/21/toyota-customer-employee-data-leaked-in-confirmed-data-breach/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://siliconangle.com/2024/08/20/toyota-alleges-stolen-customer-data-published-hacking-site-came-outside-supplier/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://nsfocusglobal.com/new-apt-group-actor240524-a-closer-look-at-its-cyber-tactics-against-azerbaijan-and-israel/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/e/earth-ammit.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/i/tidrone-targets-military-and-satellite-industries-in-taiwan.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/suspected-chinese-persist-sonicwall","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/x-force/hive0137-on-ai-journey/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/adversaries/curly-spider/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://go.crowdstrike.com/rs/281-OBQ-266/images/CrowdStrikeGlobalThreatReport2025.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/walmartglobaltech/qbot-is-back-connect-2d774052369f","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://x.com/Unit42_Intel/status/1880368272610050459","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://services.google.com/fh/files/misc/m-trends-2024.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://services.google.com/fh/files/misc/m_trends_2023_report.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://techcommunity.microsoft.com/blog/microsoftsecurityexperts/phish-click-breach-hunting-for-a-sophisticated-cyber-attack/4267916","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://x.com/MsftSecIntel/status/1881751635598139714","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.esentire.com/security-advisories/ongoing-email-bombing-campaigns-leading-to-remote-access-and-post-exploitation","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2025/01/21/sophos-mdr-tracks-two-ransomware-campaigns-using-email-bombing-microsoft-teams-vishing/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/detecting-disrupting-malvertising-backdoors/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.security.com/threat-intelligence/black-basta-ransomware-zero-day","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/unc4393-goes-gently-into-silentnight","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/hacktivist-usdod-claims-to-have-leaked-threat-actor-list/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://hackread.com/hacker-scrapes-publishes-crowdstrike-ioc-list/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://x.com/MsftSecIntel/status/1849518751080644921","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Exploit:Python/CVE-2024-1709.A!dha&ThreatID=2147903327","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2024/07/29/ransomware-operators-exploit-esxi-hypervisor-vulnerability-for-mass-encryption/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/ta4903-actor-spoofs-us-government-small-businesses-phishing-bec-bids","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/apt45-north-korea-digital-military-machine","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/4928679","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/uac-0102-phishing-attack-detection-hackers-steal-authentication-data-impersonating-the-ukr-net-web-service/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2024/stargazers-ghost-network/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/4697016","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/uac-0063-attack-detection-hackers-target-ukrainian-research-institutions-using-hatvibe-cherryspy-and-cve-2024-23692/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@DoingFedTime/80-000-records-exposed-in-shell-data-breach-by-threat-actor-888-64c407dfac94","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/H4ckManac/status/1810569160180515171","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cloudways.com/blog/hacker-allegedly-leaks-data-from-shopify-breach-on-breachforums/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybersecuritynews.com/threats-claimimg-breach/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/nullbulge-threat-actor-masquerades-as-hacktivist-group-rebelling-against-ai/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://news.risky.biz/risky-biz-news-us-takes-down-rts-twitter-bot-farm/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://rt-solar.ru/solar-4rays/blog/4506/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://sysdig.com/blog/crystalray-rising-threat-actor-exploiting-oss-tools/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/g/CVE-2024-38112-void-banshee.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/from-the-front-lines-8220-gang-massively-expands-cloud-botnet-to-30000-infected-hosts/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.aquasec.com/8220-gang-confluence-vulnerability-cve-2022-26134","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/e/8220-gang-evolution-new-strategies-adapted.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/51568/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.imperva.com/blog/imperva-detects-undocumented-8220-gang-activities/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.uptycs.com/blog/8220-gang-cryptomining-cloud-based-infrastructure-cyber-threat","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/e/decoding-8220-latest-obfuscation-tricks.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/f/water-sigbin-xmrig.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/cloudsorcerer-new-apt-cloud-actor/113056/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/boolka/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.google/threat-analysis-group/over-50000-instances-of-dragonbridge-activity-disrupted-in-2022/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://quointelligence.eu/2024/06/european-election-at-risk-analysis/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/prc-dragonbridge-influence-elections/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://meterpreter.org/cybersecurity-firm-hacked-sensitive-data-on-sale/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.com/164263/cyber-crime/pandabuy-extorted-again.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.malwarebytes.com/blog/news/2024/06/was-t-mobile-compromised-by-a-zero-day-in-jira","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cysecurity.news/2024/06/infamous-hacker-intelbroker-breaches.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://ics-cert.kaspersky.com/publications/reports/2024/04/02/apt-and-financial-attacks-on-industrial-organizations-in-h2-2023/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/hellhounds-operation-lahat-part-2/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.csoonline.com/article/3684668/cyberattacks-against-governments-jumped-95-in-last-half-of-2022-cloudsek-says.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyberint.com/blog/research/bluehornet-one-apt-to-terrorize-them-all/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/sg-vhive-attackers-escalate-take-control-of-furniture-retailers-email-server/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/sg-vhive-alerts-consumers-to-cyberattack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/singapore-real-estate-firm-breached-by-altdos/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/advisories-are-published-but-are-enough-entities-reading-them-and-taking-precautions/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/altdos-claims-to-have-hacked-one-of-malaysias-biggest-conglomerates/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/singapore-corporations-making-progress-in-preventing-cyberattacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/sneakychef-sugarghost-rat/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/redjuliett-intensifies-taiwanese-cyber-espionage-via-network-perimeter","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/pypi-phishing-campaign-juiceledger-threat-actor-pivots-from-fake-apps-to-supply-chain-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"pypi.org","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.co/wordpress/133881/data-breach/mbda-alleged-data-breach.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybershafarat.com/2022/07/31/adrastea-hackers-claim-leading-european-designer-and-manufacturer-of-missile-systems-mbda-hacked/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.itsecurityguru.org/2022/09/14/documents-for-sale-on-the-dark-web/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cysecurity.news/2022/11/missile-supplier-mbda-breach-disclosed.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/the-travels-of-markopolo-self-proclaimed-meeting-software-vortax-spreads-infostealers","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.darkreading.com/remote-workforce/vortax-meeting-software-branding-spreads-infostealers","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/f/behind-the-great-wall-void-arachne-targets-chinese-speaking-user.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"TEMP.Vermin","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/6279600","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/russian-vermin-hackers-target-ukraine","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/vermin-uac-0020-hacking-collective-hits-ukrainian-government-and-military-with-spectr-malware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thedfirreport.com/2022/07/11/select-xmrig-from-sqlserver/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.akamai.com/blog/security/the-bondnet-army","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/66662/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/security-brief-ta571-delivers-icedid-forked-loader","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cysecurity.news/2024/06/truist-bank-confirms-data-breach-after.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2024/17th-june-threat-intelligence-report/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-gitloker-attacks-wipe-github-repos-in-extortion-scheme/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.itsecurityguru.org/2024/06/13/guest-blog-proactive-application-security-learning-from-the-recent-github-extortion-campaigns/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://ti.qianxin.com/blog/articles/Operation-Veles-Decade-Long-Espionage-Targeting-the-Global-Research-and-Education-Sector-EN/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-web-profile-hunt3r-kill3rs/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/lilacsquid/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.darkreading.com/threat-intelligence/sexi-ransomware-desires-vmware-hypervisors","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://heimdalsecurity.com/blog/powerhosts-esxi-servers-encrypted-with-new-sexi-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cybersecurity-insiders.com/proven-data-restores-powerhosts-vmware-backups-after-sexi-ransomware-attack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cloudflare.com/threat-intelligence/research/report/disrupting-flyingyetis-campaign-targeting-ukrainev/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2024/12/11/frequent-freeloader-part-ii-russian-actor-secret-blizzard-using-tools-of-other-groups-to-attack-ukraine/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.cloudflare.com/disrupting-flyingyeti-campaign-targeting-ukraine","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.darkowl.com/blog-content/2-month-review-of-cyber-activities-in-the-israel-hamas-conflict/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/reflections-of-the-israel-palestine-conflict-on-the-cyber-world/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/unfading-sea-haze-hackers-hide-on-military-and-govt-networks-for-6-years/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.securityweek.com/newly-detected-chinese-group-targeting-military-government-entities/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/ransomware-evolution-how-cheated-affiliates-are-recycling-victim-data-for-profit/","to_ids":true,"timestamp":"1786036382","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://forescoutstage.wpengine.com/blog/analysis-a-new-ransomware-group-emerges-from-the-change-healthcare-cyber-attack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/threat-intelligence/ransomhub-knight-ransomware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/anatomy-of-alpha-spider-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2024/bad-karma-no-justice-void-manticore-destructive-activities-in-israel/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cysecurity.news/2024/04/cryptocurrency-chaos-el-salvadors.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.com/162790/data-breach/el-salvador-massive-leak-biometric-data.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyble.com/blog/head-mare-deploys-phantomcore-against-russia/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/head-mare-hacktivists/113555/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.facct.ru/blog/phantomdl-loader","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/russian-researchers-winrar-bug-ukraine-espionage","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/e/water-orthrus-new-campaigns-deliver-rootkit-and-phishing-modules.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2023/09/fbi-hacker-dropped-stolen-airbus-data-on-9-11/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cysecurity.news/2023/09/transunion-refutes-data-breach-reports.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.hackread.com/us-environmental-protection-agency-hacked-data-leaked/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/6277849","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/uac-0149-attack-detection-hackers-launch-a-targeted-attack-against-the-armed-forces-of-ukraine-as-cert-ua-reports/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/cve20243400vulnerability-removal/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.resecurity.com/blog/article/cybercriminals-leaked-massive-volumes-of-stolen-pii-data-from-thailand-in-dark-web","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.com/162136/cyber-crime/hackers-threaten-leak-world-check.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"Breachforums.is","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/hackers-claim-to-breach-russia-prosecutor-general-database","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/starry-addax/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://sysdig.com/blog/rubycarp-romanian-botnet-group/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/coralraider-targets-socialmedia-accounts/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-update-pro-ukraine-hacktivists-breach-russian-isp-as-revenge-for-kyivstar-attack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.securityweek.com/destructive-ics-malware-fuxnet-used-by-ukraine-against-russian-infrastructure/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/fuxneticsmalware-removal/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.resecurity.com/blog/article/Smishing-Triad-Impersonates-Emirates-Post-Target-UAE-Citizens","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2024/agent-tesla-targeting-united-states-and-australia/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-web-profile-cyberniggers/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/u-s-faces-cyber-onslaught-fico-breach-id-cc-military-data-sale/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/acuity-federal-breach-okta-leak-dcrat-exploit/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/initial-access-brokers-exploit-f5-screenconnect","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://rhisac.org/threat-intelligence/f5-big-ip-and-screenconnect-cves/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.sekoia.io/tycoon-2fa-an-in-depth-analysis-of-the-latest-version-of-the-aitm-phishing-kit/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.chronline.com/stories/a-hacking-slugfest-between-iran-and-its-foes-sparks-fears-of-a-wider-cyberwar","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.com/142172/hacktivism/iranian-state-tv-hacked.