Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
financialThreat Actor
Active Threat
Cl0p
332
IOCs Tracked
31
Intel Reports
Associated IOCs50 total
IP47
82.165.179.950.114.179.16564.89.162.82198.23.185.82128.90.63.86172.82.64.235172.111.162.252154.29.72.2189.42.134.22031.77.168.195138.128.246.4294.154.35.73209.99.185.96124.198.132.98178.255.126.146162.35.164.249190.255.94.20075.119.154.8172.93.144.164158.220.96.15172.81.61.108194.11.246.191198.23.185.13683.142.209.7138.124.61.6591.92.243.6331.6.11.162137.220.137.6791.232.103.163192.140.175.19495.216.5.32172.94.18.103178.16.55.108102.220.160.217103.241.64.9264.176.189.40102.220.160.22283.136.211.194136.244.67.9413.248.213.4534.106.231.199192.159.99.21185.242.3.8313.60.184.242161.97.118.207147.93.191.7583.229.85.74SHA2562
1b39f9b2b96a6586c4a11ab2fdbff8fdf16ba5a0ac7603149023d73f33b8449806f434695f93d7fd11eeff71358ff69fed79d310a66d993bbcc4ff979c117c902026-10-10High
CVE1
CVE-2025-551822026-10-15High
Related Reports31 total
Passkeys Raise the Bar. Here’s Where Attackers Can Still Get In.
HuntressOct 14, 2026
ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure
PolySwarmOct 13, 2026
China Linked Warlock Ransomware Campaign Targets Critical Infrastructure
PolySwarmOct 9, 2026
SMB1001: How Huntress Maps to Each Tier
HuntressOct 6, 2026
Sauron Loader: A New Loader Lurking in Underground Forums
DCSO CyTec BlogSep 24, 2026
Ransomware Landscape in H1 2025: Statistics and Key Issues
S2WAug 12, 2025
Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)
Ransom-ISACJul 22, 2026
The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat
PolySwarmSep 8, 2026
BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace
PolySwarmSep 11, 2026
Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware
PolySwarmSep 14, 2026
BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns
PolySwarmSep 21, 2026
China and the Cyber Arms Race for AI Supremacy
PolySwarmSep 21, 2026
FamousSparrow Takes Flight with New SparroWocky Backdoor
PolySwarmSep 25, 2026
CLOSEDQUORUM: Malware Puts AI in the C2 Loop
PolySwarmSep 28, 2026
Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations
PolySwarmOct 5, 2026
Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer
PolySwarmOct 2, 2026
24th August – Threat Intelligence Report
Check Point ResearchAug 24, 2026
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
HuntressOct 6, 2026
Weekly Threat Landscape Digest – Week 40
HawkEyeOct 2, 2026
Supply Chain Attacks in 2026: Why Threat Intelligence Is the Only Early Warning System That Works
CybleSep 3, 2026
Cl0p Hackers Exploit PTC Windchill RCE Flaw to Deploy Custom Data-Theft Web Shell
Cyber PressAug 19, 2026
CyberPress Weekly – Top 50 Cybersecurity Stories of the Week – Cl0p Windchill Zero-Day, Zimbra Attacks, 23M-User Breach, AI Exploits & More
Cyber PressJul 27, 2026
Cl0p Exploits PTC Windchill Zero-Day to Deploy Webshells and Steal Data
Cyber PressJul 24, 2026
Turla Hackers Use STOCKSTAY .NET Backdoor to Spy on Ukrainian Government and Military Targets
Cyber PressJun 29, 2026
Maltrail IOC for 2026-06-19
CIRCL OSINT FeedJun 19, 2026
Maltrail IOC for 2026-06-19
CIRCL OSINT FeedJun 19, 2026
THREAT ADVISORY MUNICIPAL ENERGY SECTOR June 8, 2026
Blackswan CybersecurityJun 8, 2026
Threat Profile
Motivationfinancial
Last seenOct 2026
IOCs tracked332