{ "count": 152, "indicators": [ { "ioc_value": "xicefoga.com", "ioc_type": "other", "category": "Malware Attribution", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:07:44", "last_seen": "2026-08-12 00:08:24" }, { "ioc_value": "propertyinfogroup.com", "ioc_type": "other", "category": "Malware Attribution", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:07:44", "last_seen": "2026-08-12 00:08:24" }, { "ioc_value": "mfoguyg.josephmichaelnh.com", "ioc_type": "other", "category": "Malware Attribution", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:07:43", "last_seen": "2026-08-12 00:08:23" }, { "ioc_value": "http:\/\/xxx3fjytovlt5jmjt6bahi7mpigntmkkuai32m2uzm3vrysga2fognad.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:46", "last_seen": "2026-08-06 19:47:46" }, { "ioc_value": "http:\/\/uu4p7dgm2oyroj32qhzxp2x5xrg6azowktx2sz24bvirfog6ntc34dad.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:46", "last_seen": "2026-08-06 19:47:46" }, { "ioc_value": "http:\/\/trocadoopbwpgfogckqsprqg3b3cvbpcppwa6cunin6zyq6uj5biyiid.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:46", "last_seen": "2026-08-06 19:47:46" }, { "ioc_value": "http:\/\/pz5uprzhnzeotviraa2fogkua5nlnmu75pbnnqu4fnwgfffldwxog7ad.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:46", "last_seen": "2026-08-06 19:47:46" }, { "ioc_value": "http:\/\/lqcjo7esbfog5t4r4gyy7jurpzf6cavpfmc4vkal4k2g4ie66ao5mryd.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:46", "last_seen": "2026-08-06 19:47:46" }, { "ioc_value": "http:\/\/ninja5epslvjn2fpbpqevtjxs2vj6rp74sknmqkfn55eq2nlfogr7iyd.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:46", "last_seen": "2026-08-06 19:47:46" }, { "ioc_value": "http:\/\/oq5c62qys3foygv2pomchc6cvgfog4cnct6ywm4kbo3qrvbrtw2pqsqd.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:46", "last_seen": "2026-08-06 19:47:46" }, { "ioc_value": "http:\/\/m7py65obp4y7cvqbjcpvyij76xcksvnbv4u66tdaaunaufog35q3tbid.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:46", "last_seen": "2026-08-06 19:47:46" }, { "ioc_value": "http:\/\/ajsbsx7qkiusegqe5knxcwbwglbwb5w4cvgapy7wyddmfog7o4znycid.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:45", "last_seen": "2026-08-06 19:47:45" }, { "ioc_value": "http:\/\/fairffog3iv7goh7c4dmjj3dyxjepu2hc3vel27x3z2i4qbriczrmnad.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:45", "last_seen": "2026-08-06 19:47:45" }, { "ioc_value": "http:\/\/charlyjjnzrmznrgrhr5hfogfwe5ua3erku5rszzvljzz7qovi54tuad.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:45", "last_seen": "2026-08-06 19:47:45" }, { "ioc_value": "http:\/\/ekvottmrqthyhnfkuvldx3ukkprmkqt53n2oxqc5nnjeu2fogjs2ijad.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:45", "last_seen": "2026-08-06 19:47:45" }, { "ioc_value": "http:\/\/4hebgytoglz5paicfhx2ltrrjc7y37tjndk2prrahw3x5df5u4gfogad.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:45", "last_seen": "2026-08-06 19:47:45" }, { "ioc_value": "http:\/\/fogwalluulizqdibrqt2ecywyse2gn626zkm6zumfxiroka5bywymmyd.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:45", "last_seen": "2026-08-06 19:47:45" }, { "ioc_value": "http:\/\/fogwalluvcxmnho32qbripmuadl4ghdcaaykz2or7iwphwpi7b2ihrqd.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:45", "last_seen": "2026-08-06 19:47:45" }, { "ioc_value": "https:\/\/rxpvcd.ksfogaszat.hu\/092da2ad-e6e0-4bf7-9ec2-41557f120dbd", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:47", "last_seen": "2026-08-06 19:46:47" }, { "ioc_value": "https:\/\/eyzfh.ksfogszabalyozas.hu\/d6d5a86e-2b8f-4497-9e20-09f07fabd040", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:46", "last_seen": "2026-08-06 19:46:46" }, { "ioc_value": "https:\/\/qpemifog.winxbet.co\/a8fbe3a9-741c-4aa9-bbaa-6a2e227d5b47", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:45", "last_seen": "2026-08-06 19:46:45" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/SKOUther\/Smart-ToDo-Manager\/main\/fogle\/Do-Manager-Smart-To-3.4-beta.1.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:44" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/Lesser-foglamp538\/picamd\/main\/PicaMDQuickLook\/Software_v3.8.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/fogotten17.vercel.app\/", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:42", "last_seen": "2026-08-06 19:46:42" }, { "ioc_value": "https:\/\/undh.ofoghchat.ir\/a48c9c88-5484-4b84-8fa5-bf476b8f90ec", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:39", "last_seen": "2026-08-06 19:46:40" }, { "ioc_value": "15ZzFogQrCPKXsAaavaVoCrdoekmRW8xkq", "ioc_type": "bitcoin", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:10:20", "last_seen": "2026-08-06 14:49:14" }, { "ioc_value": "1FaKT16bvh3nWLaRmQFoG2x5ngrztnn9YH", "ioc_type": "bitcoin", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:21", "last_seen": "2026-08-06 14:49:14" }, { "ioc_value": "1BycEiVhk2DTKwfJNLGb8ySWfoGb6UxxCT", "ioc_type": "bitcoin", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:10:21", "last_seen": "2026-08-06 14:49:14" }, { "ioc_value": "113nWtdXniBWaT9aNzJgVFogwJj5UALuhg", "ioc_type": "bitcoin", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:10:20", "last_seen": "2026-08-06 14:49:13" }, { "ioc_value": "fogochain.live", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:35", "last_seen": "2026-08-06 14:49:03" }, { "ioc_value": "sol.fogabolla.