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2022/evilplayout-attack-against-irans-state-broadcaster/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.resecurity.com/blog/article/the-aviation-and-aerospace-sectors-face-skyrocketing-cyber-threats","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/c/earth-krahang.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-china-linked-earth-krahang-apt-breached-70-organizations-in-23-nations-active-iocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2025/12/05/sharpening-the-knife-gold-blades-strategic-evolution/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/c/unveiling-earth-kapre-aka-redcurls-cyberespionage-tactics-with-t.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyble.com/blog/cyble-chronicles-february-1-latest-findings-recommendations-for-the-cybersecurity-community/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://logrhythm.com/blog/how-government-agencies-can-defend-against-exfiltration-tactics/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/epic-games-zero-evidence-we-were-hacked-by-mogilevich-gang/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/ireland-dfa-no-evidence-of-cybersecurity-breach","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.checkpoint.com/research/iranian-threat-actor-nimbus-manticore-expands-campaigns-into-europe-with-advanced-malware-and-fake-job-lures/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2025/nimbus-manticore-deploys-new-malware-targeting-europe","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/suspected-iranian-unc1549-targets-israel-middle-east","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.morphisec.com/unveiling-uac-0184-the-remcos-rat-steganography-saga","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.zscaler.com/blogs/security-research/european-diplomats-targeted-spikedwine-wineloader","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/goldfactory-ios-trojan/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"Cyber.Anarchy.Squad","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/proukraine-hackers-claim-to-take-down-russian-isp","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://srslyriskybiz.substack.com/p/russias-extradition-wars-are-not","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.phishlabs.com/blog/phishing-service-profile-labhost-threat-actor-group","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/shadowsyndicate-raas/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/resumelooters/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/adversaries/banished-kitten/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/copacabana-barcelona-cross-continental-threat-brazilian-banking-malware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://blog.trendmicro.com/trendlabs-security-intelligence/osx_dok-mac-malware-emmental-hijacks-user-network-traffic/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/18/h/the-urpage-connection-to-bahamut-confucius-and-patchwork.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/b/invitation-to-secret-event-uncovering-earth-yako-campaigns.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_my/research/18/h/supply-chain-attack-operation-red-signature-targets-south-korean-organizations.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/threatintel/avast-finds-backdoor-on-us-government-commission-network/?utm_source=rss&utm_medium=rss&utm_campaign=avast-finds-backdoor-on-us-government-commission-network","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/operation-ghoul-targeted-attacks-on-industrial-and-engineering-organizations/75718/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/kaspersky-security-bulletin-2016-executive-summary/76858/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/operation-triangulation-catching-wild-triangle/110916/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/research/redmike-salt-typhoon-exploits-vulnerable-devices","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.wsj.com/politics/national-security/china-cyberattack-internet-providers-260bd835","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sygnia.co/blog/ghost-emperor-demodex-rootkit/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/unc4841-post-barracuda-zero-day-remediation","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ncsc.gov.uk/files/NCSC-MAR-SparrowDoor.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2021/09/23/famoussparrow-suspicious-hotel-guest/","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2021/09/30094337/GhostEmperor_technical-details_PDF_eng.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/revengehotels/95229/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/apt-review-of-the-year/89117/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/apt-trends-report-q3-2019/94530/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/ksb-2019-review-of-the-year/95394/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/tomiris-called-they-want-their-turla-malware-back/109552/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/apt-trends-report-q1-2022/106351/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/apt-trends-report-q2-2022/106995/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/threat-actor-profile-ta2719-uses-colorful-lures-deliver-rats-local-languages","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/new-threat-actor-spoofs-philippine-government-covid-19-health-data-widespread","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/ta2552-uses-oauth-access-token-phishing-exploit-read-only-risks","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MsftSecIntel/status/1712936244987019704?lang=en","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bridewell.com/insights/blogs/detail/analysing-widespread-microsoft365-credential-harvesting-campaign","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.linkedin.com/pulse/cyber-criminals-using-evilproxy-phishing-kit-target-senior-soral/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"indeed.com","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-widely-abused-msix-app-installer-disabled-by-microsoft-active-iocs/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/cglyer/status/1546297609215696897","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://readme.security/cybercrime-is-more-of-a-threat-than-nation-state-hackers-6f6cccf47721","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/east-tennessee-childrens-hospital-updates-information-on-ransomware-incident/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/nwgenransomware-removal/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/threatresearch/avast-q2-2023-threat-report/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.sekoia.io/sekoia-io-mid-2023-ransomware-threat-landscape","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/research/akira-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/crimeware-report-fakesg-akira-amos/111483/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2023/12/20/cryptoguard-an-asymmetric-approach-to-the-ransomware-battle/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.microsoft.com/on-the-issues/2023/12/13/cybercrime-cybersecurity-storm-1152-fraudulent-accounts/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityboulevard.com/2023/12/microsoft-storm-1152-crackdown-stopping-threat-actors/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/monthly-news-november-2023/ba-p/3970796","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-update-microsoft-warns-of-emerging-threat-by-storm-0539-behind-gift-card-frauds/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.picussecurity.com/resource/h0lygh0st-north-korean-threat-group-strikes-back-with-new-ransomware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2022/07/14/north-korean-threat-actor-targets-small-and-midsize-businesses-with-h0lygh0st-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2022/08/h0lygh0st-ransomware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-040a","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.microsoft.com/on-the-issues/2023/12/07/russia-ukraine-digital-threat-celebrity-cameo-mtac/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://circleid.com/posts/20230824-signs-of-muddywater-developments-found-in-the-dns","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://services.google.com/fh/files/misc/m-trends-2025-en.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/moneybirdransomware-removal/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/iran-linked-hackers-target-israel-education-tech-sectors","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/agonizing-serpens-attack-detection-iran-backed-hackers-target-israeli-tech-firms-and-educational-institutions/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.oodaloop.com/archive/2024/01/02/critical-infrastructure-remains-the-brass-ring-for-cyber-attackers-in-2024/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MsftSecIntel/status/1730383711437283757","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://gbhackers.com/vedalia-apt-group-exploits/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.securonix.com/blog/stiffbizon-detection-new-attack-campaign-observed/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-konni-apt-group-active-iocs-11","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://paper.seebug.org/3031/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2023/06/08/detecting-and-mitigating-a-multi-stage-aitm-phishing-and-bec-campaign/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MsftSecIntel/status/1696273952870367320","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/monthly-news-july-2023/ba-p/3860740","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MsftSecIntel/status/1570911625841983489","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.microsoft.com/on-the-issues/2020/11/13/health-care-cyberattacks-covid-19-paris-peace-forum/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MsftSecIntel/status/1535417776290111489","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://riskybiznews.substack.com/p/risky-biz-news-google-shuts-down","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityboulevard.com/2022/10/analysis-of-cisa-releases-advisory-on-top-cves-exploited-chinese-state-sponsored-groups/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2023/the-rhysida-ransomware-activity-analysis-and-ties-to-vice-society/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://detect.fyi/rhysida-ransomware-and-the-detection-opportunities-3599e9a02bb2","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://fourcore.io/blogs/rhysida-ransomware-history-ttp-adversary-emulation","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2022/10/25/dev-0832-vice-society-opportunistic-ransomware-campaigns-impacting-us-education-sector/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2022/03/second-new-isaacwiper-data-wiper.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/ESETresearch/status/1503436420886712321","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.microsoft.com/security/blog/2022/06/13/the-many-lives-of-blackcat-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://techcommunity.microsoft.com/t5/microsoft-security-experts-blog/defender-experts-chronicles-a-deep-dive-into-storm-0867/ba-p/3911769","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2021/11/16/strategic-web-compromises-middle-east-pinch-candiru/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://citizenlab.ca/2021/12/pegasus-vs-predator-dissidents-doubly-infected-iphone-reveals-cytrox-mercenary-spyware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/janvojtesek/the-return-of-candiru-zero-days-in-the-middle-east/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/threatresearch/avast-q2-2022-threat-report/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/unc4990-evolution-usb-malware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://citizenlab.ca/2023/04/spyware-vendor-quadream-exploits-victims-customers/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2023/04/11/dev-0196-quadreams-kingspawn-malware-used-to-target-civil-society-in-europe-north-america-the-middle-east-and-southeast-asia/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/monthly-news-december-2023/ba-p/3998431","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2021/11/18/iranian-targeting-of-it-sector-on-the-rise/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2023/11/09/microsoft-shares-threat-intelligence-at-cyberwarcon-2023/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://precisionpconline.com/a-unified-front-against-cyber-mercenaries/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2022/07/27/untangling-knotweed-european-private-sector-offensive-actor-using-0-day-exploits/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/threats-of-commercialized-malware-knotweed/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.thezdi.com/blog/2023/1/23/activation-context-cache-poisoning-exploiting-csrss-for-privilege-escalation","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.sonicwall.com/en-us/2024/01/blackwood-apt-group-has-a-new-dll-loader/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/en/eset-research/nspx30-sophisticated-aitm-enabled-implant-evolving-since-2005/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/business/security-insider/threat-briefs/iran-response-for-charlie-hebdo-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ic3.gov/Media/News/2022/220126.