{
    "count": 167,
    "indicators": [
        {
            "ioc_value": "http:\/\/stormer5vaw7yle5mhb4ozvwt7ctksmbltwzzurwx3mgaqjwb6bb74id.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:46",
            "last_seen": "2026-08-06 19:47:46"
        },
        {
            "ioc_value": "http:\/\/stormsefm3zxvs4yrd2jrpzonfmae4hxra2x3bppb7l2xipnwiyoqhad.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:46",
            "last_seen": "2026-08-06 19:47:46"
        },
        {
            "ioc_value": "http:\/\/stormu36id5e62n2i7kq3v7batuy34dimpijx5euklgl5bwi65eaycyd.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:46",
            "last_seen": "2026-08-06 19:47:46"
        },
        {
            "ioc_value": "stormbad.cam",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 14:41:35",
            "last_seen": "2026-08-06 14:49:03"
        },
        {
            "ioc_value": "storm-spin.online",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 14:41:35",
            "last_seen": "2026-08-06 14:49:03"
        },
        {
            "ioc_value": "stormtrade.live",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 14:41:34",
            "last_seen": "2026-08-06 14:49:01"
        },
        {
            "ioc_value": "solstorm-com.pages.dev",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:58",
            "last_seen": "2026-08-06 14:48:53"
        },
        {
            "ioc_value": "lestengstormn.pages.dev",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:56",
            "last_seen": "2026-08-06 14:48:50"
        },
        {
            "ioc_value": "token-stormwarfare.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:56",
            "last_seen": "2026-08-06 14:48:50"
        },
        {
            "ioc_value": "tokens-stormwarfare.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:56",
            "last_seen": "2026-08-06 14:48:50"
        },
        {
            "ioc_value": "eornstorme.pages.dev",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:56",
            "last_seen": "2026-08-06 14:48:50"
        },
        {
            "ioc_value": "stormtoken.site",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:55",
            "last_seen": "2026-08-06 14:48:49"
        },
        {
            "ioc_value": "stormstoken.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:55",
            "last_seen": "2026-08-06 14:48:49"
        },
        {
            "ioc_value": "stormtokens.net",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:55",
            "last_seen": "2026-08-06 14:48:49"
        },
        {
            "ioc_value": "stormxtoken.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:55",
            "last_seen": "2026-08-06 14:48:49"
        },
        {
            "ioc_value": "coinbase.com.wallet.brainstormgroupe.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:52",
            "last_seen": "2026-08-06 14:48:45"
        },
        {
            "ioc_value": "stormgain-dex.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:52",
            "last_seen": "2026-08-06 14:48:45"
        },
        {
            "ioc_value": "airdropwallectconnect.stormxtrade.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:52",
            "last_seen": "2026-08-06 14:48:45"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/07\/14\/analysis-of-storm-0558-techniques-for-unauthorized-email-access\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 7,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/thisissecurity.stormshield.com\/2014\/08\/20\/poweliks-command-line-confusion\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/www.picussecurity.com\/resource\/blog\/brickstorm-malware-unc5221-targets-tech-and-legal-sectors-in-the-united-states",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/blog.nviso.eu\/wp-content\/uploads\/2025\/04\/NVISO-BRICKSTORM-Report.pdf",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.resecurity.com\/blog\/article\/f5-big-ip-source-code-leak-tied-to-state-linked-campaigns-using-brickstorm-backdoor",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/brickstorm-espionage-campaign",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/09\/14\/peach-sandstorm-password-spray-campaigns-enable-intelligence-collection-at-high-value-targets\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 7,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/solarstorm-supernova\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.stormshield.com\/news\/poweliks-command-line-confusion\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/pawn-storm-abuses-open-authentication-advanced-social-engineering-attacks",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.mandiant.com\/sites\/default\/files\/2021-09\/APT28-Center-of-Storm-2017.pdf",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 7,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "https:\/\/www.trendmicro.com\/en_us\/research\/20\/l\/pawn-storm-lack-of-sophistication-as-a-strategy.html",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 7,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/07\/22\/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities\/#storm-2603",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/10\/31\/chinese-threat-actor-storm-0940-uses-credentials-from-password-spray-attacks-from-a-covert-network\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 7,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/09\/26\/storm-0501-ransomware-attacks-expanding-to-hybrid-cloud-environments\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 7,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/08\/27\/storm-0501s-evolving-techniques-lead-to-cloud-based-ransomware\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "https:\/\/s7d2.scene7.com\/is\/content\/cylance\/prod\/cylance-web\/en-us\/resources\/knowledge-center\/resource-library\/reports\/Op_Dust_Storm_Report.pdf",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 7,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/solarstorm-supply-chain-attack-timeline\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "https:\/\/redcanary.com\/blog\/threat-intelligence\/storm-1811-black-basta\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 7,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "ambiguous-candy-rainstorm.glitch.me",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:14",
