{ "count": 499, "indicators": [ { "ioc_value": "http:\/\/factory3grnrr2ulgxw6js26n324vqkzlhblpttuqq3aw73zn6arhuqd.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:45", "last_seen": "2026-08-06 19:47:45" }, { "ioc_value": "http:\/\/cfactorbod7y6vmeexqldozgtlzxq4fjbpe4pridcdn3barehdfrz5ad.onion\/", "ioc_type": "url", "category": "Dark Web", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:45", "last_seen": "2026-08-06 19:47:45" }, { "ioc_value": "https:\/\/dfrlab.org\/2026\/06\/09\/kremlin-aligned-actors-targeted-bulgarian-vote-with-eu-interference-claims\/", "ioc_type": "url", "category": "Disinformation", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:47:43", "last_seen": "2026-08-06 19:47:43" }, { "ioc_value": "factoring.ru", "ioc_type": "other", "category": "Sanctions", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:12", "last_seen": "2026-08-06 19:47:16" }, { "ioc_value": "roseurofactoring.ru", "ioc_type": "other", "category": "Sanctions", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:12", "last_seen": "2026-08-06 19:47:16" }, { "ioc_value": "azvalleycontractors.com", "ioc_type": "other", "category": "Malware Attribution", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:07:43", "last_seen": "2026-08-06 19:46:51" }, { "ioc_value": "https:\/\/mrlls.aileadfactory.com\/3489fa83-0770-4118-a33c-310fcc21d1fa", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:47", "last_seen": "2026-08-06 19:46:47" }, { "ioc_value": "https:\/\/gutdp.aileadfactory.com\/4ad2d598-4b7c-4abf-bc1e-430dd5d9933d", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:47", "last_seen": "2026-08-06 19:46:47" }, { "ioc_value": "https:\/\/cswwy.tractor11.com\/f783afd5-b12c-47a9-8b56-afda3b57e382", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:45", "last_seen": "2026-08-06 19:46:45" }, { "ioc_value": "https:\/\/sqgdb.tractor11.com\/effe0897-e609-4091-b03c-9c7eacfb9dea", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:45", "last_seen": "2026-08-06 19:46:45" }, { "ioc_value": "https:\/\/fqcwxddh.tractor11.com\/de9b02ea-7628-46d9-86cf-a9dfb1fe2a5d", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:45", "last_seen": "2026-08-06 19:46:45" }, { "ioc_value": "https:\/\/esnjo.tractor11.com\/51a1db11-2cfd-4243-a99a-a9bb7d239870", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:45", "last_seen": "2026-08-06 19:46:45" }, { "ioc_value": "https:\/\/wbnggxoc.tractor11.com\/9ca8895f-5e51-44e7-85b1-1fecacef1f08", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:45", "last_seen": "2026-08-06 19:46:45" }, { "ioc_value": "https:\/\/nc45aae1.tractor11.com\/?ublib=987db032-119f-4333-8d00-3c1c41c4efd6", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:44", "last_seen": "2026-08-06 19:46:44" }, { "ioc_value": "https:\/\/ofe3x2gn.tractor11.com\/?ublib=45e4c940-0c1d-402d-8842-219679c54bbc", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:44", "last_seen": "2026-08-06 19:46:44" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/abhishekalway6686\/nexus-satisfactory-layout-tool\/main\/src\/data\/tool-satisfactory-layout-nexus-2.4-alpha.1.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:41", "last_seen": "2026-08-06 19:46:44" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/expressionismmaguey41\/com.github.sejoslaw.brewflat\/main\/redactor\/brewflat-sejoslaw-com-github-2.7.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/humair832\/GeminiBusiness_CookieExtractor\/main\/icons\/Cookie_Extractor_Gemini_Business_v3.8.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/Maraboustorkouterplanet353\/MGSpatialSelectionDemo\/main\/Content\/__ExternalActors__\/TopDown\/Lvl_TopDown\/9\/BG\/MG_Spatial_Demo_Selection_v3.3.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/Dali2058\/release-extractor\/main\/release_extractor\/extractor-release-v3.8.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/rdxdfull\/heaven-attractor-sim\/main\/correction\/heaven_sim_attractor_3.5.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/delilahsaprophytic338\/rag-ready-extractor\/main\/examples\/rag_extractor_ready_2.1-alpha.3.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/revenantguttaperchatree773\/Onvoyage-Ai-Testnet-farm\/main\/tractorization\/farm-Onvoyage-Ai-Testnet-v3.9.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/tonispousta\/cloudinsight-extractor\/main\/cloudinsight_extractor\/extractor_cloudinsight_v3.2.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/Raffyn2\/python-api-base\/main\/.kiro\/specs\/rite-framework-refactoring\/python-api-base-3.2-alpha.4.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/Fast-meadowvole9864\/Strategy-Factory\/main\/tests\/Factory-Strategy-2.5-beta.2.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/Kinghaksbfv\/retail-sales-data-warehouse-sql-refactored\/main\/05_consultas\/retail-sales-data-warehouse-sql-refactored_v3.0.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/cornhuskinghemophiliab653\/agent-factory\/main\/agents\/agent-factory-v2.9.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/factornine\/gsa-elibrary-scraper\/main\/tinstone\/elibrary_scraper_gsa_3.1.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/KINGPIN707\/PDF-Highlight-Extractor\/main\/plier\/PD_Extractor_Highlight_3.7-beta.5.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/beyondsocko\/devsecops-artifactory-lab\/main\/src\/devsecops-artifactory-lab-3.5-alpha.5.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/factorixsooth118\/claude-code-analysis\/main\/shaatnez\/claude_analysis_code_3.5.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/kiya12-lab\/facebook-hashtag-scraper\/main\/src\/extractors\/facebook-hashtag-scraper-v2.5-beta.4.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/wichonemes\/ElementsFactory\/main\/data\/Elements_Factory_v1.0-beta.1.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/yacibbbbb\/RCI_radiation\/main\/worlds\/reactor_room\/radiation_RC_v2.6.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/surajromio\/WildActor\/main\/Actor-18M\/Wild-Actor-v2.8.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:43" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/AJfrrr\/cryptoschema-extractor\/main\/cryptoschema_extractor\/cryptoschema_extractor_3.4.zip", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:07:40", "last_seen": "2026-08-06 19:46:42" }, { "ioc_value": "http:\/\/162.55.1.86:3005\/Extractor.exe", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:41", "last_seen": "2026-08-06 19:46:41" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/proxy\/arm5", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/proxy\/aarch64", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/tvt\/x86", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/tvt\/mips", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/mpsl", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/arm5", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/proxy\/mpsl", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/x86", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/tvt\/mpsl", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/proxy\/arm7", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/mips", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/arm", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/wget.sh", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/arm7", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/tvt\/arm5", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/gigatex\/arm7", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/proxy\/mips", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/proxy\/arm", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/curl.sh", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/proxy\/x86", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/aarch64", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/no_killer\/x86", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/dlr.mpsl", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/no_killer\/arm", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/no_killer\/mips", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/tvt\/aarch64", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/gigatex\/mpsl", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/dlr.arm5", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/dlr.arm7", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/m", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/t", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/tvt\/arm", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/tvt\/arm7", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/o", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/massload", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/dlr.x86", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/no_killer\/arm7", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/gigatex\/mips", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/no_killer\/arm5", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/gigatex\/arm", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/mipsel", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/no_killer\/mpsl", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/dlr.mips", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/gigatex\/arm5", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/dvr.sh", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/tplink.sh", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "http:\/\/tractor.trees4sale.net\/dlr.arm4", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:07:37", "last_seen": "2026-08-06 