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.microsoft.com/on-the-issues/2023/02/03/dtac-charlie-hebdo-hack-iran-neptunium/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.sekoia.io/iran-cyber-threat-overview/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/new-threat-actor-uses-spanish-language-lures-distribute-seldom-observed-bandook","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/this-app-will-self-destruct-how-belarusian-hackers-created-an-alternative-telegram-for-activists/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/pro-ukraine-hackers-leak-russian-data-in-hopes-someone-will-make-sense-of-it/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/cyber-partisans-belarusian-state-university-attack","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://riskybiznews.substack.com/p/risky-biz-news-cyber-partisans-hack","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.sekoia.io/the-transportation-sector-cyber-threat-overview/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/global-threat-report/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2023/08/24/flax-typhoon-using-legitimate-software-to-quietly-access-taiwanese-organizations/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/blog/china-linked-tag-28-targets-indias-the-times-group","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.volexity.com/blog/2024/01/18/ivanti-connect-secure-vpn-exploitation-new-observations/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://quointelligence.eu/2024/01/unc5221-unreported-and-undetected-wirefire-web-shell-variant/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-advisory-ivanti-vpn-zero-days-weaponized-by-unc5221-threat-actors-to-deploy-multiple-malware-families-active-iocs/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.securityweek.com/palestinian-hackers-hit-100-israeli-organizations-in-destructive-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.polyswarm.io/2023-recap-cyber-activity-in-the-gaza-conflict","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2023/11th-december-threat-intelligence-report/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-web-profile-cyber-toufan-al-aqsa/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.darkreading.com/cyberattacks-data-breaches/-cyber-toufan-hacktivists-leaked-100-plus-israeli-orgs-in-one-month","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2021/10/11/iran-linked-dev-0343-targeting-defense-gis-and-maritime-sectors/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.deepinstinct.com/blog/threat-actor-uac-0099-continues-to-target-ukraine","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/4818341","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/likely-iranian-threat-actor-conducts-politically-motivated-disruptive-activity-against","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.attackiq.com/2022/09/23/attack-graph-response-to-us-cert-alert-aa22-264a-iranian-state-actors-conduct-cyber-operations-against-the-government-of-albania/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.picussecurity.com/resource/blog/cisa-alert-aa22-264a-iranian-homeland-justice-apt-groups-ttp","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ibtimes.com/anonymous-challenges-russias-supposed-cyber-prowess-repeat-rosatom-breach-leaks-data-3505131","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/bits-n-pieces-trozos-y-piezas-31/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.privacyaffairs.com/kelvinsecurity-hacking-group-morena/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/kaspersky-security-bulletin-apt-predictions-2024/111048/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.newslocker.com/en-uk/profession/security/ohio-schools-get-new-cybersecurity-resource/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityonline.info/esentire-vs-phantom-unveiling-the-cyber-spooks-dance-of-darkness/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.esentire.com/blog/operation-phantomcontrol","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.esentire.com/blog/phantomcontrol-returns-with-ande-loader-and-swaetrat","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/en/eset-research/badbazaar-espionage-tool-targets-android-users-trojanized-signal-telegram-apps/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/gambleforce-gang/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/3cx-software-supply-chain-compromise","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://dev.ua/ru/news/atakovali-suspilne-provaiderov-i-minrazvitiya-obschin-kto-stoit-za-rossiiskoi-gruppirovkoi-solntsepek-kotoraya-aktivizirovala-napadeniya-na-ukrainskie-struktury","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://kyivindependent.com/sbu-russian-hacker-group-reponsible-for-kyiv-star-cyberattack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2023/12/12/threat-actors-misuse-oauth-applications-to-automate-financially-driven-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.securityjoes.com/post/bibi-linux-a-new-wiper-dropped-by-pro-hamas-hacktivist-group","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2023/11/new-bibi-windows-wiper-targets-windows.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://github.com/knight0x07/BiBi-Windows-Wiper-Analysis?tab=readme-ov-file","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/ESETresearch/status/1719437301900595444","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/sandman-apt-a-mystery-group-targeting-telcos-with-a-luajit-toolkit/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/sandman-apt-china-based-adversaries-embrace-lua/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/3804703","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/new-phishing-attack-detection-attributed-to-the-uac-0050-and-uac-0096-groups-spreading-remcos-spyware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/remcos-rat-detection-uac-0050-hackers-launch-phishing-attacks-impersonating-the-security-service-of-ukraine/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/3931296","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://outpost24.com/blog/ics-attack-classifications/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://spixnet.at/cybersecurity-blog/2022/11/15/russian-hacktivists-hit-ukrainian-orgs-with-ransomware-but-no-ransom-demands/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/somnia-malware-detection-uac-0118-aka-frwl-launches-cyber-attacks-against-organizations-in-ukraine-using-enhanced-malware-strains/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2021/08/unc215-chinese-espionage-campaign-in-israel.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.esentire.com/security-advisories/ransomware-hackers-attack-a-top-safety-testing-org-using-tactics-and-techniques-borrowed-from-chinese-espionage-groups","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-financially-motivated-aggressive-group-carrying-out-ransomware-campaigns-active-iocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://internal-www.fireeye.com/blog/threat-research/2021/04/unc2447-sombrat-and-fivehands-ransomware-sophisticated-financial-threat.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2022/08/recent-cyber-attack.html","to_ids":true,"timestamp":"1786036382","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.esentire.com/blog/hacker-infrastructure-used-in-cisco-breach-discovered-attacking-a-top-workforce-management-corporation-russias-evil-corp-gang-suspected-reports-esentire","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/wip19-espionage-new-chinese-apt-targets-it-service-providers-and-telcos-with-signed-malware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2023/11/aeroblade-on-the-hunt-targeting-us-aerospace-industry","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://internal-www.fireeye.com/blog/threat-research/2021/05/shining-a-light-on-darkside-ransomware-operations.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2021/05/updates-on-chinese-apt-compromising-pulse-secure-vpn-devices.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/update-daixin-leaks-more-data-from-bluewater-health-and-other-hospitals-databases-yet-to-be-leaked/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://titaniam.io/ransomware-prevention-daixin-team-ransomware-group/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/b-files-leaked/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mycert.org.my/portal/details?menu=431fab9c-d24c-4a27-ba93-e92edafdefa5&id=467c2374-9c18-4fb0-b5a7-155dfca4d611","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-294a","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.malwarebytes.com/blog/threat-intelligence/2023/11/associated-press-espn-cbs-among-top-sites-serving-fake-virus-alerts","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.confiant.com/exploring-scamclub-payloads-via-deobfuscation-using-abstract-syntax-trees-65ef7f412537","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/operation-tunnelsnake-and-moriya-rootkit/101831/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.redpacketsecurity.com/operation-tunnelsnake/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/wildpressure-targets-industrial-in-the-middle-east/96360/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.redpacketsecurity.com/wildpressure-targets-industrial-related-entities-in-the-middle-east/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/wildpressure-targets-macos/103072/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.redpacketsecurity.com/it-threat-evolution-q3-2021/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://intezer.com/blog/research/wildcard-evolution-of-sysjoker-cyber-threat/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://checkmarx.com/blog/a-beautiful-factory-for-malicious-packages/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/an-analysis-of-lightbasin-telecommunications-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/unc2891-overview","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/guidance-on-hacktivist-operation-opspatuk-by-dragonforce","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.radware.com/security/ddos/2022/08/this-was-h1-2022-part-3-beyond-the-war/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.radware.com/security/threat-advisories-and-attack-reports/opisrael-a-decade-in-review/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securitybrief.asia/story/dragonforce-malaysia-attacks-israeli-institutions-radware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.radware.com/security/2023/05/india-one-of-the-most-targeted-countries-for-hacktivist-groups/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.darkowl.com/blog-content/hacktivist-groups-use-defacements-in-the-israel-hamas-conflict/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/research/operation-ghostshell-novel-rat-targets-global-aerospace-and-telecoms-firms","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.redpacketsecurity.com/buhti-ransomware-gang-switches-tactics-utilizes-leaked-lockbit-and-babuk-code/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.redpacketsecurity.com/new-buhti-ransomware-gang-uses-leaked-windows-linux-encryptors/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://fortiguard.fortinet.com/threat-signal-report/5170","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/buhti-ransomware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/unc2165-shifts-to-evade-sanctions","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.prodaft.com/resource/detail/silverfish-global-cyber-espionage-campaign-case-report","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.truesec.com/hub/blog/are-the-notorious-cyber-criminals-evil-corp-actually-russian-spies","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/ugg-boots-4-sale-tale-palestinian-aligned-espionage","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/ta402-uses-complex-ironwind-infection-chains-target-middle-east-based-government","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cybersecurityintelligence.com/blog/outsourced-cyber-spying-5335.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-gimmick-malware-active-iocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.volexity.com/blog/2020/03/31/storm-cloud-unleashed-tibetan-community-focus-of-highly-targeted-fake-flash-campaign/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/media-center/press-releases/oldgremlin/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/oldgremlin-comeback/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-new-ransomware-actor-oldgremlin-hits-multiple-organizations","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2021/07/13/microsoft-discovers-threat-actor-targeting-solarwinds-serv-u-software-with-0-day-exploit/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.fox-it.com/2021/11/08/ta505-exploits-solarwinds-serv-u-vulnerability-cve-2021-35211-for-initial-access/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/sockdetour/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/moshen-dragons-triad-and-error-approach-abusing-security-software-to-sideload-plugx-and-shadowpad/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://mybroadband.co.za/news/security/443090-cybercriminals-love-south-africa-study.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cisoseries.com/cyber-security-headlines-march-21-2022/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://mybroadband.co.za/news/security/438982-how-bank-customers-can-protect-themselves-after-hackers-leak-transunion-data.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.polyswarm.io/space-pirates-target-russian-aerospace","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/space-pirates-a-look-into-the-group-s-unconventional-techniques-new-attack-vectors-and-tools/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/webworm-espionage-rats","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.scarletshark.com/perswaysion-threat-actor-updates-their-techniques-and-infrastructure-e9465157a653","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.group-ib.com/perswaysion","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/posts/ransomexx-upgrades-rust/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2022/28th-november-threat-intelligence-report/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.co/wordpress/138933/malware/ransomexx-ransomware-rust-language.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2023/02/newspenguin-a-previously-unknown-threat-actor-targets-pakistan-with-advanced-espionage-tool","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-newspenguin-threat-actors-targeting-pakistani-entities-with-malicious-campaign-active-iocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/4555802","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/smokeloader-malware-detection-uac-0006-group-reemerges-to-launch-phishing-attacks-against-ukraine-using-financial-subject-lures/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/latest-threats/detect-smokeloader-malware-uac-0006-strikes-again-to-target-ukraine-in-a-series-of-phishing-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/detecting-smokeloader-campaign-uac-0006-keep-targeting-ukrainian-financial-institutions-in-a-series-of-phishing-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/smokeloader-malware-detection-uac-0006-hackers-launch-a-wave-of-phishing-attacks-against-ukraine-targeting-accountants/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/smokeloader-detection-uac-0006-group-launches-a-new-phishing-campaign-against-ukraine/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.darkreading.com/remote-workforce/north-korea-apt-swindled-1b-crypto-investors-2022","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyberscoop.com/north-korean-cryptocurrency-hackers-education-government/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/cyber-awakeness-month-takedown-of-trigona-hive-ransomware-resurges-ransomedforum-and-new-raas-qbit/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.volexity.com/blog/2022/02/03/operation-emailthief-active-exploitation-of-zero-day-xss-vulnerability-in-zimbra/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/en/eset-research/mass-spreading-campaign-targeting-zimbra-users/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.microsoft.com/en-us/security/blog/2023/03/13/dev-1101-enables-high-volume-aitm-campaigns-with-open-source-phishing-kit/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/phantom-taurus/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/operation-diplomatic-specter/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.paloaltonetworks.com/blog/security-operations/through-the-cortex-xdr-lens-uncovering-a-new-activity-group-targeting-governments-in-the-middle-east-and-africa/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://jsac.jpcert.or.jp/archive/2025/pdf/JSAC2025_1_5_leon-chang_theo-chen_en.