            "last_seen": "2026-08-06 14:47:36"
        },
        {
            "ioc_value": "allstorm-yourlife.ydns.eu",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:13",
            "last_seen": "2026-08-06 14:47:35"
        },
        {
            "ioc_value": "aether-storm.pages.dev",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:12",
            "last_seen": "2026-08-06 14:47:33"
        },
        {
            "ioc_value": "accountfirestorm5.000webhostapp.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:10",
            "last_seen": "2026-08-06 14:47:31"
        },
        {
            "ioc_value": "accountfirestorm6.000webhostapp.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:10",
            "last_seen": "2026-08-06 14:47:31"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/05\/18\/storm-2949-turned-compromised-identity-into-cloud-wide-breach\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/www2.fireeye.com\/rs\/848-DID-242\/images\/APT28-Center-of-Storm-2017.pdf",
            "ioc_type": "url",
            "category": "Malware Families",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:03",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/www.defense.gouv.fr\/actualites\/storm-1516-dessous-dune-operation-dinfluence-russe",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/www.sgdsn.gouv.fr\/publications\/analyse-du-mode-operatoire-informationnel-russe-storm-1516",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/pawn-storm-update-ios-espionage-app-found\/",
            "ioc_type": "url",
            "category": "Malware Families",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:03",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/02\/13\/storm-2372-conducts-device-code-phishing-campaign\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/news.sophos.com\/en-us\/2024\/12\/19\/phishing-platform-rockstar-2fa-trips-and-flowerstorm-picks-up-the-pieces\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/03\/12\/storm-2561-uses-seo-poisoning-to-distribute-fake-vpn-clients-for-credential-theft\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/solarstorm-supernova",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/microsoft-security-experts-blog\/defender-experts-chronicles-a-deep-dive-into-storm-0867\/ba-p\/3911769",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/01\/17\/new-ttps-observed-in-mint-sandstorm-campaign-targeting-high-profile-individuals-at-universities-and-research-orgs\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/04\/18\/nation-state-threat-actor-mint-sandstorm-refines-tradecraft-to-attack-high-value-targets\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.rewterz.com\/rewterz-news\/rewterz-threat-update-microsoft-warns-of-emerging-threat-by-storm-0539-behind-gift-card-frauds\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/securityboulevard.com\/2023\/12\/microsoft-storm-1152-crackdown-stopping-threat-actors\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2023\/12\/13\/cybercrime-cybersecurity-storm-1152-fraudulent-accounts\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.cylance.com\/content\/dam\/cylance\/pdfs\/reports\/Op_Dust_Storm_Report.pdf",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/12\/04\/frequent-freeloader-part-i-secret-blizzard-compromising-storm-0156-infrastructure-for-espionage\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/pawn-storm-targets-mh17-investigation-team\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.trendmicro.com\/cloud-content\/us\/pdfs\/security-intelligence\/white-papers\/wp-operation-pawn-storm.pdf",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/new-adobe-flash-zero-day-used-in-pawn-storm-campaign\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/09\/12\/malware-distributor-storm-0324-facilitates-ransomware-access\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.wiz.io\/blog\/storm-0558-compromised-microsoft-key-enables-authentication-of-countless-micr",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/msrc.microsoft.com\/blog\/2023\/09\/results-of-major-technical-investigations-for-storm-0558-key-acquisition\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/msrc.microsoft.com\/blog\/2023\/07\/microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.volexity.com\/blog\/2020\/03\/31\/storm-cloud-unleashed-tibetan-community-focus-of-highly-targeted-fake-flash-campaign\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.crowdstrike.com\/blog\/storm-chasing\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/packetstormsecurity.com\/news\/view\/35790\/Recent-OT-And-Espionage-Attacks-Linked-To-Russias-Sandworm-Now-Named-APT44.html",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "Stormous.Leak",
            "ioc_type": "other",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:26",
            "last_seen": "2026-08-06 14:45:05"
        },
        {
            "ioc_value": "https:\/\/www.ransomware.live\/group\/stormous",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:26",
            "last_seen": "2026-08-06 14:45:05"
        },
        {
            "ioc_value": "hxtryxstorm.pro",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:03"
        },
        {
            "ioc_value": "haircaramel-aiota5.stormkit.dev",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:23",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "hidostorm.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "hextryx-storm.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "hextryx-storm.net",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "hextryxstorm-app.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "hextryxstorm-app.org",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "hextryxstorm.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "hextryxstorm.digital",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "hextryxstorm.net",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "hextryxstorm.org",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "garvinkelstormvel.top",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:26",
