{
    "count": 32,
    "indicators": [
        {
            "ioc_value": "https:\/\/isc.sans.edu\/api\/sources\/attacks\/1000\/",
            "ioc_type": "url",
            "category": "IP Blocklists",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:04:42",
            "last_seen": "2026-08-09 11:05:58"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/28884",
            "ioc_type": "url",
            "category": "Malware Attribution",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:07:44",
            "last_seen": "2026-08-06 19:46:52"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/How+Malware+Generates+Mutex+Names+to+Evade+Detection\/19429\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/forums\/diary\/new+rogueDHCP+server+malware\/6025\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/forums\/diary\/CatchAll+Google+Chrome+Malicious+Extension+Steals+All+Posted+Data\/22976\/https:\/threatpost.com\/malicious-chrome-extension-steals-data-posted-to-any-website\/128680\/)",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/forums\/diary\/BankerGoogleChromeExtensiontargetingBrazil\/22722\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/22736",
            "ioc_type": "url",
            "category": "Malware Families",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:03",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/TA570+Qakbot+Qbot+tries+CVE202230190+Follina+exploit+msmsdt\/28728",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/rssfeed.xml",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/images\/status.gif",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/podcastdetail\/10040",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/rss\/33222",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/rss\/33220",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/rss\/33218",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/podcastdetail\/10038",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/rss\/33216",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/rss\/33214",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/podcastdetail\/10036",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/rss\/33212",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/podcastdetail\/10034",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/rss\/33210",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/rss\/33208",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/rss\/33206",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/rss\/33202",
            "ioc_type": "url",
            "category": "APT\/IoC",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:16",
            "last_seen": "2026-08-06 14:43:57"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/Exploit+attempts+for+unpatched+Citrix+vulnerability\/31446",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:10",
            "last_seen": "2026-08-06 14:43:52"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/rss\/29708",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-06 14:43:50"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/29052",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-06 14:43:50"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/29376",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-06 14:43:50"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/26922",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:08",
            "last_seen": "2026-08-06 14:43:49"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/diary\/27012",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/isc.sans.edu\/forums\/diary\/Sage+20+Ransomware\/21959\/",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 13:13:00"
        }
    ]
}