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://mandiant.widen.net/s/qwlxddwdg6/barracuda-cve-2023-2868-hardening","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.barracuda.com/company/legal/esg-vulnerability","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/sites/default/files/2023-09/MAR-10454006.r5.v1.CLEAR__0.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/sites/default/files/2023-08/MAR-10454006.r4.v2.CLEAR_.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/sites/default/files/2023-08/MAR-10459736.r1.v1.CLEAR_.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/sites/default/files/2023-07/MAR-10454006.r1.v2.CLEAR_.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/sites/default/files/2023-07/MAR-10454006.r2.v1.CLEAR_.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/sites/default/files/2023-07/MAR-10454006.r3.v1.CLEAR_.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://sansorg.egnyte.com/dd/8ekLJCPHPj/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=4zaStuUdvrE","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=PSaix1C-UMI","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://i.blackhat.com/Asia-24/Presentations/Asia-24-Chen-Chinese-APT.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/barracuda-esg-exploited-globally/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/unc4841-post-barracuda-zero-day-remediation/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://zimpstage.wpengine.com/blog/we-smell-a-ratmilad-mobile-spyware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/operation-earth-kitsune-tracking-slub-s-current-operations/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/20/j/operation-earth-kitsune-a-dance-of-two-new-backdoors.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/20/l/who-is-the-threat-actor-behind-operation-earth-kitsune-.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/b/earth-kitsune-delivers-new-whiskerspy-backdoor.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/?post_type=out-of-band&p=17003","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/dragonspark-attacks-evade-detection-with-sparkrat-and-golang-source-code-interpretation/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/espionage-group-using-usb-devices-to-hack-targets-in-southeast-asia/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/china-nexus-espionage-southeast-asia","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/driftingcloud-apt-group-exploits-zero-day-in-sophos-firewall/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-murenshark-apt-threat-actors-aka-actor210426-active-iocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/blog/responding-to-chernovites-pipedream-with-dragos-global-services/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/threats/the-2022-ics-ot-vulnerability-briefing-recap/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/blog/industry-news/chernovite-pipedream-malware-targeting-industrial-control-systems/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/blog/pipedream-mousehole-opcua-module/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.enigmasoftware.com/indonesian-sudanese-cyber-threats-continue-grow-size-scope/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2023/04/28/indian-ideology-targeted-by-hacktivists-reprisal-hacktivism-draws-more-attacks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://web-assets.esetstatic.com/wls/2023/01/eset_apt_activity_report_t32022.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://nusenu.medium.com/is-kax17-performing-de-anonymization-attacks-against-tor-users-42e566defce8","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://darknetlive.com/post/who-is-responsible-for-running-hundreds-of-malicious-tor-relays/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/a-mysterious-threat-actor-is-running-hundreds-of-malicious-tor-relays","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.malwarebytes.com/blog/news/2021/12/was-threat-actor-kax17-de-anonymizing-the-tor-network/amp","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/CyberAmyHB/status/1532398956918890500","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.infoblox.com/cyber-threat-intelligence/prolific-puma-shadowy-link-shortening-service-enables-cybercrime/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://nsfocusglobal.com/the-new-apt-group-darkcasino-and-the-global-surge-in-winrar-0-day-exploits/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-web-profile-killnet-russian-hacktivist-group/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://channellife.com.au/story/the-increasing-presence-of-pro-russia-hacktivists","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.reversinglabs.com/blog/the-week-in-security-possible-colonial-pipeline-2.0-ransomware-hurts-small-american-eateries","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyfirma.com/?post_type=out-of-band&p=17397","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/killnet-new-capabilities-older-tactics","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/gru-disruptive-playbook","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/gru-rise-telegram-minions","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/suspected-iran-nexus-tag-56-uses-uae-forum-lure-for-credential-theft-against-us-think-tank","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-web-profile-apt42-iranian-cyber-espionage-group/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/j/water-labbu-abuses-malicious-dapps-to-steal-cryptocurrency.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ctfiot.com/138538.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://deform.co/hacker-group-caracal-kitten-targets-kdp-activists-with-malware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/wirtes-campaign-in-the-middle-east-living-off-the-land-since-at-least-2019/105044/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.msspalert.com/news/managed-security-services-provider-mssp-market-news-30-october-2023","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyberwarzone.com/tasnim-news-hacked-by-weredevils/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.microsoft.com/en-us/security/blog/2022/10/27/raspberry-robin-worm-part-of-larger-ecosystem-facilitating-pre-ransomware-activity/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://sysdig.com/blog/cloud-breach-terraform-data-theft/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/hackers-escalate-leak-200k-ccsd-students-data-claim-to-still-have-access-to-ccsd-email-system/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2023/30th-october-threat-intelligence-report/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/jeffco-public-schools-hit-by-the-same-threat-actors-that-hit-clark-county-school-district-and-via-the-same-way/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.sekoia.io/my-teas-not-cold-an-overview-of-china-cyber-threat/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/47455/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/56236/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/56941/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/bluebottle-banks-targeted-africa","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.lacework.com/blog/androxghost-the-python-malware-exploiting-your-aws-keys/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.redpacketsecurity.com/operation-poisoned-news-hong-kong-users-targeted-with-mobile-malware-via-local-news-links/?utm_source=rss&utm_medium=rss&utm_campaign=operation-poisoned-news-hong-kong-users-targeted-with-mobile-malware-via-local-news-links","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/apt-annual-review-what-the-worlds-threat-actors-got-up-to-in-2020/99574/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2022/12/15/mccrash-cross-platform-ddos-botnet-targets-private-minecraft-servers/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/new-kiss-a-dog-cryptojacking-campaign-targets-docker-and-kubernetes/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.nsfocus.net/aptconfuciuspakistanibo/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@knownsec404team/apt-k-47-mysterious-elephant-a-new-apt-organization-in-south-asia-5c66f954477","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://seclists.org/dataloss/2021/q4/81","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/thai-entities-continue-to-fall-prey-to-cyberattacks-and-leaks/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/recent-cyberattacks-put-thai-citizens-privacy-and-data-security-at-greater-risk/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/major-indonesia-tollroad-operator-hacked-by-desorden/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/customer-data-from-hundreds-of-indonesian-and-malaysian-restaurants-hacked-by-desorden/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/thailands-the-icon-group-hacked-by-desorden/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/johnson-fitness-and-wellness-hit-by-desorden-group/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/malaysian-online-stock-brokerage-firm-victim-of-cyberattack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/one-month-later-ranhill-still-hasnt-fully-recovered-from-cyberattack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/major-malaysian-water-utilities-company-hit-by-hackers-ranhill-offline-hackers-claim-databases-and-backups-deleted/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityintelligence.com/x-force/gootbot-gootloaders-new-approach-to-post-exploitation/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/new-gootloader-variant-gootbot-changes-the-game-in-malware-tactics/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/tracking-evolution-gootloader-operations","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.csoonline.com/article/3193397/security/no-netflix-is-not-a-victim-of-ransomware.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://securityaffairs.co/wordpress/64782/data-breach/london-bridge-plastic-surgery-hack.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.databreaches.net/peachtree-orthopedics-alerts-patients-of-cyberattack-third-patient-data-breach-in-seven-years/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/cyber-threats-targeting-brazil","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/north-korea-cyber-structure-alignment-2023","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://us-cert.cisa.gov/ncas/alerts/aa22-108a","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/north-korea-supply-chain","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://vulners.com/thn/THN:4C1C2CD10F20E08DD74D465450DF3F17?utm_source=rss&utm_medium=rss&utm_campaign=rss","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/39253","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/dark-peep-2-war-and-a-piece-of-hilarity/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/cyber-shadows-pact-darknet-parliament-killnet-anonymous-sudan-revil/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2023/05/24/notable-ddos-attack-tools-and-services-supporting-hacktivist-operations-in-2023/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/scandinavian-airlines-cyberattack-anonymous-sudan/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk175885","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/mysterysnail-attacks-with-windows-zero-day/104509/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.justice.gov/usao-wdwa/pr/alleged-french-cybercriminal-appear-seattle-indictment-conspiracy-computer-intrusion","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bitdefender.com/blog/hotforsecurity/pizza-hut-australia-leaks-one-million-customers-details-claims-shinyhunters-hacking-group/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyberwarzone.com/shinyhunters-22-year-old-member-pleads-guilty-to-cyber-extortion-causing-6-million-in-damage/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/the-israel-hamas-war-cyber-domain-state-sponsored-activity-of-interest/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/introducing-shrouded-snooper/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@Sebdraven/malicious-document-targets-vietnamese-officials-acb3b9d8b80a","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://securityaffairs.co/wordpress/49876/hacking/china-1937cn-team-vietnam.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/international-hacktivism-analysis/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/b/earth-zhulong-familiar-patterns-target-southeast-asian-firms.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://nsi-globalcounterintelligence.com/cyber-security/pro-iran-hackers-target-israel-airports-authority-website/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.hackread.com/pro-iran-altahrea-hit-port-of-london-website-ddos-attack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.presstv.ir/Detail/2022/07/27/686324/Iraqi-hacker-group--ALtahrea-Team--targets-Israeli-IT","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://techmonitor.ai/technology/cybersecurity/alahrea-team-power-plant-fire-israel","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.timesofisrael.com/cyberattack-on-health-ministry-website-blocks-overseas-access/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/ddos-attacks-in-q2-2022/107025/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-097a","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/a-hack-in-hand-is-worth-two-in-the-bush/110794/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyberwarzone.com/hacking-group-cyber-av3ngers-claims-responsibility-for-yavne-power-outages-what-you-need-to-know/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyberwarzone.com/cyber-av3ngers-claims-infiltration-of-israeli-water-treatment-stations-amid-ongoing-conflict/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://claroty.com/team82/research/inside-a-new-ot-iot-cyber-weapon-iocontrol","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybershafarat.com/2022/11/17/kromsec-outs-anonopsse-as-iranian-regime-makes-statement/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thecyberexpress.com/kromsec-sells-iran-ministry-database-dark-web/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.virusbulletin.com/conference/vb2018/abstracts/nomadic-octopus-cyber-espionage-central-asia/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.prodaft.com/m/reports/PAPERBUG_TLPWHITE-1.