IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE3 IOCs

DarkSword Coruna iOS Exploit Kit Targets Crypto Wallets With Live C2 Infrastructure

CP
Cyber Press
Published October 8, 2026Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE66ds.lol156.239.230.120CAPABILITYCobalt StrikeVICTIMunknown
Adversary
Infrastructure(2)
Capability(1)
Victim

Indicators of Compromise

Indicators of Compromise3

TypeIndicatorConfidenceScoreFirst Seen
Domain66ds.lol
indicatorintel-blogmalware
High
88
Oct 8, 26
IP156.239.230.120
aptc2espionage
Medium
51
Sep 30, 20
CVECVE-2026-31001
exploitintel-blogmalware
Medium
54
Oct 8, 26

IOC Relationship Graph

IOC Relationship Graph3 total IOCs
DomainIPCVE
Domain1IP1CVE1Malware1REPORTDarkSword Coruna iOS ExploCobalt Strike
scroll to zoom · drag to pan · click IOC to open