IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
sabotageRURussiaThreat Actor
Active Threat

Sandworm

4.8k
IOCs Tracked
253
Intel Reports
Associated IOCs50 total
IP35
109.73.193.242
RU2026-10-01High
46.151.182.205
UA2026-10-09High
162.248.225.165
US2026-10-09High
67.219.102.244
AU2026-10-09High
15.204.95.228
US2026-10-09High
5.101.86.98
CA2026-07-04High
5.101.86.105
CA2026-07-06High
178.16.54.248
NL2026-06-23High
206.188.196.221
NL2026-06-04High
172.245.195.206
US2026-06-06High
88.119.167.143
LT2026-08-17High
83.98.39.54
GB2026-06-09High
84.21.189.225
DE2026-06-20High
107.175.148.68
US2026-07-09High
139.159.203.44
CN2026-10-09High
195.123.240.236
US2026-09-15High
38.181.42.160
US2026-09-13High
18.118.196.244
US2026-07-02High
47.236.24.112
SG2026-07-02High
35.220.177.232
HK2026-06-24High
101.133.148.66
CN2026-10-09High
8.130.26.216
CN2026-10-09High
185.174.101.240
US2026-10-09High
34.64.98.201
KR2026-10-09High
82.156.219.31
CN2026-10-09High
110.40.176.194
CN2026-10-09High
124.220.164.98
CN2026-10-09High
178.128.171.206
GB2026-10-09High
118.25.91.151
CN2026-10-09High
8.153.205.30
CN2026-10-09High
196.251.69.253
SC2026-10-09High
37.72.172.58
US2026-10-09High
154.201.91.224
HK2026-10-09High
103.215.81.156
HK2026-10-09High
42.121.150.29
CN2026-10-07High
Domain14
software-2.2.zip
2026-10-09High
software-v1.5.zip
2026-10-07High
software-v2.0.zip
2026-10-07High
software-1.2.zip
2026-10-07High
software-v3.3.zip
2026-10-08High
software_v2.4.zip
2026-10-09High
software_3.0.zip
2026-10-09High
software_v3.0.zip
2026-10-09High
software-v1.9.zip
2026-10-09High
software_v1.1.zip
2026-10-09High
bins.sh
2026-10-06High
tabb_1.5.zip
2026-10-06High
subtitle_translator_youtube_v1.4.zip
2026-10-06High
software-2.6.zip
2026-10-09High
SHA2561
1b39f9b2b96a6586c4a11ab2fdbff8fdf16ba5a0ac7603149023d73f33b84498
IR2026-10-09High
Related Reports253 total
Anatomy of a macOS ClickFix Crimekit that Weaponises EtherHiding
NetbyteSEC BlogAug 20, 2026
12 IOC
Meduza Stealer or The Return of The Infamous Aurora Stealer
RussianPandaJun 28, 2023
14 IOC
Pure Logs Stealer Fails to Impress
RussianPandaDec 26, 2023
4 IOC
The GlorySprout or a Failed Clone of Taurus Stealer
RussianPandaMar 16, 2024
3 IOC
Unleashing the Viper : A Technical Analysis of WhiteSnake Stealer
RussianPandaJul 4, 2023
2 IOC
From Russia With Code: Disarming Atomic Stealer
RussianPandaJan 15, 2024
5 IOC
MetaStealer - Redline's Doppelgänger
RussianPandaNov 20, 2023
18 IOC
MacOS ClickFix AMOS Campaign
Ransom-ISACSep 17, 2026
168 IOC
Perl based macOS/linux Stealer
Randy McEoinJul 20, 2025
21 IOC
Inside Valkyrie Stealer: Capabilities, Evasion Techniques, and Operator Profile
DeXposeNov 25, 2025
2 IOC
Deep Dive into Arkanix Stealer and its Infrastructure
DeXposeDec 22, 2025
6 IOC
DynoWiper: From Russia with Love
t0asts blogFeb 6, 2026
1 IOC
MATCHBOIL: New tricks, same old evil intentions
ESET ResearchOct 8, 2026
15 IOC
Stealc Stealer
Aziz FarghlyNov 9, 2023
17 IOC
Reversing FUD AMOS Stealer
Denwp ResearchMar 20, 2025
2 IOC
FamousSparrow Takes Flight with New SparroWocky Backdoor
PolySwarmSep 25, 2026
30 IOC
The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat
PolySwarmSep 8, 2026
31 IOC
Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware
PolySwarmSep 14, 2026
39 IOC
China and the Cyber Arms Race for AI Supremacy
PolySwarmSep 21, 2026
31 IOC
BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns
PolySwarmSep 21, 2026
43 IOC
Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer
PolySwarmOct 2, 2026
34 IOC
CLOSEDQUORUM: Malware Puts AI in the C2 Loop
PolySwarmSep 28, 2026
35 IOC
Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations
PolySwarmOct 5, 2026
47 IOC
BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace
PolySwarmSep 11, 2026
41 IOC
Malicious Crypto Shell Packages Target RubyGems
OpenSourceMalwareOct 5, 2026
10 IOC
Xenorat Malware Analysis/reports/xenorat En.md at Main · Yavuzhanzgen/xenorat Malware Analysis
ORKL Threat Library
9 IOC
Technical Analysis of Marco Stealer
Zscaler ThreatLabzFeb 5, 2026
2 IOC
ClaudeFix: Shared Claude Chats Meet ClickFix
Zscaler ThreatLabzJul 15, 2026
1 IOC
Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs
HuntressOct 7, 2026
3 IOC
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
HuntressOct 6, 2026
3 IOC
Threat Profile
Motivationsabotage
OriginRURussia
Last seenOct 2026
IOCs tracked4,768