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:34", "last_seen": "2026-08-06 14:49:01" }, { "ioc_value": "fogthemarket.net", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:33", "last_seen": "2026-08-06 14:48:59" }, { "ioc_value": "fogcto.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:33", "last_seen": "2026-08-06 14:48:59" }, { "ioc_value": "fogo.rest", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:31", "last_seen": "2026-08-06 14:48:57" }, { "ioc_value": "benevolent-sfogliatella-f3ed80.netlify.app", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:30", "last_seen": "2026-08-06 14:48:56" }, { "ioc_value": "fog-swap.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:09:00", "last_seen": "2026-08-06 14:48:55" }, { "ioc_value": "fogswaps.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:09:00", "last_seen": "2026-08-06 14:48:55" }, { "ioc_value": "fogtao.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:59", "last_seen": "2026-08-06 14:48:55" }, { "ioc_value": "fogo.rewardc.network", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:59", "last_seen": "2026-08-06 14:48:54" }, { "ioc_value": "bonuses-fogo.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:59", "last_seen": "2026-08-06 14:48:54" }, { "ioc_value": "fogo-hyperliquid.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:59", "last_seen": "2026-08-06 14:48:54" }, { "ioc_value": "claims.fogohub.xyz", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:59", "last_seen": "2026-08-06 14:48:54" }, { "ioc_value": "get-fogo.org", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:59", "last_seen": "2026-08-06 14:48:54" }, { "ioc_value": "airdrop-fogo.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:08:38", "last_seen": "2026-08-06 14:48:54" }, { "ioc_value": "claim-fogo.org", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:59", "last_seen": "2026-08-06 14:48:54" }, { "ioc_value": "fogo-points.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:59", "last_seen": "2026-08-06 14:48:54" }, { "ioc_value": "claim-fogo.app", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:59", "last_seen": "2026-08-06 14:48:54" }, { "ioc_value": "fogochain.run", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:59", "last_seen": "2026-08-06 14:48:54" }, { "ioc_value": "ufogaming.gift", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:52", "last_seen": "2026-08-06 14:48:45" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/09\/27\/foggyweb-targeted-nobelium-malware-leads-to-persistent-backdoor\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "adolfoguemes.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:11", "last_seen": "2026-08-06 14:47:33" }, { "ioc_value": "aged-fog-132f.naimeiyx.workers.dev", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:12", "last_seen": "2026-08-06 14:47:33" }, { "ioc_value": "7crfog7dh.qwo231sdx.club", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:08", "last_seen": "2026-08-06 14:47:29" }, { "ioc_value": "6miywdjqwbiczcgzco2mj53x5f3tnf4wplu65ge4zafogv2spdrq.arweave.net", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:08", "last_seen": "2026-08-06 14:47:28" }, { "ioc_value": "3tbfffogav.000webhostapp.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:07", "last_seen": "2026-08-06 14:47:26" }, { "ioc_value": "https:\/\/securelist.com\/the-icefog-apt-a-tale-of-cloak-and-three-daggers\/57331\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/securelist.com\/the-icefog-apt-hits-us-targets-with-java-backdoor\/58209\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.cfr.org\/interactive\/cyber-operations\/icefog", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/d2538mqrb7brka.cloudfront.net\/wp-content\/uploads\/sites\/43\/2018\/03\/20133739\/icefog.pdf", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blog.google\/threat-analysis-group\/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/services.google.com\/fh\/files\/blogs\/google_fog_of_war_research_report.pdf", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.ransomware.live\/group\/fog", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:25", "last_seen": "2026-08-06 14:45:05" }, { "ioc_value": "genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion", "ioc_type": "onion", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:25", "last_seen": "2026-08-06 14:45:05" }, { "ioc_value": "http:\/\/genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:25", "last_seen": "2026-08-06 14:45:05" }, { "ioc_value": "t33zoj4qwv455fog7qnb2azi5xcdxkixughmmduzbw2rtdgryqfbh6id.onion", "ioc_type": "onion", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:26", "last_seen": "2026-08-06 14:45:05" }, { "ioc_value": "http:\/\/t33zoj4qwv455fog7qnb2azi5xcdxkixughmmduzbw2rtdgryqfbh6id.onion", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:12:26", "last_seen": "2026-08-06 14:45:05" }, { "ioc_value": "holy-fog-c22f.vikkyuufinicholson3174.workers.dev", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:24", "last_seen": "2026-08-06 14:45:01" }, { "ioc_value": "glint-fog.