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/mexican-army-spyware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyberscoop.com/central-american-hacking-group-releases-emails/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2022/3rd-october-threat-intelligence-report/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.redpacketsecurity.com/guacamaya-hacktivists-stole-sensitive-data-from-mexico-and-latin-american-countries/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://finance.yahoo.com/news/analysis-mexico-data-hack-exposes-003101651.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://srslyriskybiz.substack.com/p/recent-cyber-chaos-is-a-structural","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyberscoop.com/environmentalist-hacktivist-collective-mining-company/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2024/sharp-dragon-expands-towards-africa-and-the-caribbean/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2021/chinese-apt-group-targets-southeast-asian-government-with-previously-unknown-backdoor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-sharppanda-chinese-apt-group-targets-southeast-asian-government-active-iocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.cyble.com/2023/06/01/sharppanda-apt-campaign-expands-its-arsenal-targeting-g20-nations/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/dont-answer-russia-aligned-ta499-beleaguers-targets-video-call-requests","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/hacktivists-take-sides-israel-palestinian","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/security-insider/microsoft-digital-defense-report-2023","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.elastic.co/security-labs/ref2924-howto-maintain-persistence-as-an-advanced-threat","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"Asia.According","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.elastic.co/security-labs/disclosing-the-bloodalchemy-backdoor","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.elastic.co/security-labs/introducing-the-ref5961-intrusion-set","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.enea.com/insights/the-hunt-for-hiddenart/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/oilalpha-likely-pro-houthi-group-targeting-arabian-peninsula","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.zimperium.com/blog/zimperium-mtd-against-oilalpha-a-comprehensive-defense-strategy/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://forescoutstage.wpengine.com/blog/the-increasing-threat-posed-by-hacktivist-attacks-an-analysis-of-targeted-organizations-devices-and-ttps/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.uptycs.com/blog/ghostlocker-ransomware-ghostsec","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-intel-indigozebra-apt-group-targeting-central-asia-active-iocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.hackread.com/anonymous-affiliate-nb65-russia-broadcaster-data-breach/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/articles/russian-ukrainian-cyber-warfare-rewterz-threat-intelligence-rollup","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/reassessing-cyberwarfare-lessons-learned-in-2022/108328/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/growling-bears-make-thunderous-noise.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-leaked-conti-ransomware-used-to-target-russia-active-iocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2022/04/27/lookback-ta410-umbrella-cyberespionage-ttps-activity/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/witchetty-steganography-espionage","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-witchetty-apt-group-active-iocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/bad-magic-apt/109087/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.malwarebytes.com/blog/threat-intelligence/2023/05/redstinger","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/suspected-iranian-actor-targeting-israeli-shipping","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/carderbee-software-supply-chain-certificate-abuse","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.polyswarm.io/carderbee-targets-hong-kong-in-supply-chain-attack","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.eclecticiq.com/chinese-state-sponsored-cyber-espionage-activity-targeting-semiconductor-industry-in-east-asia","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.resecurity.com/blog/article/ransomedvc-in-the-spotlight-what-we-know-about-the-ransomware-group-targeting-major-japanese-businesses","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/threat-source-newsletter-sept-28-2023/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securityaffairs.com/151550/data-breach/ransomed-vc-sony-ntt-alleged-attacks.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.videogameschronicle.com/news/a-ransomware-group-claims-to-have-beached-all-sony-systems/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/unmasking-usdod-the-enigma-of-the-cyber-realm/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/sep-2023-cybercrime-update-new-ransomware-threats-and-the-rising-menace-of-telegram/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/on-the-horizon-ransomed-vc-ransomware-group-spotted-in-the-wild/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/colonial-pipeline-attributes-ransomware-claims-to-unrelated-third-party-breach","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.darkowl.com/blog-content/darkowl-threat-actor-spotlight-siegedsec-and-leaked-data/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://webz.io/dwp/exclusive-hacktivists-attack-anti-abortion-u-s-states/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/fort-worth-officials-say-leaked-data-was-public","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/the-five-families-hacker-collaboration-redefining-the-game/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/threat-actor-profile-siegedsec/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/nato-siegedsec-unclassified-websites-alleged-cyberattack","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/the-mystery-of-metador-an-unattributed-threat-hiding-in-telcos-isps-and-universities/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/the-mystery-of-metador-unpicking-mafaldas-anti-analysis-techniques/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.seqrite.com/blog/operation-peek-a-baku-silent-lynx-apt-dushanbe-espionage/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://bi-zone.medium.com/cavalry-werewolf-raids-russias-public-sector-with-trusted-relationship-attacks-e19f7a5c83ef","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.seqrite.com/blog/silent-lynx-apt-targeting-central-asian-entities/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.group-ib.com/blog/shadowsilk/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/attributing-yorotrooper/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/get-a-loda-this/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/yorotrooper-espionage-campaign-cis-turkey-europe/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2021/08/24/sidewalk-may-be-as-dangerous-as-crosswalk/","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MsftSecIntel/status/1711871732644970856","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-41-5/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/monthly-news-november-2023/ba-p/3970796","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://checkmarx.com/blog/lofygang-software-supply-chain-attackers-organized-persistent-and-operating-for-over-a-year/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/lancefly-merdoor-zxshell-custom-backdoor","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/goldenjackal-apt-group/109677/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/it-threat-evolution-q2-2023/110355/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/cyber-soft-power-chinas-continental-takeover/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/h/earth-estries-targets-government-tech-for-cyberespionage.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/apt-trends-report-q3-2023/110752/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://usa.kaspersky.com/blog/sas-2023-research/29254/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-power-suppliers-network-infiltrated-for-6-months-by-redfly-hackers-active-iocs/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/critical-infrastructure-attacks","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/k/hack-the-real-box-apt41-new-subgroup-earth-longzhi.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://ics-cert.kaspersky.com/publications/reports/2023/03/24/apt-attacks-on-industrial-organizations-in-h2-2022/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/e/attack-on-security-titans-earth-longzhi-returns-with-new-tricks.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.picussecurity.com/resource/blog/cyber-threat-intelligence-report-may-2023","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/vmware-detection-containment-hardening","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/vmware-esxi-zero-day-bypass","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/esxi-hypervisors-malware-persistence","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/russia-aligned-tag-70-targets-european-government-and-military-mail","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybersecuritynews.com/russian-hackers-xss-flaw/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/uac-0114-group-aka-winter-vivern-attack-detection-hackers-launch-malicious-phishing-campaigns-targeting-government-entities-of-ukraine-and-poland/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.domaintools.com/resources/blog/winter-vivern-a-look-at-re-crafted-government-maldocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/samsung-investigating-claims-of-hack-on-south-korea-systems-internal-employee-platform/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/s2wblog/%E5%8F%98%E8%84%B8-teng-snake-a-k-a-code-core-8c35268b4d1a","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/xiaoqiying-genesis-day-threat-actor-group-targets-south-korea-taiwan","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.netlab.360.com/necro-upgrades-again-using-tor-dynamic-domain-dga-and-aiming-at-both-windows-linux/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cybersecurity-insiders.com/rapidly-evolving-iot-malware-enemybot-now-targeting-content-management-system-servers-and-android-devices/?utm_source=rss&utm_medium=rss&utm_campaign=rapidly-evolving-iot-malware-enemybot-now-targeting-content-management-system-servers-and-android-devices","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/enemybot-a-look-into-keksecs-latest-ddos-botnet","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2023/from-albania-to-the-middle-east-the-scarred-manticore-is-listening/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/sites/default/files/2024-04/CSRB_Review_of_the_Summer_2023_MEO_Intrusion_Final_508c.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=khywfhJv4H8","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://msrc.microsoft.com/blog/2023/07/microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.microsoft.com/on-the-issues/2023/07/11/mitigation-china-based-threat-actor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://msrc.microsoft.com/blog/2023/09/results-of-major-technical-investigations-for-storm-0558-key-acquisition/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.wiz.io/blog/storm-0558-compromised-microsoft-key-enables-authentication-of-countless-micr","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2023/beyond-the-horizon-traveling-the-world-on-camaro-dragons-usb-flash-drives/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_za/research/23/e/void-rabisu-s-use-of-romcom-backdoor-shows-a-growing-shift-in-th.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://nsfocusglobal.com/warning-newly-discovered-apt-attacker-atlascross-exploits-red-cross-blood-drive-phishing-for-cyberattack/","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.attackiq.com/2023/11/21/attack-graph-response-to-cisa-advisory-aa23-320a/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.loginradius.com/blog/identity/oktapus-phishing-targets-okta-identity-credentials/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cybersecurity-insiders.com/scattered-spider-managed-mgm-resort-network-outage-brings-8m-loss-daily/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.agari.com/blog/covid-19-unemployment-fraud-cares-act?_gl=1%2Ayzg6ns%2A_ga%2AMTkyMzIyOTI4MC4xNjk2MjUyMDA2%2A_ga_NHMHGJWX49%2AMTY5NjI1MjAwNS4xLjAuMTY5NjI1MjAwNS42MC4wLjA.&utm_source=press-release&utm_medium=prnewswire&utm_campaign=scattered20","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://static.fortra.com/agari/pdfs/guide/ag-scattered-canary-gd.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cofense.com/blog/gift-card-fraud-ecosystem-shifts-what-paxfuls-closing-means-for-business-email-compromise/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/jssloader-recoded-and-reloaded","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2023/09/12/malware-distributor-storm-0324-facilitates-ransomware-access/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2022/09/06/worok-big-picture/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://go.recordedfuture.com/hubfs/reports/cta-2022-1223.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2023/chinese-threat-actors-targeting-europe-in-smugx-campaign/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/threat/voltzite/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/volt-typhoon-threat-brief/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/blog/chinese-cyberespionage-group-bronze-silhouette-targets-us-government-and-defense-organizations","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://team-cymru.com/blog/2022/07/12/an-analysis-of-infrastructure-linked-to-the-hagga-threat-actor/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://otx.alienvault.com/pulse/62cfe4ef3415be5f83be81d1","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.team-cymru.com/post/an-analysis-of-infrastructure-linked-to-the-hagga-threat-actor","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/apt43-north-korea-cybercrime-espionage","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://go.recordedfuture.com/hubfs/reports/cta-2023-0330.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.truesec.com/hub/blog/what-is-anonymous-sudan","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://files.truesec.com/hubfs/Reports/Anonymous%20Sudan%20-%20Publish%201.2%20-%20a%20Truesec%20Report.