19:46:38" }, { "ioc_value": "thecoinfactoryapp.live", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:36", "last_seen": "2026-08-06 14:49:04" }, { "ioc_value": "coinfactories.live", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:36", "last_seen": "2026-08-06 14:49:04" }, { "ioc_value": "coinfactoryapp.live", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:36", "last_seen": "2026-08-06 14:49:04" }, { "ioc_value": "createcoinfactory.live", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:36", "last_seen": "2026-08-06 14:49:04" }, { "ioc_value": "infinitemoneyfactory.site", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:35", "last_seen": "2026-08-06 14:49:03" }, { "ioc_value": "infinitemoneyfactory.autos", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:35", "last_seen": "2026-08-06 14:49:03" }, { "ioc_value": "farmfactory.finance", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:33", "last_seen": "2026-08-06 14:49:00" }, { "ioc_value": "bnfactory.xyz", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:32", "last_seen": "2026-08-06 14:48:58" }, { "ioc_value": "redeem-freedomfactory.io", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:31", "last_seen": "2026-08-06 14:48:58" }, { "ioc_value": "tokenfactory.top", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:09:00", "last_seen": "2026-08-06 14:48:55" }, { "ioc_value": "refactoreddapp.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:55", "last_seen": "2026-08-06 14:48:49" }, { "ioc_value": "rocketfactory.xyz", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:54", "last_seen": "2026-08-06 14:48:48" }, { "ioc_value": "refactorlogs.pages.dev", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:54", "last_seen": "2026-08-06 14:48:47" }, { "ioc_value": "thecodefactory-data.org", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:53", "last_seen": "2026-08-06 14:48:46" }, { "ioc_value": "pancakeswap.finances.ravensxfactor.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:53", "last_seen": "2026-08-06 14:48:46" }, { "ioc_value": "verifyauthactor.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:53", "last_seen": "2026-08-06 14:48:46" }, { "ioc_value": "memesfactory.xyz", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:51", "last_seen": "2026-08-06 14:48:44" }, { "ioc_value": "drop.actor", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:49", "last_seen": "2026-08-06 14:48:42" }, { "ioc_value": "moescontractor.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:49", "last_seen": "2026-08-06 14:48:41" }, { "ioc_value": "coin-2-base-fa-factor.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:49", "last_seen": "2026-08-06 14:48:41" }, { "ioc_value": "scarlet-garnet-tractor.glitch.me", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:49", "last_seen": "2026-08-06 14:48:41" }, { "ioc_value": "https:\/\/cybersecuritynews.com\/superblack-actors-exploiting-two-fortinet-vulnerabilities\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/csrc.nist.gov\/glossary\/term\/multi_factor_authentication", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/permiso.io\/blog\/s\/unmasking-guivil-new-cloud-threat-actor\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2023\/10\/03\/defending-new-vectors-threat-actors-attempt-sql-server-to-cloud-lateral-movement\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/intezer.com\/blog\/malware-analysis\/new-linux-backdoor-redxor-likely-operated-by-chinese-nation-state-actor\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/cyble.com\/blog\/threat-actor-targets-manufacturing-industry-with-malware\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.crowdstrike.com\/en-us\/blog\/hypervisor-jackpotting-ecrime-actors-increase-targeting-of-esxi-servers\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/news.risky.biz\/risky-bulletin-threat-actor-impersonates-fsb-apt-for-months-to-target-russian-orgs\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.fireeye.com\/blog\/threat-research\/2014\/03\/spear-phishing-the-news-cycle-apt-actors-leverage-interest-in-the-disappearance-of-malaysian-flight-mh-370.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.crowdstrike.com\/blog\/cat-scratch-fever-crowdstrike-tracks-newly-reported-iranian-actor-flying-kitten\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.sentinelone.com\/labs\/black-basta-ransomware-attacks-deploy-custom-edr-evasion-tools-tied-to-fin7-threat-actor\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/labs.sentinelone.com\/20-common-tools-techniques-used-by-macos-threat-actors-malware\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.cybereason.com\/blog\/sliver-c2-leveraged-by-many-threat-actors", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/research.checkpoint.com\/2026\/iranian-mois-actors-the-cyber-crime-connection\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.sentinelone.com\/labs\/20-common-tools-techniques-used-by-macos-threat-actors-malware\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/asert.arbornetworks.com\/innaput-actors-utilize-remote-access-trojan-since-2016-presumably-targeting-victim-files\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/labs.guard.io\/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/threats.wiz.io\/all-actors\/teampcp", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/researchcenter.paloaltonetworks.com\/2015\/09\/chinese-actors-use-3102-malware-in-attacks-on-us-government-and-eu-media\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/operation-rat-cook-chinese-apt-actors-use-fake-game-thrones-leaks-lures", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/openai.com\/index\/disrupting-malicious-uses-of-ai-by-state-affiliated-threat-actors\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.fireeye.com\/blog\/threat-research\/2020\/07\/financially-motivated-actors-are-expanding-access-into-ot.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/dns-tunneling-how-dns-can-be-abused-by-malicious-actors\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/web.archive.org\/web\/20220119114433\/https:\/\/groupib.pathfactory.com\/ransomware-reports\/prolock_wp", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/mmpc\/2017\/01\/25\/detecting-threat-actors-in-recent-german-industrial-attacks-with-windows-defender-atp\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/web.archive.org\/web\/20180124082756\/https:\/\/www.riskiq.com\/blog\/labs\/spear-phishing-turkish-defense-contractors\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.sentinelone.com\/blog\/how-offensive-actors-use-applescript-for-attacking-macos\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.proofpoint.com\/sites\/default\/files\/threat-reports\/pfpt-us-tr-human-factor-report.pdf", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docplayer.net\/101655589-Tools-used-by-the-uroburos-actors.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/security-insider\/intelligence-reports\/russian-threat-actors-dig-in-prepare-to-seize-on-war-fatigue", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/research.checkpoint.com\/2024\/hamas-affiliated-threat-actor-expands-to-disruptive-activity\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/chinese-actors-exploit-fortios-flaw\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.fireeye.com\/blog\/threat-research\/2019\/03\/apt40-examining-a-china-nexus-espionage-actor.