IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE1 IOC

DPRK-Linked Hackers Use Trojanized macOS Installers to Deploy OtterCookie RAT

CP
Cyber Press
Published September 4, 2026Original Report

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE162.0.239.85CAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(1)
Capability
Victim

Indicators of Compromise

Indicators of Compromise1

TypeIndicatorConfidenceScoreFirst Seen
IP162.0.239.85
aptespionageexploit
High
72
Jul 20, 26

IOC Relationship Graph

IOC Relationship Graph1 total IOCs
IP
IP1REPORTDPRK-Linked Hackers Use Tr
scroll to zoom · drag to pan · click IOC to open