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/screentime-sometimes-it-feels-like-somebodys-watching-me","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/unc961-multiverse-financially-motivated","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/gold-melody-profile-of-an-initial-access-broker","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/prophet-spider-exploits-oracle-weblogic-to-facilitate-ransomware-activity/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.accenture.com/us-en/blogs/cyber-defense/karakurt-threat-mitigation","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.advintel.io/post/enter-karakurt-data-extortion-arm-of-prolific-ransomware-group","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-152a","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/chamelgang-attacking-critical-infrastructure-with-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/new-apt-group-chamelgang/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/ta453-refuses-be-bound-expectations","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/blog/apt42-charms-cons-compromises","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/ta406-pivots-front","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/triple-threat-north-korea-aligned-ta406-scams-spies-and-steals","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MsftSecIntel/status/1625181255754039318","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/dtpacker-net-packer-curious-password-1","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://exchange.xforce.ibmcloud.com/threat-group/guid:1dda890fa2662ed26b451c703e922315","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.itpro.com/security/ransomware/359919/ransomware-criminals-look-to-other-hackers-to-provide-them-with-network","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://thehackernews.com/2021/06/ransomware-attackers-partnering-with.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/ta575-criminal-group-using-squid-game-lures-for-dridex-malware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/ta575-uses-squid-game-lures-distribute-dridex-malware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2021/08/blackberry-prevents-threat-actor-group-ta575-and-dridex-malware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://isc.sans.edu/diary/TA570+Qakbot+Qbot+tries+CVE202230190+Follina+exploit+msmsdt/28728","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/hackers-using-follina-windows-zero-day-to-spread-qbot-malware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/first-step-initial-access-leads-ransomware","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/threat-brief-hancitor-actors/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/hancitor-infections-cobalt-strike/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://vixra.org/abs/1902.0257","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/walmartglobaltech/man1-moskal-hancitor-and-a-side-of-ransomware-d77b4d991618","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.scilabs.mx/cyber-threat-profile-malteiro/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2020/07/chinese-apt-group-targets-india-and-hong-kong-using-new-variant-of-mgbot-malware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2021/07/29/bazacall-phony-call-centers-lead-to-exfiltration-and-ransomware/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trellix.com/en-us/about/newsroom/stories/research/evolution-of-bazarcall-social-engineering-tactics.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/uat-5647-romcom/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/e/void-rabisu-s-use-of-romcom-backdoor-shows-a-growing-shift-in-th.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2023/07/decoding-romcom-behaviors-and-opportunities-for-detection","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://labs.k7computing.com/index.php/romcom-rat-not-your-typical-love-story/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/23/j/void-rabisu-targets-female-leaders-with-new-romcom-variant.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2022/10/unattributed-romcom-threat-actor-spoofing-popular-apps-now-hits-ukrainian-militaries","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2022/11/romcom-spoofing-solarwinds-keepass","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.360.cn/report/detail?id=6c9a1b56e4ceb84a8ab9e96044429adc","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://mp.weixin.qq.com/s/Hzq4_tWmunDpKfHTlZNM-A","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://equalit.ie/deflect-labs-report-6/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.amnesty.org/en/latest/research/2020/03/targeted-surveillance-attacks-in-uzbekistan-an-old-threat-with-new-techniques/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://documents.trendmicro.com/assets/white_papers/wp-void-balaur-tracking-a-cybermercenarys-activities.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.google/threat-analysis-group/countering-hack-for-hire-groups/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/the-sprawling-infrastructure-of-a-careless-mercenary/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-lockbit","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://security.packt.com/understanding-lockbit/","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socradar.io/lockbit-3-another-upgrade-to-worlds-most-active-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/better-together-global-attitude-survey-takeaways-2021/","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.gov.pl/web/special-services/russian-cyberattacks","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/noname05716-the-pro-russian-hacktivist-group-targeting-nato/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/martinchlumecky/bobik/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/60440/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.pwndefend.com/2022/06/04/cve-2022-26134-honeypot-payload-analysis-example/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2022/dangeroussavanna-two-year-long-campaign-targets-financial-institutions-in-french-speaking-africa/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://khonggianmang.vn/uploads/CB_941_Canhbao_APT_36c5a857fa.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2021/02/01/operation-nightscout-supply-chain-attack-online-gaming-asia/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2020/03/05/human-operated-ransomware-attacks-a-preventable-disaster/","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/reservations-requested-ta558-targets-hospitality-and-travel","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/cta-security-playbook--goblin-panda.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/cycldek-bridging-the-air-gap/97157/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/meet-crowdstrikes-adversary-of-the-month-for-august-goblin-panda/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://github.com/avast/ioc/tree/master/OperationDragonCastling","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/luigicamastra/operation-dragon-castling-apt-group-targeting-betting-companies","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://i.blackhat.com/Asia-22/Thursday-Materials/AS-22-LeonSilvia-NextGenPlugXShadowPad.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/returnedlibra/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/thieflibra/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/pryinglibra/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.blackberry.com/en/2022/06/threat-thursday-china-based-apt-plays-auto-updater-card-to-deliver-windealer-malware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/windealer-dealing-on-the-side/105946","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blogs.jpcert.or.jp/en/2021/10/windealer.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://jsac.jpcert.or.jp/archive/2021/pdf/JSAC2021_301_shui-leon_en.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/apt-trends-report-q3-2021/104708","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/it-threat-evolution-q2-2020/98230","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/apt-trends-report-q2-2020/97937","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/apt-trends-report-q2-2019/91897","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07170759/Microcin_Technical_4PDF_eng_final_s.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/unit42-threat-actors-target-government-belarus-using-cmstar-trojan","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://research.checkpoint.com/2020/vicious-panda-the-covid-campaign","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2020/05/14/mikroceen-spying-backdoor-high-profile-networks-central-asia","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/luigicamastra/apt-group-planted-backdoors-targeting-high-profile-networks-in-central-asia","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/a-simple-example-of-a-complex-cyberattack/82636","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/microcin-is-here/97353","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/bronze-vapor","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/news-events/analysis-reports/ar21-112a","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/solarwinds-understanding-detecting-the-supernova-webshell-trojan","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/blog/supernova-web-shell-deployment-linked-to-spiral-threat-group","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.guidepointsecurity.com/blog/supernova-solarwinds-net-webshell-analysis","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/solarstorm-supernova","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=LeKi0KfzOow&list=PLffioUnqXWkdzWcZXH-bzPVgcs2R4r7iS&index=1&t=2154s","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://vb2020.vblocalhost.com/uploads/VB2020-43.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-analysis/2020/07/chinese-apt-group-targets-india-and-hong-kong-using-new-variant-of-mgbot-malware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/groups/G1021/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/chinese-entanglement-dll-hijacking-in-the-asian-gambling-sector/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/cglyer/status/1480734487000453121","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/lockbit-ransomware-side-loads-cobalt-strike-beacon-with-legitimate-vmware-utility","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2021/12/11/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2022/05/09/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/MrDanPerez/status/1390285821786394624","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://intrusiontruth.wordpress.com/2021/05/06/an-apt-with-no-name","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.justice.gov/opa/press-release/file/1295986/download","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.justice.gov/opa/press-release/file/1295981/download","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.justice.gov/opa/pr/two-chinese-hackers-working-ministry-state-security-charged-global-computer-intrusion","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/unit42-trochilus-rat-new-moonwind-rat-used-attack-thai-utility-organizations/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://news.softpedia.com/news/trochilus-rat-evades-antivirus-detection-used-for-cyber-espionage-in-south-east-asia-498776.shtml","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://app.box.com/s/z1uanuv1vn3vw5iket1r6bqrmlra0gpn","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://otx.alienvault.com/pulse/55bbc68e67db8c2d547ae393","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"Invoke-PowerShellTcp.ps","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/21/a/earth-wendigo-injects-javascript-backdoor-to-service-worker-for-.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/en/eset-research/operation-fishmedley/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=-7Swd1ZetiQ","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/cyber-year-in-retrospect/pdf/2022-year-in-retrospect-report.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ncsc.gov.uk/static-assets/documents/malware-analysis-reports/jolly-jellyfish/NCSC-MAR-Jolly-Jellyfish.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/apt-trends-report-q2-2021/103517","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/apt-annual-review-2021/105127","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://decoded.avast.io/luigicamastra/backdoored-client-from-mongolian-ca-monpass","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/overwatch-exposes-aquatic-panda-in-possession-of-log-4-shell-exploit-tools","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.pwc.co.uk/issues/cyber-security-services/research/chasing-shadows.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/wp-content/uploads/2021/08/SentinelOne_-SentinelLabs_ShadowPad_WP_V2.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://media-exp1.licdn.com/dms/document/C561FAQHhWFRcWmdCPw/feedshare-document-pdf-analyzed/0/1639591145314?e=1658966400&v=beta&t=_uCcyEVg6b_VDiBTvWQIXtBOdQ1GQAAydqGyq62KA3E","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/chinese-group-tag-22-targets-nepal-philippines-taiwan","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://hello.global.ntt/-/media/ntt/global/insights/white-papers/the-operations-of-winnti-group.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/h/irontiger-compromises-chat-app-Mimi-targets-windows-mac-linux-users.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/diceyf-deploys-gameplayerframework-in-online-casino-development-studio/107723/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.botconf.eu/wp-content/uploads/2022/05/Botconf2022-40-LunghiHorejsi.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=QXGO4RJaUPQ","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://documents.trendmicro.com/assets/txt/earth-berberoka-macos-iocs-2.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://documents.trendmicro.com/assets/txt/earth-berberoka-linux-iocs-2.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://documents.trendmicro.com/assets/txt/earth-berberoka-windows-iocs-2.txt","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/22/d/new-apt-group-earth-berberoka-targets-gambling-websites-with-old.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://documents.trendmicro.com/assets/white_papers/wp-operation-earth-berberoka.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/moneylibra/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/20/k/analysis-of-kinsing-malwares-use-of-rootkit.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/ruinousursa/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://msrc-blog.microsoft.com/2022/02/28/analysis-resources-cyber-threat-activity-ukraine/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/_cpresearch_/status/1541753913732366338","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bbc.com/news/technology-62072480","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.deepinstinct.com/blog/polonium-apt-group-uncovering-new-elements","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://teamt5.org/en/posts/assassinations-of-minininja-in-various-apac-countries/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://community.riskiq.com/article/d8b749f2","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://gteltsc.vn/blog/cap-nhat-nhe-ve-lo-hong-bao-mat-0day-microsoft-exchange-dang-duoc-su-dung-de-tan-cong-cac-to-chuc-tai-viet-nam-9685.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/new-toddycat-apt-group-targets-exchange-servers-in-asia-europe/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://webz.io/dwp/new-ransomware-group-ransomhouse-is-it-real-or-fake/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.google/threat-analysis-group/exposing-initial-access-broker-ties-conti","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2021/09/15/analyzing-attacks-that-exploit-the-mshtml-cve-2021-40444-vulnerability","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/modifiedelephant-apt-and-a-decade-of-fabricating-evidence/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.agari.com/cyber-intelligence-research/whitepapers/acid-agari-cosmic-lynx.