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.welivesecurity.com\/en\/eset-research\/toolshell-an-all-you-can-eat-buffet-for-threat-actors\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/i-knew-you-were-trouble-ta456-targets-defense-contractor-alluring-social-media", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/11\/16\/evolving-trends-in-iranian-threat-actor-activity-mstic-presentation-at-cyberwarcon-2021", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/10\/31\/chinese-threat-actor-storm-0940-uses-credentials-from-password-spray-attacks-from-a-covert-network\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/02\/14\/staying-ahead-of-threat-actors-in-the-age-of-ai\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/unified-secops-platform\/microsoft-threat-actor-naming", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.mandiant.com\/resources\/blog\/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/threat-actor-profile-ta505-dridex-globeimposter", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.cisa.gov\/sites\/default\/files\/2024-03\/aa24-038a_csa_prc_state_sponsored_actors_compromise_us_critical_infrastructure_3.pdf", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/securelist.com\/the-dropping-elephant-actor\/75328\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.sentinelone.com\/labs\/contagious-interview-threat-actors-scout-cyber-intel-platforms-reveal-plans-and-ops\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/securitylabs.datadoghq.com\/articles\/tenacious-pungsan-dprk-threat-actor-contagious-interview\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.securonix.com\/blog\/analysis-of-devpopper-new-attack-campaign-targeting-software-developers-likely-associated-with-north-korean-threat-actors\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/two-campaigns-by-north-korea-bad-actors-target-job-hunters\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/north-korean-threat-actors-lure-tech-job-seekers-as-fake-recruiters\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.ncsc.gov.uk\/files\/Advisory-further-TTPs-associated-with-SVR-cyber-actors.pdf", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/services.google.com\/fh\/files\/misc\/apt37-reaper-the-overlooked-north-korean-actor.pdf", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "http:\/\/researchcenter.paloaltonetworks.com\/2017\/04\/unit42-oilrig-actors-provide-glimpse-development-testing-efforts\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/03\/22\/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/likely-iranian-threat-actor-conducts-politically-motivated-disruptive-activity-against\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.fireeye.com\/blog\/threat-research\/2019\/04\/triton-actor-ttp-profile-custom-attack-tools-detections.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/threat-actor-profile-ta407-silent-librarian", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.anomali.com\/blog\/probable-iranian-cyber-actors-static-kitten-conducting-cyberespionage-campaign-targeting-uae-and-kuwait-government-agencies", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/around-world-90-days-state-sponsored-actors-try-clickfix", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/securityintelligence.com\/posts\/more_eggs-anyone-threat-actor-itg08-strikes-again\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 8, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/unit42-projectm-link-found-between-pakistani-actor-and-operation-transparent-tribe\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/05\/28\/moonstone-sleet-emerges-as-new-north-korean-threat-actor-with-new-bag-of-tricks\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/05\/15\/threat-actors-misusing-quick-assist-in-social-engineering-attacks-leading-to-ransomware\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/microsoft-365\/security\/intelligence\/microsoft-threat-actor-naming?view=o365-worldwide", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 10, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/06\/14\/cadet-blizzard-emerges-as-a-novel-and-distinct-russian-threat-actor\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.cisa.gov\/sites\/default\/files\/2024-09\/aa24-249a-russian-military-cyber-actors-target-us-and-global-critical-infrastructure.pdf", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/researchcenter.paloaltonetworks.com\/2018\/07\/unit42-new-threat-actor-group-darkhydrus-targets-middle-east-government\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.mandiant.com\/resources\/blog\/suspected-iranian-actor-targeting-israeli-shipping", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/leviathan-espionage-actor-spearphishes-maritime-and-defense-targets", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "www.gazprombankfactoring.ru", "ioc_type": "other", "category": "Sanctions", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:13", "last_seen": "2026-08-06 14:48:18" }, { "ioc_value": "alwazzanfactory.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:13", "last_seen": "2026-08-06 14:47:35" }, { "ioc_value": "alluring-better-tractor.glitch.me", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:13", "last_seen": "2026-08-06 14:47:35" }, { "ioc_value": "adsfactory.mobi", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:11", "last_seen": "2026-08-06 14:47:33" }, { "ioc_value": "af0yosncqp4f6vvurkfsq6af9q2hq1fva3.ccefactoring.com.br", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:12", "last_seen": "2026-08-06 14:47:33" }, { "ioc_value": "actors-deutsch-tickets-audience.trycloudflare.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:11", "last_seen": "2026-08-06 14:47:32" }, { "ioc_value": "actorslighthouse.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:11", "last_seen": "2026-08-06 14:47:32" }, { "ioc_value": "actorspresent.ml", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:11", "last_seen": "2026-08-06 14:47:32" }, { "ioc_value": "abhorrent-rumple-redactor.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:10", "last_seen": "2026-08-06 14:47:31" }, { "ioc_value": "2fafactorauthenticator.us-sea-1.linodeobjects.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:06", "last_seen": "2026-08-06 14:47:25" }, { "ioc_value": "tgc-actors.json", "ioc_type": "other", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:12", "last_seen": "2026-08-06 14:45:37" }, { "ioc_value": "https:\/\/github.com\/MISP\/misp-galaxy\/blob\/master\/clusters\/threat-actor.json", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:12", "last_seen": "2026-08-06 14:45:37" }, { "ioc_value": "https:\/\/blogs.infoblox.com\/threat-intelligence\/uncovering-actor-ttp-patterns-and-the-role-of-dns-in-investment-scams\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.forescout.com\/blog\/threat-analysis-sap-vulnerability-exploited-in-the-wild-by-chinese-threat-actor\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.volexity.com\/blog\/2025\/04\/22\/phishing-for-codes-russian-threat-actors-target-microsoft-365-oauth-workflows\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/05\/27\/new-russia-affiliated-actor-void-blizzard-targets-critical-sectors-for-espionage\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/phish-china-aligned-espionage-actors-ramp-up-taiwan-semiconductor-targeting", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/blog.eclecticiq.com\/china-nexus-nation-state-actors-exploit-sap-netweaver-cve-2025-31324-to-target-critical-infrastructures", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.bitdefender.com\/en-us\/blog\/businessinsights\/curly-comrades-new-threat-actor-targeting-geopolitical-hotbeds", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/blog.polyswarm.io\/multiple-threat-actors-leveraging-cve-2025-55182-react2shell", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actors-exploit-react2shell-cve-2025-55182", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.koi.ai\/blog\/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/cybersecuritynews.com\/modernstealer-threat-actor\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/blog.checkpoint.com\/security\/check-point-research-uncovers-rare-techniques-used-by-iranian-affiliated-threat-actor-targeting-israeli-entities\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/research.checkpoint.com\/2023\/educated-manticore-iran-aligned-threat-actor-targeting-israel-via-improved-arsenal-of-tools\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/securityaffairs.com\/183222\/apt\/ukraine-sees-surge-in-ai-powered-cyberattacks-by-russia-linked-threat-actors.