IOC Radar
TLP:WHITE4 IOCs

Fake Recruitment Website Linked to Nimbus Manticore Malware Campaign

CP
Cyber Press
Published June 2, 2026Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYUNC1549INFRASTRUCTUREunknownCAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure
Capability
Victim

Attack Flow9 steps · MITRE ATT&CK mapped

Initial AccessTA0001·T1566
1/9
Phishing
ActionImpersonate recruiters on LinkedIn
Attackers impersonate headhunters on LinkedIn to initiate contact with potential victims.

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise4

TypeIndicatorConfidenceScoreFirst Seen
SHA256620c51f4376cb79f0109c21971c28661418ae50b119585e3ffdb8011189fcb7b
file-hashindicatorintel-blog
High
86
Jun 2, 26
SHA2569b63b744dc1f3a24f057a404c5622ed0ca933752a00ce05117727c7d11f05536
file-hashindicatorintel-blog
High
56
Jun 2, 26
SHA256d1f525eb9347133b92e9558e1413558c8348c0f35a62577f60a5192ba38eb776
file-hashindicatorintel-blog
High
56
Jun 2, 26
SHA25606d12a4c4e3cc725dba37445cebeba41803718ccdb63d9d637355a241f651668
file-hashindicatorintel-blog
High
56
Jun 2, 26

IOC Relationship Graph

IOC Relationship Graph4 total IOCs
SHA256
SHA2564Actors1REPORTFake Recruitment Website LUNC1549
scroll to zoom · drag to pan · click IOC to open