Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
financialThreat Actor
Active Threat
BlackCat
15
IOCs Tracked
6
Intel Reports
Associated IOCs15 total
IP12
192.42.116.52
2026-09-22High149.102.229.154
2026-09-22High37.19.210.12
2026-09-22High104.28.163.162
2026-09-22High192.42.116.502026-09-22High192.42.116.972026-09-22High64.190.76.14
2026-09-22High192.42.116.122026-09-22High104.28.162.2282026-09-22High192.42.116.562026-09-22High146.70.117.239
2026-09-22High104.164.55.462026-09-22HighMD52
0108656a3e1ade6ca4f21b084f5e12082026-09-24High
bea5e267f24d7da59f6821bffdbff2932026-09-22High
CVE1
CVE-2026-201312026-08-11High
Related Reports6 total
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
SecurelistSep 21, 2026
BlackCat Ransomware: Tactics, Techniques & Mitigation Strategies
Group-IB
The Branding and Attribution Behind Cybercrime
Check Point BlogJul 27, 2026
Typosquatting: When Your Domain Is Used Against You
TruesecJun 11, 2026
IT threat evolution in Q1 2026. Non-mobile statistics
SecurelistMay 18, 2026
How to Recover from a Ransomware Attack Without Paying the Ransom
SeqriteMay 25, 2026
Threat Profile
Motivationfinancial
Last seenSep 2026
IOCs tracked15