Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
sabotage
RussiaThreat Actor
Active Threat
Sandworm
4.4k
IOCs Tracked
218
Intel Reports
Associated IOCs50 total
IP49
162.248.225.165109.73.193.24246.151.182.20515.204.95.22867.219.102.2445.101.86.985.101.86.105178.16.54.248206.188.196.221172.245.195.20688.119.167.14383.98.39.5484.21.189.225107.175.148.68195.123.240.236139.159.203.4438.181.42.16018.118.196.24447.236.24.11235.220.177.232167.17.47.11834.92.131.1247.115.193.52189.34.188.6185.247.224.4045.74.7.17023.227.203.643.138.0.179216.118.101.132154.201.74.112111.229.187.212118.25.91.151115.190.161.17864.89.160.4447.104.248.7124.221.32.8785.175.101.203118.89.88.18382.156.156.160107.149.192.5447.109.69.135146.70.29.233149.104.28.20442.121.150.2920.74.209.192192.162.199.25101.133.148.66138.68.227.71139.196.41.201Domain1
conversationswithhumanity.org2026-09-15High
Related Reports218 total
MacSync: The Evasive macOS Stealer Exploiting ClickFix Lures
SeqriteSep 8, 2026
[CERT-FR] Sandworm intrusion set campaign targeting Centreon systems
CIRCL OSINT FeedAug 29, 2026
OpenClaw NovaStealer Attacks Target 60+ Crypto Wallets, SSH Keys and AWS Credentials
Cyber PressAug 20, 2026
Weekly Cybersecurity Bulletin — Top 50 Cybersecurity Stories of the Week
Cyber PressAug 17, 2026
Beyond hacktivism: Insolent Hyena demonstrates mixed motives and objectives
BI.ZONEAug 10, 2026
Google Unveils Unified Naming System for Tracking Cyber Threat Actors
Cyber PressJul 25, 2026
Maltrail IOC for 2026-07-12
CIRCL OSINT FeedJul 12, 2026
Telegram Account Compromised, Wallet Swapped: How Does macOS Malware Break Through Your Defenses?
SlowMistJul 15, 2026
Analysis of a Google Sites Community Application Phishing Campaign and macOS Information-Stealing…
SlowMistJul 13, 2026
CrownX Ransomware Embedded Inside Avalon Framework Targets Recovery and Backup Systems
Cyber PressJul 4, 2026
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Threat Profile
Motivationsabotage
Origin
Russia
Last seenSep 2026
IOCs tracked4,429