{ "count": 139, "indicators": [ { "ioc_value": "https:\/\/blog.talosintelligence.com\/2017\/06\/worldwide-ransomware-variant.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 10, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-24 12:52:00" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/04\/sodinokibi-ransomware-exploits-weblogic.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 14, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-24 12:52:00" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/06\/vpnfilter-update.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 10, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-24 12:52:00" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-7810\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:23" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-11795-deploys-novel-starland-rat-and-bespoke-wldr-c2-implant-in-financially-motivated-campaign\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:23" }, { "ioc_value": "http:\/\/blog.talosintelligence.com\/2018\/01\/korea-in-crosshairs.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/04\/seaturtle.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-7290\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/sea-turtle-keeps-on-swimming", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/introducing-shrouded-snooper\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-9686\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/08\/rocke-champion-of-monero-miners.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2017\/06\/palestine-delphi.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/moonpeak-malware-infrastructure-north-korea\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-5647-romcom\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-8837\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/dragon-rank-seo-poisoning\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/02\/targeted-attacks-in-middle-east.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-7237-targets-web-hosting-infra\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-8099-new-persistence-mechanisms-and-regional-focus\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-8099-chinese-speaking-cybercrime-group-seo-fraud\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-6382-exploits-cityworks-vulnerability\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/01\/korea-in-crosshairs.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/07\/sweed-agent-tesla.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/voidlink\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2021\/07\/sidecopy.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/04\/dnspionage-brings-out-karkoff.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/coralraider-targets-socialmedia-accounts\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/starry-addax\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-8616-sd-wan\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-9244\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/yorotrooper-espionage-campaign-cis-turkey-europe\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/get-a-loda-this\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/attributing-yorotrooper\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/talos-developing-situation-in-the-middle-east\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-10608-inside-a-large-scale-automated-credential-harvesting-operation-targeting-web-applications\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/lilacsquid\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/11\/dnspionage-campaign-targets-middle-east.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/threat-source-newsletter-sept-28-2023\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/08\/recent-cyber-attack.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/new-lua-based-malware-lucidrook\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "http:\/\/blog.talosintelligence.com\/2017\/06\/palestine-delphi.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-8302\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/uat-5918-targets-critical-infra-in-taiwan\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/sneakychef-sugarghost-rat\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/05\/recent-muddywater-associated-blackwater.html", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-23 13:09:22" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/who-wasnt-responsible-for-olympic\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-23 13:09:21" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/ipfs-abuse\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-23 13:09:21" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/03\/from-blackmatter-to-blackcat-analyzing.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-23 13:09:21" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/03\/transparent-tribe-new-campaign.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-23 13:09:21" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/html-smugglers-turn-to-svg-images\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-23 13:09:21" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/collab-app-abuse\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-23 13:09:21" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/roblox-scam-overview\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-23 13:09:21" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/lazarus-magicrat\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2017\/05\/konni-malware-under-radar-for-years.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2017\/10\/cyber-conflict-decoy-document.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 8, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2021\/11\/kimsuky-abuses-blogs-delivers-malware.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2021\/09\/tinyturla.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/mustang-panda-targets-europe\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/05\/navrat.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "http:\/\/blog.talosintelligence.com\/2017\/03\/dnsmessenger.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/10\/old-dog-new-tricks-analysing-new-rtf_15.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/05\/bitter-apt-adds-bangladesh-to-their.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 8, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2017\/11\/zeus-panda-campaign.html#More", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2020\/03\/bisonal-10-years-of-play.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/salt-typhoon-analysis\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/04\/gravityrat-two-year-evolution-of-apt.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/lotus-blossom-espionage-group\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2021\/01\/a-deep-dive-into-lokibot-infection-chain.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2021\/02\/obliquerat-new-campaign.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/operation-layover-how-we-tracked-attack\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/akira-ransomware-continues-to-evolve\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2020\/04\/poetrat-covid-19-lures.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2020\/10\/poetrat-update.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "http:\/\/blog.talosintelligence.com\/2017\/09\/avast-distributes-malware.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/01\/iranian-apt-muddywater-targets-turkey.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 8, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/07\/multiple-cobalt-personality-disorder.