Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
financialThreat Actor
Active Threat
REvil
229
IOCs Tracked
20
Intel Reports
Associated IOCs50 total
IP45
209.99.185.96
2026-07-17High198.23.185.1362026-07-25High147.93.191.752026-10-15High194.11.246.191
2026-07-11High198.23.185.822026-07-27High178.16.55.1082026-06-28High190.255.94.200
2026-06-20High75.119.154.8
2026-06-20High13.248.213.45
2026-06-20High162.35.164.2492026-07-21High31.77.168.1952026-07-19High94.154.35.73
2026-06-20High138.128.246.422026-06-20High178.255.126.146
2026-07-14High102.220.160.217
2026-10-08High103.241.64.92
2026-07-18High31.6.11.162
2026-07-17High102.220.160.2222026-08-07High89.42.134.220
2026-10-15High64.89.162.822026-07-14High158.220.96.152026-09-30High172.94.18.1032026-10-15High172.93.144.1642026-06-21High161.97.118.2072026-06-20High13.60.184.242
2026-06-20High83.136.211.1942026-06-21High64.176.189.402026-06-20High95.216.5.32
2026-06-20High172.111.162.2522026-08-31High192.140.175.194
2026-07-27High172.82.64.2352026-06-30High172.81.61.1082026-07-09High91.92.243.632026-06-27High124.198.132.982026-06-28High185.242.3.832026-10-04High192.159.99.212026-07-04High50.114.179.1652026-06-28High137.220.137.67
2026-06-20High138.124.61.652026-06-30High154.29.72.212026-06-20High34.106.231.1992026-07-11High136.244.67.942026-06-20High83.142.209.72026-06-20High91.232.103.163
2026-06-29High128.90.63.86
2026-06-20HighURL2
https://titnovacrion.top/live/2026-09-05High
https://skinnyjeanso.com/live/2026-09-05High
SHA2562
1b39f9b2b96a6586c4a11ab2fdbff8fdf16ba5a0ac7603149023d73f33b84498
2026-10-09High06f434695f93d7fd11eeff71358ff69fed79d310a66d993bbcc4ff979c117c902026-10-10High
CVE1
CVE-2025-551822026-10-15High
Related Reports20 total
ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure
PolySwarmOct 13, 2026
China Linked Warlock Ransomware Campaign Targets Critical Infrastructure
PolySwarmOct 9, 2026
Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer
PolySwarmOct 2, 2026
FamousSparrow Takes Flight with New SparroWocky Backdoor
PolySwarmSep 25, 2026
China and the Cyber Arms Race for AI Supremacy
PolySwarmSep 21, 2026
BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns
PolySwarmSep 21, 2026
Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware
PolySwarmSep 14, 2026
BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace
PolySwarmSep 11, 2026
The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat
PolySwarmSep 8, 2026
Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations
PolySwarmOct 5, 2026
CLOSEDQUORUM: Malware Puts AI in the C2 Loop
PolySwarmSep 28, 2026
Technical Analysis of Lockbit4.0 Evasion Tales
0x0d4y Malware ResearchFeb 19, 2025
Latrodectus [IceNova] – Technical Analysis of the… New IcedID… Its Continuation… Or its Replacement?
0x0d4y Malware ResearchApr 30, 2024
Maltrail IOC for 2026-06-19
CIRCL OSINT FeedJun 19, 2026
Maltrail IOC for 2026-06-19
CIRCL OSINT FeedJun 19, 2026
Latrodectus [IceNova] – Technical Analysis of the… New IcedID… Its Continuation… Or its Replacement?
0x0d4y Malware ResearchApr 30, 2024
Technical Analysis of Lockbit4.0 Evasion Tales
0x0d4y Malware ResearchFeb 19, 2025
Threat Profile
Motivationfinancial
Last seenOct 2026
IOCs tracked229