IOC Radar
TLP:WHITE3 IOCs

Analysis of a Google Sites Community Application Phishing Campaign and macOS Information-Stealing…

SL
SlowMist
Published July 13, 2026Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYSandwormINFRASTRUCTUREhttp://86.54.25.213/l…http://86.54.25.213/d…CAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure(2)
Capability
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise3

TypeIndicatorConfidenceScoreFirst Seen
URLhttp://86.54.25.213/log
intel-blognetworkurl
High
58
Jul 13, 26
MD57ca94f9fa3eb4164ba7e5d41623a458a
c2file-hashintel-blog
Medium
53
Jul 13, 26
URLhttp://86.54.25.213/d/unix32385485
intel-blognetworkurl
High
58
Jul 13, 26

IOC Relationship Graph

IOC Relationship Graph3 total IOCs
URLMD5
URL2MD51Actors1REPORTAnalysis of a Google SitesSandworm
scroll to zoom · drag to pan · click IOC to open