            "last_seen": "2026-08-06 14:45:00"
        },
        {
            "ioc_value": "garvinkelstormveldikm.top",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:26",
            "last_seen": "2026-08-06 14:45:00"
        },
        {
            "ioc_value": "garvinkelstormveldikunda.top",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:26",
            "last_seen": "2026-08-06 14:45:00"
        },
        {
            "ioc_value": "geniushex.omistorm.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:26",
            "last_seen": "2026-08-06 14:45:00"
        },
        {
            "ioc_value": "fundastorm.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:26",
            "last_seen": "2026-08-06 14:44:59"
        },
        {
            "ioc_value": "enterprisestorm.tipthemovie.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:24",
            "last_seen": "2026-08-06 14:44:58"
        },
        {
            "ioc_value": "deal-storm-shop.it.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:20",
            "last_seen": "2026-08-06 14:44:56"
        },
        {
            "ioc_value": "de-stormvaldrenka.pro",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:23",
            "last_seen": "2026-08-06 14:44:56"
        },
        {
            "ioc_value": "cleandiverse.sheetstorm.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:22",
            "last_seen": "2026-08-06 14:44:55"
        },
        {
            "ioc_value": "braynstorm.pro",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bjelstormfaldheest.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bjelstormheel.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bjelstormheeldgr.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bjelstormheelgrid.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bjelstormika.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bjelstormkaveel.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bjelstormkaveld.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bstormf.virtual-desktop-access.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bjelstormkundela.top",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bjelstormveel.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bjelstormventreekild.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "bearsequoia-rima2d.stormkit.dev",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "http:\/\/packetstorm.securify.com\/mag\/phrack\/phrack54\/P54-08",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "http:\/\/packetstormsecurity.org\/advisories\/hpalert\/043",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:32",
            "last_seen": "2026-08-06 14:44:24"
        },
        {
            "ioc_value": "http:\/\/packetstormsecurity.org\/advisories\/ibm-ers\/96-08",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:32",
            "last_seen": "2026-08-06 14:44:24"
        },
        {
            "ioc_value": "http:\/\/packetstormsecurity.org\/advisories\/hpalert\/006",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:24"
        },
        {
            "ioc_value": "http:\/\/packetstormsecurity.org\/advisories\/hpalert\/003",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:32",
            "last_seen": "2026-08-06 14:44:24"
        },
        {
            "ioc_value": "http:\/\/packetstorm.securify.com\/advisories\/hpalert\/027",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:32",
            "last_seen": "2026-08-06 14:44:24"
        },
        {
            "ioc_value": "http:\/\/packetstorm.securify.com\/advisories\/hpalert\/008",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:32",
            "last_seen": "2026-08-06 14:44:24"
        },
        {
            "ioc_value": "http:\/\/packetstormsecurity.org\/advisories\/hpalert\/019",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:32",
            "last_seen": "2026-08-06 14:44:24"
        },
        {
            "ioc_value": "true-storm89.online",
            "ioc_type": "other",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-06 14:43:51"
        },
        {
            "ioc_value": "alliedmindstorm.com",
            "ioc_type": "other",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:08",
            "last_seen": "2026-08-06 14:43:49"
        },
        {
            "ioc_value": "jabberstorm.su",
            "ioc_type": "other",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:07",
            "last_seen": "2026-08-06 14:43:47"
        },
        {
            "ioc_value": "whitestormventures.info",
            "ioc_type": "other",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:10:22",
            "last_seen": "2026-08-06 14:43:03"
        },
        {
            "ioc_value": "stormwatch.info",
            "ioc_type": "other",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:10:22",
            "last_seen": "2026-08-06 14:43:02"
        },
        {
            "ioc_value": "stormvalleyhaven.info",
            "ioc_type": "other",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:10:22",
            "last_seen": "2026-08-06 14:43:02"
        },
        {
            "ioc_value": "stormoakalchemy.info",
            "ioc_type": "other",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:10:22",
            "last_seen": "2026-08-06 14:43:02"
        },
        {
            "ioc_value": "stormgrovecraft.info",
            "ioc_type": "other",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:10:22",
            "last_seen": "2026-08-06 14:43:02"
        },
        {
            "ioc_value": "aur3.l1ghtstorm.ru",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "annotates-rainstorm.click",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:11"
        },
        {
            "ioc_value": "apex3stormlink.cyberpeaklink.garden",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:11"
        },
        {
            "ioc_value": "apex7stormweb.vectorstarcity.garden",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:11"
