IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE4 IOCs

Fake Recruitment Website Linked to Nimbus Manticore Malware Campaign

CP
Cyber Press
Published June 2, 2026Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYUNC1549INFRASTRUCTUREunknownCAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure
Capability
Victim

Attack Flow9 steps · MITRE ATT&CK mapped

Initial AccessTA0001·T1566
1/9
Phishing
ActionImpersonate recruiters on LinkedIn
Attackers impersonate headhunters on LinkedIn to initiate contact with potential victims.

Indicators of Compromise

4 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA256620c51f4376cb79f0109c21971c28661418ae50b119585e3ffdb8011189fcb7bHighScore 86/100First seen
SHA2569b63b744dc1f3a24f057a404c5622ed0ca933752a00ce05117727c7d11f05536HighScore 56/100First seen
SHA256d1f525eb9347133b92e9558e1413558c8348c0f35a62577f60a5192ba38eb776HighScore 56/100First seen
SHA25606d12a4c4e3cc725dba37445cebeba41803718ccdb63d9d637355a241f651668HighScore 56/100First seen

IOC Relationship Graph

4 total IOCs
SHA256
SHA2564Actors1Fake Recruitment Website Linked to Nimbus Manticore Malware CampaignREPORT620c51f4376cb79f0109…9b63b744dc1f3a24f057…d1f525eb9347133b92e9…06d12a4c4e3cc725dba3…UNC1549
scroll to zoom · drag to pan · click IOC to open