IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE3 IOCs

Angry Birds: Toy Ghouls’ new toys

SE
Securelist
Published September 4, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYLockBitINFRASTRUCTUREmeet.element.twCAPABILITYLockBitVICTIMunknown
Adversary(1)
Infrastructure(1)
Capability(1)
Victim

Indicators of Compromise

Indicators of Compromise3

TypeIndicatorConfidenceScoreFirst Seen
Domainmeet.element.tw
c2intel-blogmalware
High
58
Sep 5, 26
MD5bfadbeee63a4f0bf19ec9deb8fa58f58
exploitfile-hashintel-blog
Medium
53
Sep 5, 26
MD57916c33688385525078bee504c90f359
exploitfile-hashintel-blog
Medium
53
Sep 5, 26

IOC Relationship Graph

IOC Relationship Graph3 total IOCs
DomainMD5
MD52Domain1Actors1Malware1REPORTAngry Birds: Toy Ghouls’ nLockBitLockBit
scroll to zoom · drag to pan · click IOC to open