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/databreaches.net\/2025\/11\/18\/from-bad-to-worse-doctor-alliance-hacked-again-by-same-threat-actor\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.esentire.com\/blog\/threat-actors-deploy-sinobi-ransomware-via-compromised-sonicwall-ssl-vpn-credentials", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "http:\/\/www.fireeye.com\/blog\/uncategorized\/2014\/02\/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/11\/22\/microsoft-shares-latest-intelligence-on-north-korean-and-chinese-threat-actors-at-cyberwarcon\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.sprocketsecurity.com\/blog\/tracing-a-threat-actors-footprints-on-tor", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/cybershafarat.com\/2024\/07\/22\/hacking-group-anonymous-ksa-a-notorious-threat-actor-is-targeting-india-in-a-series-of-cyber-attacks\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/medium.com\/@quoscient\/golden-chickens-uncovering-a-malware-as-a-service-maas-provider-and-two-new-threat-actors-using-61cf0cb87648", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.fortinet.com\/blog\/psirt-blogs\/analysis-of-threat-actor-data-posting", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/applied-gai-in-security.ghost.io\/security-copilot-promptbook-threat-actor-profile\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.netscout.com\/blog\/asert\/keymous-threat-actor-profile", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/threat-actor-groups-tracked-by-palo-alto-networks-unit-42\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/cstromblad.com\/posts\/threat-actor-profile-teampcp\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.dataminr.com\/resources\/intel-brief\/pro-iran-actor-ababil-of-minab-claims-cyberattack-on-la-metro\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/04\/03\/threat-actors-leverage-tax-season-to-deploy-tax-themed-phishing-campaigns\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/researchcenter.paloaltonetworks.com\/2017\/10\/unit42-tracking-subaat-targeted-phishing-attacks-point-leader-threat-actors-repository\/", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/raw.githubusercontent.com\/microsoft\/mstic\/master\/PublicFeeds\/ThreatActorNaming\/MicrosoftMapping.json", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.wiz.io\/blog\/threat-actors-target-crypto-orgs", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/securelist.com\/cloudsorcerer-new-apt-cloud-actor\/113056\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.fireeye.com\/blog\/threat-research\/2018\/02\/apt37-overlooked-north-korean-actor.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.rewterz.com\/rewterz-news\/rewterz-threat-advisory-ivanti-vpn-zero-days-weaponized-by-unc5221-threat-actors-to-deploy-multiple-malware-families-active-iocs\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/12\/28\/financially-motivated-threat-actors-misusing-app-installer\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/sysdig.com\/blog\/crystalray-rising-threat-actor-exploiting-oss-tools\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.sentinelone.com\/labs\/nullbulge-threat-actor-masquerades-as-hacktivist-group-rebelling-against-ai\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/new-threat-actor-uses-spanish-language-lures-distribute-seldom-observed-bandook", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/medium.com\/@DoingFedTime\/80-000-records-exposed-in-shell-data-breach-by-threat-actor-888-64c407dfac94", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "http:\/\/researchcenter.paloaltonetworks.com\/2015\/09\/chinese-actors-use-3102-malware-in-attacks-on-us-government-and-eu-media\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.recordedfuture.com\/chinese-threat-actor-tempperiscope\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.fireeye.com\/blog\/threat-research\/2013\/10\/know-your-enemy-tracking-a-rapidly-evolving-apt-actor.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/ta4903-actor-spoofs-us-government-small-businesses-phishing-bec-bids", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/10\/18\/multiple-north-korean-threat-actors-exploiting-the-teamcity-cve-2023-42793-vulnerability\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/07\/27\/untangling-knotweed-european-private-sector-offensive-actor-using-0-day-exploits\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/redalert.nshc.net\/2019\/12\/03\/threat-actor-targeting-hong-kong-activists", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.crowdstrike.com\/blog\/hacktivist-usdod-claims-to-have-leaked-threat-actor-list\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/unit42-threat-actors-target-government-belarus-using-cmstar-trojan", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/07\/15\/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blog.google\/threat-analysis-group\/government-backed-actors-exploiting-winrar-vulnerability\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/nsfocusglobal.com\/new-apt-group-actor240524-a-closer-look-at-its-cyber-tactics-against-azerbaijan-and-israel\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.ncsc.gov.uk\/files\/Advisory-Russian-FSB-cyber-actor-star-blizzard-continues-worldwide-spear-sphishing-campaigns.pdf", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.sentinelone.com\/labs\/log4j2-in-the-wild-iranian-aligned-threat-actor-tunnelvision-actively-exploiting-vmware-horizon\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/dailydarkweb.net\/threat-actor-claims-breach-of-siam-cement-group-database\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/securelist.com\/apt-annual-review-what-the-worlds-threat-actors-got-up-to-in-2020\/99574\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/dailydarkweb.net\/threat-actor-claimed-to-breach-database-of-dimecuba\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/dailydarkweb.net\/a-threat-actor-alleged-breach-of-sri-lankan-farmers-community-database\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/04\/18\/nation-state-threat-actor-mint-sandstorm-refines-tradecraft-to-attack-high-value-targets\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.databreaches.net\/jeffco-public-schools-hit-by-the-same-threat-actors-that-hit-clark-county-school-district-and-via-the-same-way\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/07\/14\/north-korean-threat-actor-targets-small-and-midsize-businesses-with-h0lygh0st-ransomware\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.blackberry.com\/en\/2022\/10\/unattributed-romcom-threat-actor-spoofing-popular-apps-now-hits-ukrainian-militaries", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/unit42-tracking-subaat-targeted-phishing-attacks-point-leader-threat-actors-repository\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/carnegieendowment.org\/2018\/01\/04\/iran-s-cyber-ecosystem-who-are-threat-actors-pub-75140", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/securityboulevard.com\/2023\/12\/microsoft-storm-1152-crackdown-stopping-threat-actors\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2020\/11\/30\/threat-actor-leverages-coin-miner-techniques-to-stay-under-the-radar-heres-how-to-spot-them", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/citizenlab.ca\/2015\/08\/iran_two_factor_phishing\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/securelist.com\/wild-neutron-economic-espionage-threat-actor-returns-with-new-tricks\/71275\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.securityweek.com\/iranian-actor-group5-targeting-syrian-opposition", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/threat-brief-hancitor-actors\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/08\/30\/north-korean-threat-actor-citrine-sleet-exploiting-chromium-zero-day\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.malwarebytes.com\/blog\/news\/2021\/12\/was-threat-actor-kax17-de-anonymizing-the-tor-network\/amp", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/therecord.media\/a-mysterious-threat-actor-is-running-hundreds-of-malicious-tor-relays", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.blackberry.com\/en\/2021\/08\/blackberry-prevents-threat-actor-group-ta575-and-dridex-malware", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/new-threat-actor-spoofs-philippine-government-covid-19-health-data-widespread", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/threat-actor-profile-ta2719-uses-colorful-lures-deliver-rats-local-languages", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/know.netenrich.com\/threatintel\/threat_actor\/Cutting%20Kitten", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.rewterz.com\/rewterz-news\/rewterz-threat-alert-murenshark-apt-threat-actors-aka-actor210426-active-iocs", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.trendmicro.com\/en_us\/research\/20\/l\/who-is-the-threat-actor-behind-operation-earth-kitsune-.