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:45:00" }, { "ioc_value": "fogbrea.click", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "fogdarzloti24.cfd", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "fogdelderberry.etherealfirm.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "foggy-ascend.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "foggy-horizons.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "foggy-path.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "fogleschiz.cyou", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "fogmillpond.vip", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "fogoma.world", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "fosfograci.rest", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "fifogai.pro", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:25", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "evolutionsfog.iqtrx.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:25", "last_seen": "2026-08-06 14:44:58" }, { "ioc_value": "elfogar.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:24", "last_seen": "2026-08-06 14:44:58" }, { "ioc_value": "cosmicfogvalley.pro", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:23", "last_seen": "2026-08-06 14:44:56" }, { "ioc_value": "cedarsonfog.click", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:22", "last_seen": "2026-08-06 14:44:55" }, { "ioc_value": "cattisfogn.rest", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:22", "last_seen": "2026-08-06 14:44:55" }, { "ioc_value": "centersfog.cherriepop.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:22", "last_seen": "2026-08-06 14:44:55" }, { "ioc_value": "bendefog.hellogroupbd.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:08:20", "last_seen": "2026-08-06 14:44:53" }, { "ioc_value": "allegro.938327382939129gfog.sbs", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:08:17", "last_seen": "2026-08-06 14:44:50" }, { "ioc_value": "allegro-lokalnie.938327382939129gfog.sbs", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:08:17", "last_seen": "2026-08-06 14:44:49" }, { "ioc_value": "aldiuk-store.animefoggellc.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:08:17", "last_seen": "2026-08-06 14:44:49" }, { "ioc_value": "938327382939129gfog.sbs", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:08:16", "last_seen": "2026-08-06 14:44:48" }, { "ioc_value": "affogballa.rest", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:08:16", "last_seen": "2026-08-06 14:44:48" }, { "ioc_value": "https:\/\/speakerdeck.com\/ashley920\/into-the-fog-the-return-of-icefog-apt?slide=35", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "updateeinfoguestid.help", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:23", "last_seen": "2026-08-06 14:43:04" }, { "ioc_value": "badgersbyfog.click", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:38", "last_seen": "2026-08-06 14:42:15" }, { "ioc_value": "badgersbyfog.site", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:38", "last_seen": "2026-08-06 14:42:15" }, { "ioc_value": "bafidofoguaconsulting.click", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:38", "last_seen": "2026-08-06 14:42:15" }, { "ioc_value": "bafoginuzexmanagement.digital", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:38", "last_seen": "2026-08-06 14:42:15" }, { "ioc_value": "aprilinfoguest.cfd", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:35", "last_seen": "2026-08-06 14:42:12" }, { "ioc_value": "alafog.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:34", "last_seen": "2026-08-06 14:42:10" }, { "ioc_value": "adolfogarcia.net", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:33", "last_seen": "2026-08-06 14:42:09" }, { "ioc_value": "affogatorecipes.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:33", "last_seen": "2026-08-06 14:42:09" }, { "ioc_value": "6jr.fog-map.ru", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:30", "last_seen": "2026-08-06 14:42:05" }, { "ioc_value": "11.clear-fog.ru", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:28", "last_seen": "2026-08-06 14:42:02" }, { "ioc_value": "http:\/\/ripple-infogiveaway.com", "ioc_type": "url", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:07", "last_seen": "2026-08-06 14:41:43" }, { "ioc_value": "ripple-infogiveaway.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:07", "last_seen": "2026-08-06 14:41:43" }, { "ioc_value": "birchandfoglife.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:44", "last_seen": "2026-08-06 14:41:13" }, { "ioc_value": "bitfogex.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:45", "last_seen": "2026-08-06 14:41:13" }, { "ioc_value": "bafybeifqsy4i2xejq5goxyzbuufogxpqgugbowdte35bpuvzrccwy5cnr4.ipfs.dweb.link", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:43", "last_seen": "2026-08-06 14:41:11" }, { "ioc_value": "baivifogrouk.