IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE3 IOCs

Blog

OT
ORKL Threat Library
Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYALTDOSAPT28APT41INFRASTRUCTUREforbes.ruCAPABILITYBlackCatCobalt StrikeContiVICTIMunknown
Adversary(63)
Infrastructure(1)
Capability(19)
Victim

Indicators of Compromise

3 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2023-38831HighScore 65/100First seen
Domainforbes.ruHighScore 67/100First seen
CVECVE-2023-23397HighScore 65/100First seen

IOC Relationship Graph

3 total IOCs
CVEDomain
CVE2Domain1Actors5Malware5BlogREPORTCVE-2023-38831CVE-2023-23397forbes.ruALTDOSAPT28APT41BRONZE ATLASBRONZE HUNTLEYBlackCatCobalt StrikeContiDarkSideGh0st RAT
scroll to zoom · drag to pan · click IOC to open