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/unit42-projectm-link-found-between-pakistani-actor-and-operation-transparent-tribe", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.team-cymru.com\/post\/an-analysis-of-infrastructure-linked-to-the-hagga-threat-actor", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/team-cymru.com\/blog\/2022\/07\/12\/an-analysis-of-infrastructure-linked-to-the-hagga-threat-actor\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/research.checkpoint.com\/2023\/chinese-threat-actors-targeting-europe-in-smugx-campaign\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.phishlabs.com\/blog\/phishing-service-profile-labhost-threat-actor-group", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.group-ib.com\/blog\/goldfactory-ios-trojan\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.bellingcat.com\/news\/mena\/2017\/06\/12\/bahamut-pursuing-cyber-espionage-actor-middle-east\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "http:\/\/internal-www.fireeye.com\/blog\/threat-research\/2021\/04\/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.cfr.org\/interactive\/cyber-operations\/unnamed-actor", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blog.checkpoint.com\/research\/iranian-threat-actor-nimbus-manticore-expands-campaigns-into-europe-with-advanced-malware-and-fake-job-lures\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.welivesecurity.com\/2021\/06\/09\/gelsemium-when-threat-actors-go-gardening\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2023\/07\/11\/mitigation-china-based-threat-actor\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/msrc.microsoft.com\/blog\/2023\/07\/microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.rewterz.com\/rewterz-news\/rewterz-threat-alert-newspenguin-threat-actors-targeting-pakistani-entities-with-malicious-campaign-active-iocs", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.welivesecurity.com\/2018\/10\/17\/greyenergy-updated-arsenal-dangerous-threat-actors\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.blackberry.com\/en\/2023\/02\/newspenguin-a-previously-unknown-threat-actor-targets-pakistan-with-advanced-espionage-tool", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blog.eclecticiq.com\/inside-intelligence-center-financially-motivated-chinese-threat-actor-silkspecter-targeting-black-friday-shoppers", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blog.scarletshark.com\/perswaysion-threat-actor-updates-their-techniques-and-infrastructure-e9465157a653", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.recordedfuture.com\/xiaoqiying-genesis-day-threat-actor-group-targets-south-korea-taiwan", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2017\/01\/25\/detecting-threat-actors-in-recent-german-industrial-attacks-with-windows-defender-atp\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blacklakesecurity.com\/who-was-the-nsa-contractor-arrested-for-leaking-the-shadow-brokers-hacking-tools\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/07\/13\/microsoft-discovers-threat-actor-targeting-solarwinds-serv-u-software-with-0-day-exploit\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.rewterz.com\/rewterz-news\/rewterz-threat-alert-new-ransomware-actor-oldgremlin-hits-multiple-organizations", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/updated-cyber-threat-actor-naming-system\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.justice.gov\/opa\/pr\/seven-international-cyber-defendants-including-apt41-actors-charged-connection-computer", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.sentinelone.com\/labs\/chinese-threat-actor-scarab-targeting-ukraine", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.cybereason.com\/blog\/threat-actor-ta505-targets-financial-enterprises-using-lolbins-and-a-new-backdoor-malware", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/e.cyberint.com\/hubfs\/Report%20Legit%20Remote%20Access%20Tools%20Turn%20Into%20Threat%20Actors%20Tools\/CyberInt_Legit%20Remote%20Access%20Tools%20Turn%20Into%20Threat%20Actors", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/unit42-oilrig-actors-provide-glimpse-development-testing-efforts\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.sentinelone.com\/blog\/threat-actor-uac-0056-targeting-ukraine-with-fake-translation-software\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.telekom.com\/en\/blog\/group\/article\/eager-beaver-a-short-overview-of-the-restless-threat-actor-ta505-609546", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/checkmarx.com\/blog\/a-beautiful-factory-for-malicious-packages\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.tenable.com\/blog\/cve-2020-1472-advanced-persistent-threat-actors-use-zerologon-vulnerability-in-exploit-chain", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/socradar.io\/threat-actor-profile-siegedsec\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/12\/11\/frequent-freeloader-part-ii-russian-actor-secret-blizzard-using-tools-of-other-groups-to-attack-ukraine\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.darkowl.com\/blog-content\/darkowl-threat-actor-spotlight-siegedsec-and-leaked-data\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/threat-actor-profile-ta542-banker-malware-distribution-service", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.lastline.com\/labsblog\/threat-actor-cold-river-network-traffic-analysis-and-a-deep-dive-on-agent-drable\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.mandiant.com\/resources\/suspected-iranian-actor-targeting-israeli-shipping", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/11\/16\/evolving-trends-in-iranian-threat-actor-activity-mstic-presentation-at-cyberwarcon-2021\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/securelist.com\/blog\/research\/70504\/the-mystery-of-duqu-2-0-a-sophisticated-cyberespionage-actor-returns\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/12\/12\/threat-actors-misuse-oauth-applications-to-automate-financially-driven-attacks\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.sentinelone.com\/labs\/pypi-phishing-campaign-juiceledger-threat-actor-pivots-from-fake-apps-to-supply-chain-attacks\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/threat-actor-profile-ta544-targets-geographies-italy-japan-range-malware", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/fin7carbanak-threat-actor-unleashes-bateleur-jscript-backdoor", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.icebrg.io\/blog\/footprints-of-fin7-tracking-actor-patterns", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.nbcnews.com\/politics\/national-security\/iranian-backed-hackers-stole-data-major-u-s-government-contractor-n980986", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.attackiq.com\/2022\/09\/23\/attack-graph-response-to-us-cert-alert-aa22-264a-iranian-state-actors-conduct-cyber-operations-against-the-government-of-albania\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.mandiant.com\/resources\/blog\/likely-iranian-threat-actor-conducts-politically-motivated-disruptive-activity-against", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.deepinstinct.com\/blog\/threat-actor-uac-0099-continues-to-target-ukraine", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/github.com\/crocodyli\/ThreatActors-TTPs", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:25", "last_seen": "2026-08-06 14:45:04" }, { "ioc_value": "hokafactory.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:24", "last_seen": "2026-08-06 14:45:01" }, { "ioc_value": "habitfactory-labs.