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:43", "last_seen": "2026-08-06 14:41:11" }, { "ioc_value": "b5g4fogm33xg9yg.cfd", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:42", "last_seen": "2026-08-06 14:41:10" }, { "ioc_value": "bafkreifogznj4dqa4lssonf2lpa2lbnohsjcupirwwpp7ou454dhzwnbsm.ipfs.dweb.link", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:43", "last_seen": "2026-08-06 14:41:10" }, { "ioc_value": "bafkreidvxyed6inubotjxgjmci4yhlfog34ea4jh5mtllezn6k57orcxvy.ipfs.dweb.link", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:43", "last_seen": "2026-08-06 14:41:10" }, { "ioc_value": "ansmkdioujenhfjuasnmdjk9846387589kcnlsjvsnjdkifogiun1.pages.dev", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:40", "last_seen": "2026-08-06 14:41:07" }, { "ioc_value": "alofogh.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:39", "last_seen": "2026-08-06 14:41:06" }, { "ioc_value": "acrossexterminatorfoggy.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:36", "last_seen": "2026-08-06 14:41:03" }, { "ioc_value": "7638eyrhefgstuiko3jh3greifoguiyjk.pages.dev", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:35", "last_seen": "2026-08-06 14:41:01" }, { "ioc_value": "2x7pals24x7cotactinfoguides.pages.dev", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:34", "last_seen": "2026-08-06 14:41:00" }, { "ioc_value": "bafybeigbyd23ksdjzhsswmf3fogl66e2tywvo6vgc4gyzvfwhbxqeqntl4.ipfs.w3s.link", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:20", "last_seen": "2026-08-06 14:40:47" }, { "ioc_value": "http:\/\/cuft7z2xlfogrtx4ddqnjqyerye2qtagksow2fip4xbb5iw7dsgtvhqd.onion\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "http:\/\/4uc4rp7p6u4qsizcjpiyif4r5jxt54rejvs2qcljtnqfogiovtpfdpyd.onion\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.ransomlook.io\/group\/fog", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.kroll.com\/en\/publications\/cyber\/fog-ransomware-targets-higher-education", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.broadcom.com\/support\/security-center\/protection-bulletin\/fog-ransomware", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.sentinelone.com\/anthology\/fog\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/blog.barracuda.com\/2025\/04\/29\/a-closer-look-at-fog-ransomware", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.trendmicro.com\/en_us\/research\/25\/d\/fog-ransomware-concealed-within-binary-loaders-linking-themselve.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.securitymagazine.com\/articles\/101694-fog-ransomware-group-uses-unconventional-toolset-new-research-finds", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.areteir.com\/static\/FOG_Ransomware.pdf", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "http:\/\/genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/assets.kpmg.com\/content\/dam\/kpmgsites\/in\/pdf\/2024\/11\/kpmg-ctip-fog-ransomware-19-nov-2024.pdf.coredownload.inline.pdf", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "http:\/\/62foekhv5humjrfwjdyd2dgextpbf5i7obguhwvfoghmu3nxpkmxlcid.onion\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "http:\/\/mgeegnexyhhn5dpqewihjy33qyhng3gy66h3fogiwefl5hljhtmfznad.onion\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "http:\/\/xpi6anvefx456kfogxwwpxdejqzxxv63ve4yy3atczhs23kw73e3wwyd.onion\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "http:\/\/accurfjvcphjtfogx42gpmoobffwqpqzvv2mf7smr6no62fy7ootjnid.onion", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "http:\/\/a2dbso6dijaqsmut36r6y4nps4cwivmfog5bpzf6uojovce6f3gl36id.onion:81", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "infogroffe.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "infogrefe.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "infographicworld.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "infograph.site", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "infograndararathotel.shop", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "infograffe.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "infogouvv.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "infogouvameli.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "infoglobrief.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "infoglobex.pro", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "infogaugenet.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "infogatewaya.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:26", "last_seen": "2026-08-06 13:10:26" }, { "ioc_value": "innfogreffe.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:25", "last_seen": "2026-08-06 13:10:25" }, { "ioc_value": "lefogaro.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:25", "last_seen": "2026-08-06 13:10:25" }, { "ioc_value": "nfogreffe.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:24", "last_seen": "2026-08-06 13:10:24" }, { "ioc_value": "pseudinfog.cyou", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:24", "last_seen": "2026-08-06 13:10:24" }, { "ioc_value": "plwiad.infoguide411.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:24", "last_seen": "2026-08-06 13:10:24" } ] }