{
    "count": 40,
    "indicators": [
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/designvare\/Brazil-Proxies\/main\/unsolar\/Brazil_Proxies_v1.7.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/Limediseasespirochetebrazilnuttree326\/Steam-FPS-Estimator-Beta-Version\/main\/sootless\/FP_Steam_Beta_Version_Estimator_1.4.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "http:\/\/192.210.186.199\/img\/kb\/brazilgoodformebettersmooth.hta",
            "ioc_type": "url",
            "category": "Malware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:46:41",
            "last_seen": "2026-08-06 19:46:41"
        },
        {
            "ioc_value": "ebrazils.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 14:41:34",
            "last_seen": "2026-08-06 14:49:01"
        },
        {
            "ioc_value": "brazil-2sl.pages.dev",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:57",
            "last_seen": "2026-08-06 14:48:52"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/forums\/diary\/BankerGoogleChromeExtensiontargetingBrazil\/22722\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.cybereason.com\/blog\/information-stealing-malware-targeting-brazil-full-research",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/securelist.com\/the-tetrade-brazilian-banking-malware\/97779\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "10kbrazilhehehe.vercel.app",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:04",
            "last_seen": "2026-08-06 14:47:23"
        },
        {
            "ioc_value": "https:\/\/researchcenter.paloaltonetworks.com\/2016\/03\/banload-malware-affecting-brazil-exhibits-unusually-complex-infection-process\/",
            "ioc_type": "url",
            "category": "Malware Families",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:03",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/securingtomorrow.mcafee.com\/mcafee-labs\/banload-trojan-targets-brazilians-with-malware-downloads\/",
            "ioc_type": "url",
            "category": "Malware Families",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:03",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/cyber-threats-targeting-brazil",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/copacabana-barcelona-cross-continental-threat-brazilian-banking-malware",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/securelist.com\/blog\/research\/76153\/teamxrat-brazilian-cybercrime-meets-ransomware\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "estadao-brazil.online",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:25",
            "last_seen": "2026-08-06 14:44:58"
        },
        {
            "ioc_value": "eagleventuresbrazil.net",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:24",
            "last_seen": "2026-08-06 14:44:57"
        },
        {
            "ioc_value": "eagleventuresbrazil.org",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:24",
            "last_seen": "2026-08-06 14:44:57"
        },
        {
            "ioc_value": "brazil-conservationefforts.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "remembered-value-brazilian-tied.trycloudflare.com",
            "ioc_type": "other",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:11",
            "last_seen": "2026-08-06 14:43:52"
        },
        {
            "ioc_value": "suportecontatowebmail2023.brazilsouth.cloudapp.azure.com",
            "ioc_type": "other",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:10",
            "last_seen": "2026-08-06 14:43:52"
        },
        {
            "ioc_value": "https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/fileless-banking-trojan-targeting-brazilian-banks-downloads-possible-botnet-capability-info-stealers\/",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:07",
            "last_seen": "2026-08-06 14:43:47"
        },
        {
            "ioc_value": "backup.blackbraziltoday.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:15"
        },
        {
            "ioc_value": "american-brazil.surf",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:34",
            "last_seen": "2026-08-06 14:42:11"
        },
        {
            "ioc_value": "https:\/\/securelist.com\/spying-android-rat-from-brazil-brata\/92775\/",
            "ioc_type": "url",
            "category": "Mobile ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:20",
            "last_seen": "2026-08-06 14:41:54"
        },
        {
            "ioc_value": "adidasbrazil.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:37",
            "last_seen": "2026-08-06 14:41:04"
        },
        {
            "ioc_value": "acutabovebrazil.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:36",
            "last_seen": "2026-08-06 14:41:03"
        },
        {
            "ioc_value": "aa1998brazil.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:36",
            "last_seen": "2026-08-06 14:41:02"
        },
        {
            "ioc_value": "7700betbrazil.bet",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:35",
            "last_seen": "2026-08-06 14:41:01"
        },
        {
            "ioc_value": "377betbrazil.bet",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:35",
            "last_seen": "2026-08-06 14:41:00"
        },
        {
            "ioc_value": "21betbrazil.bet",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:34",
            "last_seen": "2026-08-06 14:41:00"
        },
        {
            "ioc_value": "10betbrazil.bet",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:34",
            "last_seen": "2026-08-06 14:40:59"
        },
        {
            "ioc_value": "1991betbrazil.bet",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:34",
            "last_seen": "2026-08-06 14:40:59"
        },
        {
            "ioc_value": "https:\/\/www.bleepstatic.com\/images\/news\/columns\/week-in-ransomware\/2018\/june\/8\/crybrazil.jpg",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/id-ransomware.blogspot.com\/2018\/06\/crybrazil-ransomware.html",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/www.bleepingcomputer.com\/news\/security\/brazils-court-system-under-massive-ransomexx-ransomware-attack\/",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "http:\/\/www.nyxbone.com\/malware\/brazilianRansom.html",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "http:\/\/www.nyxbone.com\/images\/articulos\/malware\/brazilianRansom\/0.png",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/new-locky-ransomware-spotted-in-the-brazilian-underground-market-uses-windows-script-files\/",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/www.bleepingcomputer.com\/news\/security\/the-week-in-ransomware-june-8th-2018-crybrazil-cryptconsole-and-magniber\/",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 13:13:00"
        },
        {
            "ioc_value": "fit4lifebrazil.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:08:25",
            "last_seen": "2026-08-06 13:08:25"
        }
    ]
}