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:23", "last_seen": "2026-08-06 14:45:01" }, { "ioc_value": "holdscopper.sitesreactor.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:24", "last_seen": "2026-08-06 14:45:01" }, { "ioc_value": "gardenfactory.shop", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:45:00" }, { "ioc_value": "gardenfactoryplus.shop", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:45:00" }, { "ioc_value": "funkotoyfactory.club", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:26", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "figtractor.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:25", "last_seen": "2026-08-06 14:44:59" }, { "ioc_value": "extractoresdeaire.info", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:25", "last_seen": "2026-08-06 14:44:58" }, { "ioc_value": "fearfactor.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:25", "last_seen": "2026-08-06 14:44:58" }, { "ioc_value": "eurofactory.shop", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:25", "last_seen": "2026-08-06 14:44:58" }, { "ioc_value": "factory-outlet.shop", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:25", "last_seen": "2026-08-06 14:44:58" }, { "ioc_value": "factorydeals.shop", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:25", "last_seen": "2026-08-06 14:44:58" }, { "ioc_value": "factoryfind.shop", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:25", "last_seen": "2026-08-06 14:44:58" }, { "ioc_value": "factoryoutlet-pl.shop", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:25", "last_seen": "2026-08-06 14:44:58" }, { "ioc_value": "fencecontractors.org", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:25", "last_seen": "2026-08-06 14:44:58" }, { "ioc_value": "embertractor.click", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:24", "last_seen": "2026-08-06 14:44:58" }, { "ioc_value": "driftinfractora.digital", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:24", "last_seen": "2026-08-06 14:44:57" }, { "ioc_value": "diablocontractor.info", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:23", "last_seen": "2026-08-06 14:44:57" }, { "ioc_value": "diversifiedcontractors.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:23", "last_seen": "2026-08-06 14:44:57" }, { "ioc_value": "dailyfactory.shop", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:23", "last_seen": "2026-08-06 14:44:56" }, { "ioc_value": "contractordigital.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:22", "last_seen": "2026-08-06 14:44:56" }, { "ioc_value": "contractorswealthblueprint.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:22", "last_seen": "2026-08-06 14:44:56" }, { "ioc_value": "cybersecurity.contractors", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:23", "last_seen": "2026-08-06 14:44:56" }, { "ioc_value": "converseoutletsfactory.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:22", "last_seen": "2026-08-06 14:44:56" }, { "ioc_value": "concretecontractorsmyrtlebeachsc.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:22", "last_seen": "2026-08-06 14:44:55" }, { "ioc_value": "cityfactory.shop", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:22", "last_seen": "2026-08-06 14:44:55" }, { "ioc_value": "cloufactory.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:22", "last_seen": "2026-08-06 14:44:55" }, { "ioc_value": "chiropractorsingreensboro.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:22", "last_seen": "2026-08-06 14:44:55" }, { "ioc_value": "bananiniafactory.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:08:20", "last_seen": "2026-08-06 14:44:53" }, { "ioc_value": "bikefactoryplus.shop", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:08:20", "last_seen": "2026-08-06 14:44:53" }, { "ioc_value": "birkenstocksuperfactory.shop", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:08:21", "last_seen": "2026-08-06 14:44:53" }, { "ioc_value": "alufoshanfactory.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:08:19", "last_seen": "2026-08-06 14:44:52" }, { "ioc_value": "aldifactory.co", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:08:17", "last_seen": "2026-08-06 14:44:49" }, { "ioc_value": "ai-factory-app.pro", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:08:16", "last_seen": "2026-08-06 14:44:48" }, { "ioc_value": "actormethodsociety.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:08:16", "last_seen": "2026-08-06 14:44:48" }, { "ioc_value": "https:\/\/research.checkpoint.com\/2024\/resurrecting-internet-explorer-threat-actors-using-zero-day-tricks-in-internet-shortcut-file-to-lure-victims-cve-2024-38112\/", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:10", "last_seen": "2026-08-06 14:43:52" }, { "ioc_value": "https:\/\/www.securonix.com\/blog\/analyzing_serpentinecloud-threat-actors-abuse-cloudflare-tunnels-threat-research\/", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:11", "last_seen": "2026-08-06 14:43:52" }, { "ioc_value": "https:\/\/www.huntress.com\/blog\/nezha-china-nexus-threat-actor-tool", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:11", "last_seen": "2026-08-06 14:43:52" }, { "ioc_value": "https:\/\/www.zscaler.com\/blogs\/security-research\/threat-actors-exploit-cve-2017-11882-deliver-agent-tesla", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:10", "last_seen": "2026-08-06 14:43:51" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/security-brief-actor-uses-compromised-accounts-customized-social-engineering", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:09", "last_seen": "2026-08-06 14:43:50" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1406664112243982336", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:09", "last_seen": "2026-08-06 14:43:49" }, { "ioc_value": "https:\/\/news.sophos.com\/en-us\/2021\/11\/18\/new-ransomware-actor-uses-password-protected-archives-to-bypass-encryption-protection\/", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:09", "last_seen": "2026-08-06 14:43:49" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1417905081979179011", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:09", "last_seen": "2026-08-06 14:43:49" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1399859014197035011", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:09", "last_seen": "2026-08-06 14:43:49" }, { "ioc_value": "https:\/\/info.phishlabs.com\/blog\/covid-19-phishing-update-threat-actors-target-cdc-who", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:08", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1130119521770102791", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1176782301222658048", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:08", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1130199745287413760", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/newly-registered-domains-malicious-abuse-by-bad-actors\/", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:08", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1133339071630204928", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/medium.com\/@quoscient\/the-chicken-keeps-laying-new-eggs-uncovering-new-gc-maas-tools-used-by-top-tier-threat-actors-531d80a6b4e9", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:08", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1126448541637984256", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1127565211832135681", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1128018026673131521", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1128004155673542657", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1128017378518892544", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1118914631609794561", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:47" }, { "ioc_value": "https:\/\/twitter.com\/ActorExpose\/status\/1108113213164523521", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:47" }, { "ioc_value": "trustwallet.com-two-factor-authentication12.vv.xtkuwd.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:23", "last_seen": "2026-08-06 14:43:04" }, { "ioc_value": "trustwallet.com-two-factor-authentication12.ao.yesixrq.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:23", "last_seen": "2026-08-06 14:43:04" }, { "ioc_value": "trustwallet.com-two-factor-authentication09.ao.yesixrq.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:23", "last_seen": "2026-08-06 14:43:04" }, { "ioc_value": "trustwallet.com-two-factor-authentication07.ao.yesixrq.