IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE5 IOCs

16 Firefox Extensions Caught Stealing Crypto Wallet Recovery Phrases and Private Keys

CP
Cyber Press
Published October 8, 2026Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREicy-star-f45c.workers…silent-wind-get.icy-s…fondationanimalaidrel…CAPABILITYCobalt StrikeVICTIMunknown
Adversary
Infrastructure(4)
Capability(1)
Victim

Indicators of Compromise

Indicators of Compromise5

TypeIndicatorConfidenceScoreFirst Seen
Domainicy-star-f45c.workers.dev
intel-blogmalwarenetwork
High
58
Oct 8, 26
Domainsilent-wind-get.icy-star-f45c.workers.dev
intel-blogmalwarenetwork
High
58
Oct 8, 26
SHA18bcab07d51e4fd99b9ab6826c73c267c4796ad8f
aptespionageexploit
Medium
53
Oct 8, 26
Domainfondationanimalaidrelief.workers.dev
intel-blogmalwarenetwork
High
58
Oct 8, 26
Domainsmall-boat-969c.icy-star-f45c.workers.dev
exfiltrationintel-blogmalware
High
58
Oct 8, 26

IOC Relationship Graph

IOC Relationship Graph5 total IOCs
DomainSHA1
Domain4SHA11Malware1REPORT16 Firefox Extensions CaugCobalt Strike
scroll to zoom · drag to pan · click IOC to open