        },
        {
            "ioc_value": "adstormsurge.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:33",
            "last_seen": "2026-08-06 14:42:09"
        },
        {
            "ioc_value": "adler.stormfiare.ru",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:33",
            "last_seen": "2026-08-06 14:42:09"
        },
        {
            "ioc_value": "agenttesla.stormzytour2025.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:33",
            "last_seen": "2026-08-06 14:42:09"
        },
        {
            "ioc_value": "6tpmi.stormbioom.ru",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:30",
            "last_seen": "2026-08-06 14:42:05"
        },
        {
            "ioc_value": "21.stormcairn.ru",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:29",
            "last_seen": "2026-08-06 14:42:03"
        },
        {
            "ioc_value": "137f.stormmint.ru",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:28",
            "last_seen": "2026-08-06 14:42:02"
        },
        {
            "ioc_value": "http:\/\/stormxtoken.com\/",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "http:\/\/stormtokens.net\/",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "http:\/\/stormstoken.com\/",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "stormtoken.cc",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "http:\/\/stormtoken.cc\/",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "http:\/\/stormtoken.site\/",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "stormtokens.io",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "http:\/\/stormtokens.io\/",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "storm-token.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "http:\/\/storm-token.com\/",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "stormtoken.co",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "http:\/\/stormtoken.co\/",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "stormltoken.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "http:\/\/stormltoken.com\/",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "stormtoken.eu",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "http:\/\/stormtoken.eu\/",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:05",
            "last_seen": "2026-08-06 14:41:40"
        },
        {
            "ioc_value": "rainstorm.cyou",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 14:41:38",
            "last_seen": "2026-08-06 14:41:38"
        },
        {
            "ioc_value": "avivabstormie.pages.dev",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:10"
        },
        {
            "ioc_value": "attcustormersupports001.weebly.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:41",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "affstorm.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:38",
            "last_seen": "2026-08-06 14:41:05"
        },
        {
            "ioc_value": "ads.storm8.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:37",
            "last_seen": "2026-08-06 14:41:04"
        },
        {
            "ioc_value": "ad.mediastorm.hu",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:37",
            "last_seen": "2026-08-06 14:41:03"
        },
        {
            "ioc_value": "accompanimentmusicianstorm.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:36",
            "last_seen": "2026-08-06 14:41:03"
        },
        {
            "ioc_value": "heroesofthestormbetakeyss.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 14:40:54",
            "last_seen": "2026-08-06 14:40:54"
        },
        {
            "ioc_value": "storm-hacks.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:27",
            "last_seen": "2026-08-06 14:40:54"
        },
        {
            "ioc_value": "heroesofthestorm-betakey.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 14:40:54",
            "last_seen": "2026-08-06 14:40:54"
        },
        {
            "ioc_value": "heroesofthestormkeys.net",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 14:40:54",
            "last_seen": "2026-08-06 14:40:54"
        },
        {
            "ioc_value": "ebookstorm.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:27",
            "last_seen": "2026-08-06 14:40:54"
        },
        {
            "ioc_value": "heroesofthestormbetagiveaway.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:27",
            "last_seen": "2026-08-06 14:40:54"
        },
        {
            "ioc_value": "https:\/\/www.ransomlook.io\/group\/stormous",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:02",
            "last_seen": "2026-08-06 13:13:02"
        },
        {
            "ioc_value": "https:\/\/www.advintel.io\/post\/storm-in-safe-haven-takeaways-from-russian-authorities-takedown-of-revil",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "phoenixstormdump.info",
            "ioc_type": "other",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:10:24",
            "last_seen": "2026-08-06 13:10:24"
        },
        {
            "ioc_value": "stormmonteirotyler.com",
            "ioc_type": "other",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:10:23",
            "last_seen": "2026-08-06 13:10:23"
        },
        {
            "ioc_value": "stormmminesses.info",
            "ioc_type": "other",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:10:23",
            "last_seen": "2026-08-06 13:10:23"
        },
        {
            "ioc_value": "stormmcloud.info",
            "ioc_type": "other",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:10:23",
            "last_seen": "2026-08-06 13:10:23"
        },
        {
            "ioc_value": "essential-storm-707938.framer.app",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:08:25",
            "last_seen": "2026-08-06 13:08:25"
        },
        {
            "ioc_value": "https:\/\/github.com\/FiIes\/StormFN-Launcher\/raw\/refs\/heads\/main\/StormFN-Launcher.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:07:42",
            "last_seen": "2026-08-06 13:07:42"
        }
    ]
}