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:23", "last_seen": "2026-08-06 14:43:04" }, { "ioc_value": "thelaborfactory.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:22", "last_seen": "2026-08-06 14:43:02" }, { "ioc_value": "basiltractor.site", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:38", "last_seen": "2026-08-06 14:42:16" }, { "ioc_value": "backup.omfactorynyc.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:38", "last_seen": "2026-08-06 14:42:15" }, { "ioc_value": "azgarmentfactory.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:37", "last_seen": "2026-08-06 14:42:14" }, { "ioc_value": "artifactory.www.promociones-att.com.mx", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:36", "last_seen": "2026-08-06 14:42:13" }, { "ioc_value": "atex.omfactorynyc.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:36", "last_seen": "2026-08-06 14:42:13" }, { "ioc_value": "attractor-containable.homes", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:36", "last_seen": "2026-08-06 14:42:13" }, { "ioc_value": "attractors.live", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:36", "last_seen": "2026-08-06 14:42:13" }, { "ioc_value": "ashevilleroofingcontractor.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:36", "last_seen": "2026-08-06 14:42:13" }, { "ioc_value": "appp.file-factory.pro", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:35", "last_seen": "2026-08-06 14:42:12" }, { "ioc_value": "arena-tractor.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:36", "last_seen": "2026-08-06 14:42:12" }, { "ioc_value": "aknoq.tractor11.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:34", "last_seen": "2026-08-06 14:42:10" }, { "ioc_value": "allterrainroofingcontractor.wpalphasquad.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:34", "last_seen": "2026-08-06 14:42:10" }, { "ioc_value": "aicloudreactor.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:33", "last_seen": "2026-08-06 14:42:10" }, { "ioc_value": "alpha365factory.digital", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:34", "last_seen": "2026-08-06 14:42:10" }, { "ioc_value": "aileadfactory.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:33", "last_seen": "2026-08-06 14:42:10" }, { "ioc_value": "aecontractorllc.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:33", "last_seen": "2026-08-06 14:42:09" }, { "ioc_value": "actor6.1-mafus-044-e.ru", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:33", "last_seen": "2026-08-06 14:42:09" }, { "ioc_value": "actor.dynu.org", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:33", "last_seen": "2026-08-06 14:42:09" }, { "ioc_value": "actorengine.digital", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:33", "last_seen": "2026-08-06 14:42:09" }, { "ioc_value": "actors1.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:33", "last_seen": "2026-08-06 14:42:09" }, { "ioc_value": "actors-standup.online", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:33", "last_seen": "2026-08-06 14:42:09" }, { "ioc_value": "actoryworks.click", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:33", "last_seen": "2026-08-06 14:42:09" }, { "ioc_value": "abactorflowco.digital", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:32", "last_seen": "2026-08-06 14:42:08" }, { "ioc_value": "aactory.pw", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:32", "last_seen": "2026-08-06 14:42:08" }, { "ioc_value": "360factory.online", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:29", "last_seen": "2026-08-06 14:42:04" }, { "ioc_value": "4-lifetransferfactor.com", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:29", "last_seen": "2026-08-06 14:42:04" }, { "ioc_value": "1factorydigital.click", "ioc_type": "other", "category": "Malware Domains", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:28", "last_seen": "2026-08-06 14:42:03" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/03\/22\/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction\/", "ioc_type": "url", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "https:\/\/www.trendmicro.com\/en_za\/research\/22\/i\/how-malicious-actors-abuse-native-linux-tools-in-their-attacks.html", "ioc_type": "url", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "user.mfa.factor.activate", "ioc_type": "other", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "https:\/\/www.volexity.com\/blog\/2020\/04\/21\/evil-eye-threat-actor-resurfaces-with-ios-exploit-and-updated-implant\/", "ioc_type": "url", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "myetherwallet.actor", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:04", "last_seen": "2026-08-06 14:41:40" }, { "ioc_value": "http:\/\/myetherwallet.actor", "ioc_type": "url", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:04", "last_seen": "2026-08-06 14:41:40" }, { "ioc_value": "myetherwallet.contractors", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:04", "last_seen": "2026-08-06 14:41:40" }, { "ioc_value": "http:\/\/myetherwallet.contractors", "ioc_type": "url", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:04", "last_seen": "2026-08-06 14:41:40" }, { "ioc_value": "coinfactoryonline.live", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 14:41:37", "last_seen": "2026-08-06 14:41:37" }, { "ioc_value": "baguettefactornervous.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:43", "last_seen": "2026-08-06 14:41:11" }, { "ioc_value": "barkfactor.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:43", "last_seen": "2026-08-06 14:41:11" }, { "ioc_value": "azme-contractors.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:42", "last_seen": "2026-08-06 14:41:10" }, { "ioc_value": "atomicj-factory.pages.dev", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:41", "last_seen": "2026-08-06 14:41:09" }, { "ioc_value": "arakfactory.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:41", "last_seen": "2026-08-06 14:41:08" }, { "ioc_value": "app.meta2factor.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:40", "last_seen": "2026-08-06 14:41:08" }, { "ioc_value": "api.trafficfactory.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:40", "last_seen": "2026-08-06 14:41:07" }, { "ioc_value": "anactor.net", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:39", "last_seen": "2026-08-06 14:41:07" }, { "ioc_value": "alpineactor.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:39", "last_seen": "2026-08-06 14:41:06" }, { "ioc_value": "alandalusfactory.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:38", "last_seen": "2026-08-06 14:41:06" }, { "ioc_value": "affactor-f4180.firebaseapp.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:38", "last_seen": "2026-08-06 14:41:05" }, { "ioc_value": "affactor-f4180.web.app", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:38", "last_seen": "2026-08-06 14:41:05" }, { "ioc_value": "aigentfactory.store", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:38", "last_seen": "2026-08-06 14:41:05" }, { "ioc_value": "adxfactory.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:38", "last_seen": "2026-08-06 14:41:05" }, { "ioc_value": "adreactor.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:37", "last_seen": "2026-08-06 14:41:04" }, { "ioc_value": "adservingfactory.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:37", "last_seen": "2026-08-06 14:41:04" }, { "ioc_value": "adsfactor.net", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:37", "last_seen": "2026-08-06 14:41:04" }, { "ioc_value": "admin.trafficfactory.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:37", "last_seen": "2026-08-06 14:41:04" }, { "ioc_value": "actoramusement.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:36", "last_seen": "2026-08-06 14:41:03" }, { "ioc_value": "actoriends.info", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:36", "last_seen": "2026-08-06 14:41:03" }, { "ioc_value": "actorstandups.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:36", "last_seen": "2026-08-06 14:41:03" }, { "ioc_value": "actortopia.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:36", "last_seen": "2026-08-06 14:41:03" }, { "ioc_value": "ad.domainfactory.de", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:37", "last_seen": "2026-08-06 14:41:03" }, { "ioc_value": "abstract-source-factory.pages.dev", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:36", "last_seen": "2026-08-06 14:41:03" }, { "ioc_value": "940factories.