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/25/d/bpfdoor-hidden-controller.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://troopers.de/troopers22/talks/7cv8pz","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.google/threat-analysis-group/update-on-cyber-activity-in-eastern-europe/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/unc3524-eye-spy-email","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/groups/G1003/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/en-us/blog/who-is-ember-bear/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://nsfocusglobal.com/wp-content/uploads/2021/11/Analysis-Report-on-Lorec53-Group.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://circleid.com/posts/20230412-probing-lorec53-phishing-through-the-dns-microscope","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/nodaria-ukraine-infostealer","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/nascentursa/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/blog/threat-actor-uac-0056-targeting-ukraine-with-fake-translation-software/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.intezer.com/blog/research/elephant-malware-targeting-ukrainian-orgs/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-intelligence/2022/04/new-uac-0056-activity-theres-a-go-elephant-in-the-room/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/38374","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/win.graphsteel","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.expats.cz/czech-news/article/pro-russian-hackers-target-czech-websites-in-a-series-of-attacks","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/russia-or-ukraine-hacking-groups-take-sides/?msclkid=235244a7ba6611ec92f21c9bd3b8ee49","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cisa.gov/uscert/ncas/alerts/aa22-110a","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyber.gov.au/acsc/view-all-content/advisories/advisory-2020-008-copy-paste-compromises-tactics-techniques-and-procedures-used-target-multiple-australian-networks","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyber.gov.au/acsc/view-all-content/alerts/copy-paste-compromises","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://ti.qianxin.com/blog/articles/Blade-hawk-The-activities-of-targeted-the-Middle-East-and-West-Asia-are-exposed/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://telegra.ph/Discover-Malware-Android-03-26","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2021/09/07/bladehawk-android-espionage-kurdish/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.sentinelone.com/labs/chinese-threat-actor-scarab-targeting-ukraine","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://web.archive.org/web/20150124025612/http://www.symantec.com:80/connect/blogs/scarab-attackers-took-aim-select-russian-targets-2012","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/adversaries/slippy-spider/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.checkpoint.com/2022/03/07/lapsus-ransomware-gang-uses-stolen-source-code-to-disguise-malware-files-as-trustworthy-check-point-customers-remain-protected/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/hidden-plain-sight-ta397s-new-attack-chain-delivers-espionage-rats","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bitdefender.com/files/News/CaseStudies/study/352/Bitdefender-PR-Whitepaper-BitterAPT-creat4571-en-EN-GenericUse.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://web.archive.org/web/20191208223958/https://www.contextis.com/en/blog/avivore","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.contextis.com/en/news/context-identifies-new-avivore-threat-group","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.computerweekly.com/news/252471769/New-threat-group-behind-Airbus-cyber-attacks-claim-researchers","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fortinet.com/blog/threat-research/guard-your-drive-from-driveguard","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cybereason.com/blog/strifewater-rat-iranian-apt-moses-staff-adds-new-trojan-to-ransomware-operations","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/campuscodi/status/1450455259202166799","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.thaicert.or.th/downloads/files/Threat_Group_Cards_v2.0.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/china-apt-antlion-taiwan-financial-attacks","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://sebdraven.medium.com/copy-cat-of-apt-sidewinder-1893059ca68d","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://about.fb.com/news/2021/11/taking-action-against-hackers-in-pakistan-and-syria/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.talosintelligence.com/2021/07/sidecopy.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.telsy.com/sidecopy-apt-from-windows-to-nix/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.malwarebytes.com/threat-intelligence/2021/12/sidecopy-apt-connecting-lures-to-victims-payloads-to-infrastructure/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.seqrite.com/blog/operation-sidecopy/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.netwitness.com/wp-content/uploads/FIN13-Elephant-Beetle-NetWitness.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://f.hubspotusercontent30.net/hubfs/8776530/Sygnia-%20Elephant%20Beetle_Jan2022.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.sygnia.co/elephant-beetle-an-organized-financial-theft-operation","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/fin13-cybercriminal-mexico","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.group-ib.com/opera1er-apt","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www2.swift.com/isac/report/10118","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-common-raven-iocs","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/matanbuchus-malware-as-a-service/","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://public.gdatasoftware.com/Presse/Publikationen/Whitepaper/EN/GDATA_TooHash_CaseStudy_102014_EN_v1.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://hitcon.org/2016/pacific/0composition/pdf/1202/1202%20R0%200930%20an%20intelligance-driven%20approach%20to%20cyber%20defense.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.venustech.com.cn/uploads/2018/08/231401512426.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2021/06/09/gelsemium-when-threat-actors-go-gardening/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-winter","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/blog/ransomware-groups-use-tor-based-backdoor-for-persistent-access","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/gold-waterfall","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-symphony","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-southfield","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-skyline","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-riverview","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-november-13th-2020-extortion-gone-wild/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-northfield","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-mansard","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-garden","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-galleon","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/gold-galleon-how-a-nigerian-cyber-crew-plunders-the-shipping-industry","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-flanders","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-fairfax","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/monsterlibra/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/groups/G0127/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.hhs.gov/sites/default/files/mespinoza-goldburlap-cyborgspider-analystnote-tlpwhite.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-burlap","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://conferences.law.stanford.edu/cyberday/wp-content/uploads/sites/10/2016/10/2a_15GlobalThreatReport_Extracted.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://statescoop.com/baltimore-ransomware-crowdstrike-extortion/","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/double-trouble-ransomware-data-leak-extortion-part-1","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/ecrime-ecosystem/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://go.crowdstrike.com/rs/281-OBQ-266/images/Report_BosonSpider.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/cutwail-spam-campaign-uses-steganography-to-distribute-urlzone/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/evolution-of-the-gold-evergreen-threat-group","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-evergreen","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://go.crowdstrike.com/rs/281-OBQ-266/images/ReportCSIT-20081e.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/analysis-of-ecrime-menu-style-toolkits/","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://analyst1.com/blog/ransom-mafia-analysis-of-the-worlds-first-ransomware-cartel","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/double-trouble-ransomware-data-leak-extortion-part-2/","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=qxPXxWMI2i4","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/carbon-spider-sprite-spider-target-esxi-servers-with-ransomware/","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/gold-dupont","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-lagoon","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/duck-hunting-with-falcon-complete-analyzing-a-fowl-banking-trojan-part-1/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeServicesCyberFrontLines.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/ransomware-preparedness-a-call-to-action/","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cyberscoop.com/coronavirus-hacking-disinformation-ransomware-spearphishing/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/mobile-malware-gang-steals-millions-from-south-korean-users/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/18/f/fakespy-android-information-stealing-malware-targets-japanese-and-korean-speaking-users.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/18/d/xloader-android-spyware-and-banking-trojan-distributed-via-dns-spoofing.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/18/k/a-look-into-the-connection-between-xloader-and-fakespy-and-their-possible-ties-with-the-yanbian-gang.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.riskiq.com/blog/external-threat-management/yanbian-gang-malware-distribution/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cert.gov.ua/article/5098518","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/picassoloader-and-cobalt-strike-beacon-detection-uac-0057-aka-ghostwriter-hacking-group-attacks-the-ukrainian-leading-military-educational-institution/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://socprime.com/blog/uac-0057-attack-detection-a-surge-in-adversary-activity-distributing-picassoloader-and-cobalt-strike-beacon/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/meta-ukrainian-officials-military-targeted-by-ghostwriter-hackers","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/unc1151-linked-to-belarus-government","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/hatr/status/1377220336597483520","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2020/07/ghostwriter-influence-campaign.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://therecord.media/redecho-group-parks-domains-after-public-exposure/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.recordedfuture.com/redecho-targeting-indian-power-sector/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.thedailybeast.com/how-chinas-devastating-microsoft-hack-puts-us-all-at-risk","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.nextron-systems.com/2021/03/06/scan-for-hafnium-exploitation-evidence-with-thor-lite","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://msrc-blog.microsoft.com/2021/03/02/multiple-security-updates-released-for-exchange-server","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://github.com/microsoft/Microsoft-365-Defender-Hunting-Queries/blob/master/Execution/exchange-iis-worker-dropping-webshell.md","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.huntress.com/blog/rapid-response-mass-exploitation-of-on-prem-exchange-servers","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://pastebin.com/J4L3r2RS","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://msrc-blog.microsoft.com/2021/03/05/microsoft-exchange-server-vulnerabilities-mitigations-march-2021","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/falcon-complete-stops-microsoft-exchange-server-zero-day-exploits","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://github.com/cert-lv/exchange_webshell_detection","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://github.com/microsoft/CSS-Exchange/tree/main/Security","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://discuss.elastic.co/t/detection-and-response-for-hafnium-activity/266289","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://us-cert.cisa.gov/ncas/alerts/aa21-062a","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2021/03/detection-response-to-exploitation-of-microsoft-exchange-zero-day-vulnerabilities.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/ESETresearch/status/1366862946488451088","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.rapid7.com/2021/03/03/rapid7s-insightidr-enables-detection-and-response-to-microsoft-exchange-0-day","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.reddit.com/r/msp/comments/lwmo5c/mass_exploitation_of_onprem_exchange_servers","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.splunk.com/en_us/blog/security/detecting-hafnium-exchange-server-zero-day-activity-in-splunk.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/groups/G0125/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"MEGA.In","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/adept-libra/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.lacework.com/teamtnt-builds-botnet-from-chinese-cloud-servers/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cyware.com/news/hildegard-teamtnts-new-feature-rich-malware-targeting-kubernetes-6587eb45","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/20/l/teamtnt-now-deploying-ddos-capable-irc-bot-tntbotinger.