Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
high threatStealerMalware Family
Historical
META Stealer
High severity
19.3k
IOCs Tracked
—
First Seen
—
Last Seen
0
YARA Rules
Associated IOCs19,307 total · showing 50
IP30
91.202.233.2142026-10-15High
101.200.193.2112026-10-14High
46.151.182.2052026-10-15High
109.73.193.2422026-10-01High
112.213.124.1322026-07-18High
15.204.95.2282026-10-15High
67.219.102.2442026-10-15High
221.207.101.1752026-10-15High
162.248.225.1652026-10-15High
5.101.86.982026-07-04High
5.101.86.1052026-07-06High
178.16.54.2482026-06-23High
88.119.167.1432026-08-17High
84.21.189.2252026-06-20High
107.175.148.682026-07-09High
139.159.203.442026-10-15High
137.184.163.272026-10-15High
39.107.242.1302026-10-15High
163.181.208.792026-10-15High
195.123.240.2362026-09-15High
Domain10
forest-entity.cc2026-10-10High
ks501oz9nm3v05.org2026-10-09High
blackshelter.org2026-10-09High
afxwd.ddns.net2026-06-18High
2rxyt8yrhq0bgj.org2026-10-09High
google-services.cc2026-10-10High
hroffice.work2026-10-15High
bobroviysmex.shop2026-10-15High
library2000.com2026-10-15High
nick-metry.icu2026-10-15High
URL9
http://109.123.243.121/i6862026-10-15High
http://94.154.43.26/main_arm62026-10-15High
http://59.96.136.247:47589/i2026-10-15High
http://23.254.195.48:8099/bx_arm5.p2026-10-15High
http://94.154.43.137/ppc2026-10-15High
http://196.189.98.110:34127/bin.sh2026-10-15High
http://123.9.244.39:39490/bin.sh2026-10-15High
http://220.168.237.96:60522/i2026-10-15High
http://42.228.218.119:58691/i2026-10-15High
SHA2561
1b39f9b2b96a6586c4a11ab2fdbff8fdf16ba5a0ac7603149023d73f33b844982026-10-09High
Related Reports30 shown
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Passkeys Raise the Bar. Here’s Where Attackers Can Still Get In.
HuntressOct 14, 2026
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
PhishTank (500 entries)
PhishTank
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
PhishTank (500 entries)
PhishTank
PhishTank (500 entries)
PhishTank
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
Palo Alto NetworksOct 14, 2026
From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies
Palo Alto NetworksSep 21, 2026
Hirudo: From Fake Updates to Patched Banking Apps
ThreatFabricOct 14, 2026
PhishTank (500 entries)
PhishTank
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
PhishTank (500 entries)
PhishTank
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
PhishTank (500 entries)
PhishTank
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize
Group-IB
The Threat of AI-Driven Autonomous Penetration Testing, as Examined by ARTEX
AhnLabOct 14, 2026
Case of AgentTesla Malware Distribution Disguised as a Business Proposal Email
AhnLabOct 13, 2026
Beware of Phishing Emails Disguised as Purchase Orders
AhnLabOct 8, 2026
Q3 2026 Statistical Report on Malware Targeting Windows Database Servers
AhnLabOct 7, 2026
Q3 2026 Statistical Report on Malware Targeting Windows Web Servers
AhnLabOct 7, 2026
Statistical Report on Malware Targeting Linux SSH Servers in the Third Quarter of 2026
AhnLabOct 7, 2026
PhishTank (500 entries)
PhishTank
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Fake AI Tools Put US Companies at Risk: Inside Counterfeit Claude, ChatGPT, and Copilot
ANY.RUN Cybersecurity BlogOct 14, 2026
Fake Calendly “Meta Careers” pages steal Facebook and Google logins
MalwarebytesOct 14, 2026
Threat Profile
TypeStealer
StatusHistorical
IOCs tracked19,307