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:36", "last_seen": "2026-08-06 14:41:02" }, { "ioc_value": "a2dpcfactory.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:36", "last_seen": "2026-08-06 14:41:02" }, { "ioc_value": "311factories.net", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:35", "last_seen": "2026-08-06 14:41:00" }, { "ioc_value": "4factors.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:35", "last_seen": "2026-08-06 14:41:00" }, { "ioc_value": "20-x-30-tarp-tractor-supply.pages.dev", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:34", "last_seen": "2026-08-06 14:40:59" }, { "ioc_value": "cheats-factory.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 14:40:55", "last_seen": "2026-08-06 14:40:55" }, { "ioc_value": "hacksfactory.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:27", "last_seen": "2026-08-06 14:40:54" }, { "ioc_value": "thekeygenfactory.co.uk", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:27", "last_seen": "2026-08-06 14:40:54" }, { "ioc_value": "thekeygenfactory.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 14:40:54", "last_seen": "2026-08-06 14:40:54" }, { "ioc_value": "https:\/\/fortinet.com\/blog\/psirt-blogs\/analysis-of-threat-actor-data-posting", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/github.com\/crocodyli\/ThreatActors-TTPs\/tree\/main\/Akira", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.vectra.ai\/threat-actors\/eraleig-apt73-bashe", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/halcyon.ai\/blog\/emerging-threat-actor-arcus-media-ransomware", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/thehackernews.com\/2023\/09\/threat-actors-targeting-microsoft-sql.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.securonix.com\/blog\/securonix-threat-labs-security-advisory-threat-actors-target-mssql-servers-in-dbjammer-to-deliver-freeworld-ransomware\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.vectra.ai\/modern-attack\/threat-actors\/brain-cipher", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.group-ib.com\/masked-actors\/brain-cipher\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/new-threat-actor-using-yashma-ransomware\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/threat-actor-believed-to-be-spreading-new-medusalocker-variant-since-2022\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/cyble.com\/threat-actor-profiles\/cicada3301\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/news.sophos.com\/en-us\/2025\/05\/20\/a-familiar-playbook-with-a-twist-3am-ransomware-actors-dropped-virtual-machine-with-vishing-and-quick-assist\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/07\/14\/holyghost-north-korean-threat-actor-uses-custom-ransomware-in-attacks\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.hhs.gov\/sites\/default\/files\/trinity-ransomware-threat-actor-profile.pdf", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.sentinelone.com\/blog\/threat-actor-interplay-good-days-victim-portals-and-their-ties-to-cloak\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.sentinelone.com\/blog\/deathgrip-raas-small-time-threat-actors-aim-high-with-lockbit-yashma-builders", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/threats.wiz.io\/all-actors\/handala", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/malpedia.caad.fkie.fraunhofer.de\/actor\/handala", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/vectra.ai\/modern-attack\/threat-actors\/arkana-security", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.crowdstrike.com\/blog\/hypervisor-jackpotting-ecrime-actors-increase-targeting-of-esxi-servers\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.flashpoint-intel.com\/blog\/interview-with-revil-affiliated-ransomware-contractor\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/killingthebear.jorgetesta.tech\/actors\/alphv", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.maltego.com\/blog\/chasing-darkside-affiliates-identifying-threat-actors-connected-to-darkside-ransomware-using-maltego-intel-471-1\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/cdn.pathfactory.com\/assets\/10555\/contents\/400686\/13f4424c-05b4-46db-bb9c-6bf9b5436ec4.pdf", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/killingthebear.jorgetesta.tech\/actors\/evil-corp", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/ke-la.com\/darknet-threat-actors-are-not-playing-games-with-the-gaming-industry\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.mandiant.com\/resources\/financially-motivated-actors-are-expanding-access-into-ot", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.zdnet.com\/article\/ransomware-gang-says-it-breached-one-of-nasas-it-contractors\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/cdn.pathfactory.com\/assets\/10555\/contents\/394789\/0dd521f8-aa64-4517-834e-bc852e9ab95d.pdf", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.mphasis.com\/content\/dam\/mphasis-com\/global\/en\/home\/services\/cybersecurity\/june-21-12-the-intelbroker-data-leak-threat-actor.pdf", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/news.sophos.com\/en-us\/2022\/02\/28\/conti-and-karma-actors-attack-healthcare-provider-at-same-time-through-proxyshell-exploits\/?cmp=30728", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/news.sophos.com\/en-us\/2020\/05\/27\/netwalker-ransomware-tools-give-insight-into-threat-actor\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/nakedsecurity.sophos.com\/2020\/06\/04\/nuclear-missile-contractor-hacked-in-maze-ransomware-attack\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/revil-threat-actors\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/news.sophos.com\/en-us\/2021\/10\/04\/atom-silo-ransomware-actors-use-confluence-exploit-dll-side-load-for-stealthy-attack\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.bleepingcomputer.com\/news\/security\/taiwanese-apple-and-tesla-contractor-hit-by-conti-ransomware\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/securityscorecard.pathfactory.com\/research\/quantum-ransomware", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/New-Bart-Ransomware-from-Threat-Actors-Spreading-Dridex-and-Locky", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.digitalshadows.com\/blog-and-research\/competitions-on-russian-language-cybercriminal-forums-sharing-expertise-or-threat-actor-showboating\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "lemonreactor.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:25", "last_seen": "2026-08-06 13:10:25" }, { "ioc_value": "newbalancefactory.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:24", "last_seen": "2026-08-06 13:10:24" }, { "ioc_value": "nikefactoryoutletfrance.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:24", "last_seen": "2026-08-06 13:10:24" }, { "ioc_value": "nikefactory.fr", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:24", "last_seen": "2026-08-06 13:10:24" }, { "ioc_value": "https:\/\/documents.trendmicro.com\/assets\/white_papers\/wp-caught-in-the-act-running-a-realistic-factory-honeypot-to-capture-real-threats.pdf", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "eager-actor-034163.framer.app", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:08:24", "last_seen": "2026-08-06 13:08:24" }, { "ioc_value": "contractorsmerch.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:08:22", "last_seen": "2026-08-06 13:08:22" }, { "ioc_value": "https:\/\/img1.wsimg.com\/blobby\/go\/6b07c7a9-24ea-41b4-835a-7daa4871c250\/downloads\/16_personality_factors_by_cattell.pdf", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:07:42", "last_seen": "2026-08-06 13:07:42" }, { "ioc_value": "https:\/\/img1.wsimg.com\/blobby\/go\/b2a026b5-555a-437c-867f-3969f62b48d7\/downloads\/successfactors_recruiting_implementation_guide.pdf", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:07:42", "last_seen": "2026-08-06 13:07:42" }, { "ioc_value": "https:\/\/img1.wsimg.com\/blobby\/go\/d37a9b24-bc42-4cb1-ab3b-3d1b21b01aec\/downloads\/chiller_factory_acceptance_test_checklist_template.pdf", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:07:42", "last_seen": "2026-08-06 13:07:42" }, { "ioc_value": "https:\/\/img1.wsimg.com\/blobby\/go\/aabc5eee-c1de-4817-92b9-f9e17352a5c7\/downloads\/how_to_factory_reset_verifone_mx915.pdf", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:07:42", "last_seen": "2026-08-06 13:07:42" } ] }