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.intezer.com/blog/cloud-security/top-linux-cloud-threats-of-2020/","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cadosecurity.com/post/team-tnt-the-first-crypto-mining-worm-to-steal-aws-credentials","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cybersecurity.att.com/blogs/labs-research/teamtnt-delivers-malware-with-new-detection-evasion-tool","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.aquasec.com/teamtnt-campaign-against-docker-kubernetes-environment","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://malpedia.caad.fkie.fraunhofer.de/details/elf.teamtnt","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/en-us/security/blog/2024/01/25/midnight-blizzard-guidance-for-responders-on-nation-state-attack/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/solarphoenix/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2021/03/04/goldmax-goldfinder-sibot-analyzing-nobelium-malware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://github.com/fireeye/sunburst_countermeasures","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://pastebin.com/6EDgCKxd","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://news.sophos.com/en-us/2020/12/21/how-sunburst-malware-does-defense-evasion/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/mitre-attack/identifying-unc2452-related-techniques-9f7b6c7f3714","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/cycraft/taiwan-high-tech-ecosystem-targeted-by-foreign-apt-group-5473d2ad8730","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cycraft.com/download/%5BTLP-White%5D20200415%20Chimera_V4.1.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.wired.com/story/chinese-hackers-taiwan-semiconductor-industry-skeleton-key/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://i.blackhat.com/USA-20/Thursday/us-20-Chen-Operation-Chimera-APT-Operation-Targets-Semiconductor-Vendors.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2020/03/the-cycle-of-adversary-pursuit.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=CgDtm05qApE","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://gist.github.com/aaronst/6aa7f61246f53a8dd4befea86e832456","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://twitter.com/anthomsec/status/1321865315513520128","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.brighttalk.com/webcast/7451/447347","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2020/10/fin11-email-campaigns-precursor-for-ransomware-data-theft.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2019/10/shikata-ga-nai-encoder-still-going-strong.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"TEMP.Warlock","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"domain","category":"Network activity","value":"TEMP.Warlok","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020OverWatchNowheretoHide.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-drake","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bbc.com/news/world-us-canada-53195749","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://en.wikipedia.org/wiki/Maksim_Yakubets","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://krebsonsecurity.com/2019/12/inside-evil-corp-a-100m-cybercrime-menace/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://github.com/eset/malware-ioc/tree/master/xdspy/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://vblocalhost.com/uploads/VB2020-Faou-Labelle.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2020/10/02/xdspy-stealing-government-secrets-since-2011/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/iranian-hackers-are-selling-access-to-compromised-companies-on-an-underground-forum","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/who-is-pioneer-kitten","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/fbi-says-an-iranian-hacking-group-is-attacking-f5-networking-devices","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.clearskysec.com/wp-content/uploads/2020/02/ClearSky-Fox-Kitten-Campaign.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/wp-content/uploads/NA-EL-Threat-Perspective-2019.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/wp-content/uploads/The-ICS-Threat-Landscape.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dragos.com/threat/parisite","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://youtu.be/pBDu8EGWRC4?t=2492","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/bitso-engineering/profiling-disrupting-an-apt-spear-phishing-campaign-targeting-slack-users-in-the-financial-sector-9389533d5fc2","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.hivepro.com/wp-content/uploads/2022/08/Vulnerabilities-Threats-that-Matter-25th-to-31st-July.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-evilnum-apt-group-targeting-financial-sector","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-evilnum-apt-group-active-iocs-7","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/buy-sell-steal-evilnum-targets-cryptocurrency-forex-commodities","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/what-did-deathstalker-hide-between-two-ferns/99616/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/deathstalker-mercenary-triumvirate/98177/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/alloy-taurus-targets-se-asian-government/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/alloytaurus/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://troopers.de/troopers22/talks/7cv8pz/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.youtube.com/watch?v=fBFm2fiEPTg","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://github.com/citizenlab/malware-indicators/tree/master/202006_DarkBasin","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://citizenlab.ca/2020/06/dark-basin-uncovering-a-massive-hack-for-hire-operation/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/atoms/hunter-serpens/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/cobalt-katana","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/cobalt-juno","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://s.tencent.com/research/report/836.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.epicturla.com/blog/the-lost-nazar","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/new-uyghur-and-tibetan-themed-attacks-using-pdf-exploits/35465","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2013/02/the-number-of-the-beast.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/darkuniverse-the-mysterious-apt-framework-27/94897/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2020/01/vigilante-deploying-mitigation-for-citrix-netscaler-vulnerability-while-maintaining-backdoor.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.theregister.co.uk/2020/01/17/hackers_patch_citrix_vulnerability/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://asec.ahnlab.com/en/52479/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ahnlab.com/en/contents/content-center/35891","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://mobile.twitter.com/mstoned7/status/1247361687570673664","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ahnlab.com/kr/site/securityinfo/secunews/secuNewsView.do?curPage=1&menu_dist=2&seq=29129","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.esentire.com/web-native-pages/the-hunt-for-venom-spider-part-2","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/blog/threat-insight/q4-2020-threat-report-quarterly-analysis-cybersecurity-trends-tactics-and-themes","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/threat-actor-profile-ta544-targets-geographies-italy-japan-range-malware","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/urlzone-top-malware-japan-while-emotet-and-line-phishing-round-out-landscape-0","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/holiday-lull-not-so-much","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/brushaloader-still-sweeping-victims-one-year-later","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-essex","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-heron","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://na.eventscloud.com/file_uploads/6568237bca6dc156e5c5557c5989e97c_CrowdStrikeFal.Con2019_ThroughEyesOfAdversary_J.Ayers.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://fortiguard.com/encyclopedia/botnet/7630456","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.kaspersky.com/about/press-releases/2019_fin7-hacking-group-targets-more-than-130-companies-after-leaders-arrest","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2020/06/18/digging-up-invisimole-hidden-arsenal/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://bitofhex.com/2020/02/10/sapphire-mushroom-lnk-files/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://mp.weixin.qq.com/s/S-hiGFNC6WXGrkjytAVbpA","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2019/10/10/eset-discovers-attor-spy-platform","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.research-collection.ethz.ch/bitstream/handle/20.500.11850/389371/1/Cyber-Reports-2020-01-A-one-sided-Affair.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://app.box.com/s/xqh458fe1url7mgl072hhd0yxqw3x0jm","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/connect/blogs/taiwan-targeted-new-cyberespionage-back-door-trojan","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://mp.weixin.qq.com/s/8j_rHA7gdMxY1_X8alj8Zg","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://medium.com/@Sebdraven/apt-sidewinder-tricks-powershell-anti-forensics-and-execution-side-loading-5bc1a7e7c84c","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://s.tencent.com/research/report/479.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/content/dam/fireeye-www/global/en/current-threats/pdfs/fireeye-sidewinder-targeted-attack.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://s.tencent.com/research/report/659.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/20/l/sidewinder-leverages-south-asian-territorial-issues-for-spear-ph.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://otx.alienvault.com/pulse/5fd10760f9afb730d37c4742/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.systemtek.co.uk/2018/07/luoxk-malware-exploiting-cve-2018-2893/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.zdnet.com/article/extensive-hacking-operation-discovered-in-kazakhstan/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://blogs.360.cn/post/APT-C-34_Golden_Falcon.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://youtu.be/U7p0J8aMZhM?t=193","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://cloud.google.com/blog/topics/threat-intelligence/melting-unc2198-icedid-to-ransomware-operations","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://x.com/MsftSecIntel/status/1730383711437283757","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cysecurity.news/2023/12/twisted-spiders-dangerous-cactus.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://www.secureworks.com/research/threat-profiles/gold-village","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://analyst1.com/file-assets/RANSOM-MAFIA-ANALYSIS-OF-THE-WORLD%E2%80%99S-FIRST-RANSOMWARE-CARTEL.pdf","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://adversary.crowdstrike.com/adversary/twisted-spider/","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/ta2101-plays-government-imposter-distribute-malware-german-italian-and-us","to_ids":true,"timestamp":"1786036381","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/red-lamassu-open-season.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.ptsecurity.com/upload/corporate/ru-ru/analytics/calypso-apt-2019-rus.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/chrome-0-day-exploit-cve-2019-13720-used-in-operation-wizardopium/94866/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.proofpoint.com/us/threat-insight/post/lookback-forges-ahead-continued-targeting-united-states-utilities-sector-reveals","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/20/f/new-android-spyware-actionspy-revealed-via-phishing-attacks-from-earth-empusa.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.volexity.com/blog/2019/09/02/digital-crackdown-large-scale-surveillance-and-exploitation-of-uyghurs/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://citizenlab.ca/2019/09/poison-carp-tibetan-groups-targeted-with-1-click-mobile-exploits/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://ics-cert.kaspersky.com/publications/reports/2023/09/25/apt-and-financial-attacks-on-industrial-organizations-in-h1-2023/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://ctoatncsc.substack.com/p/cto-at-ncsc-summary-week-ending-october","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.darkreading.com/threat-intelligence/iranian-government-hackers-target-us-veterans/d/d-id/1335897","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.symantec.com/blogs/threat-intelligence/tortoiseshell-apt-supply-chain","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.trendmicro.com/en_us/research/24/d/earth-freybug.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://services.google.com/fh/files/blogs/gcat_threathorizons_full_apr2023.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cfr.org/cyber-operations/apt-41","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.mandiant.com/resources/report-apt41-double-dragon-a-dual-espionage-and-cyber-crime-operation","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://unit42.paloaltonetworks.com/apt41-using-new-speculoos-backdoor-to-target-organizations-globally/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.fireeye.com/blog/threat-research/2019/08/apt41-dual-espionage-and-cyber-crime-operation.html","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.cfr.org/cyber-operations/winnti-umbrella","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://assets.documentcloud.org/documents/7210602/FLASH-AC-000133-TT-Published.pdf","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.justice.gov/opa/pr/seven-international-cyber-defendants-including-apt41-actors-charged-connection-computer","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/bronze-export","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/bronze-atlas","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.crowdstrike.com/blog/meet-crowdstrikes-adversary-of-the-month-for-july-wicked-spider/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://attack.mitre.org/groups/G0044/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://401trg.com/burning-umbrella/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.welivesecurity.com/2019/03/11/gaming-industry-scope-attackers-asia/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dw.com/en/bayer-points-finger-at-wicked-panda-in-cyberattack/a-48196004","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://blog.trendmicro.com/trendlabs-security-intelligence/winnti-abuses-github/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.bleepingcomputer.com/news/security/teamviewer-confirms-undisclosed-breach-from-2016/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.dw.com/en/thyssenkrupp-victim-of-cyber-attack/a-36695341","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.microsoft.com/security/blog/2017/01/25/detecting-threat-actors-in-recent-german-industrial-attacks-with-windows-defender-atp/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"http://williamshowalter.com/a-universal-windows-bootkit/","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://securelist.com/winnti-faq-more-than-just-a-game/57585/","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.prevailion.com/latest-targets-of-cyber-group-lyceum/","to_ids":true,"timestamp":"1786036383","comment":"Category: Threat Actors"},{"type":"url","category":"Network activity","value":"https://www.secureworks.com/research/threat-profiles/cobalt-lyceum","to_ids":true,"timestamp":"1786036380","comment":"Category: Threat Actors"}]}}