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/03\/threat-advisory-caddywiper.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/08\/picking-apart-remcos.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/seaturtle\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/sea-turtle-keeps-on-swimming\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2021\/05\/transparent-tribe-infra-and-targeting.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2017\/04\/introducing-rokrat.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2017\/11\/ROKRAT-Reloaded.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2020\/06\/promethium-extends-with-strongpity3.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 8, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/manjusaka-offensive-framework\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/01\/samsam-evolution-continues-netting-over.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/01\/return-of-emotet.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/02\/olympic-destroyer.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 8, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:20" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/07\/transparent-tribe-targets-education.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:19" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/06\/frankenstein-campaign.html", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:19" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/avoslocker-new-arsenal\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:19" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/blackbyte-blends-tried-and-true-tradecraft-with-newly-disclosed-vulnerabilities-to-support-ongoing-attacks\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-23 13:09:19" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/gamaredon-campaign-distribute-remcos\/", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:11", "last_seen": "2026-08-23 09:01:39" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/active-exploitation-of-cisco-ios-xe-software\/", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:10", "last_seen": "2026-08-23 09:01:38" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/03\/threat-roundup-0311-0318.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:09", "last_seen": "2026-08-23 09:01:37" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2021\/08\/proxyware-abuse.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:09", "last_seen": "2026-08-23 09:01:37" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/following-the-lnk-metadata-trail\/", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:09", "last_seen": "2026-08-23 09:01:37" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/01\/nanocore-netwire-and-asyncrat-spreading.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:09", "last_seen": "2026-08-23 09:01:36" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/11\/threat-roundup-1101-1108.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:08", "last_seen": "2026-08-23 09:01:35" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2020\/03\/threat-roundup-0313-0320.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:08", "last_seen": "2026-08-23 09:01:35" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/03\/threat-roundup-0315-0322.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-23 09:01:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/05\/threat-roundup-0426-to-0503.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-23 09:01:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/04\/threat-source-april-18-new-attacks.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-23 09:01:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/08\/threat-roundup-0817-0824.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-23 09:01:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/09\/threat-roundup-0831-0907.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-23 09:01:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/09\/threat-roundup-0907-0914.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-23 09:01:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/03\/threat-roundup-for-mar-01-to-mar-08.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-23 09:01:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/04\/threat-roundup-0329-0405.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-23 09:01:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/03\/threat-roundup-0308-0315.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-23 09:01:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/10\/threat-roundup-0928-1005.html", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-23 09:01:34" }, { "ioc_value": "http:\/\/blog.talosintelligence.com\/2017\/06\/threat-roundup-0602-0609.html", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "http:\/\/blog.talosintelligence.com\/2017\/05\/konni-malware-under-radar-for-years.html", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "http:\/\/blog.talosintelligence.com\/2018\/03\/goscanssh-analysis.html", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/05\/VPNFilter.html", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/02\/combing-through-brushaloader.html", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/04\/jasperloader-targets-italy.html?m=1", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2017\/12\/recam-redux-deconfusing-confuserex.html", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/04\/gustuff-targets-australia.html", "ioc_type": "url", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/10\/gplayedtrojan.html", "ioc_type": "url", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2018\/07\/Mobile-Malware-Campaign-uses-Malicious-MDM.html", "ioc_type": "url", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2020\/05\/the-wolf-is-back.html", "ioc_type": "url", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2021\/08\/vice-society-ransomware-printnightmare.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/new-threat-actor-using-yashma-ransomware\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/threat-actor-believed-to-be-spreading-new-medusalocker-variant-since-2022\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/the-blackbyte-ransomware-group-is\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/05\/the-blackbyte-ransomware-group-is.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/content\/images\/AVvXsEhKEpexiVYKoELvESd2mP0ZXLbQYgWcVJaE5VB9--yD3vS6FTVNfNbPkAHtJp3KjN1ANKVLa4zWvuEFN68QaepAj_xF3j9TrzqUMoOwvQXx_zIOH9Ar31JgWYX4mlpUIPLaLi76aWawvifF56qKZ1mgXncCRwAmu_fjqmD_PTWu_84E_uTqnW2qZIPM\/s16000\/image4.png", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "http:\/\/blog.talosintelligence.com\/2017\/05\/jaff-ransomware.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2021\/03\/ctir-trends-winter-2020-21.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/06\/avoslocker-new-arsenal.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "http:\/\/blog.talosintelligence.com\/2017\/10\/bad-rabbit.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2021\/09\/Conti-leak-translation.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2022\/05\/conti-and-hive-ransomware-operations.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2019\/12\/IR-Lessons-Maze.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2020\/09\/CTIR-quarterly-trends-Q4-2020.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/blog.talosintelligence.com\/2020\/12\/quarterly-ir-report-fall-2020-q4.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "http:\/\/blog.talosintelligence.com\/2017\/03\/crypt0l0cker-torrentlocker-old-dog-new.html", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" } ] }