Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE2 IOCs
Galago Ransomware Emerges With Shared Infrastructure Ties to Panzer
Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Indicators of Compromise2
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | pnzruro7syvwvefx5mpo2fhzi4jftgquynsqf3vy5x3no57yp2iz4nyd.onion anonymizationbotnetexfiltration | High | 86 | Sep 6, 26 |
| Domain | pnzr4delgur5dlhtqcy7qqm6m7dkivxwh742enezpks5kswfpx7qrsid.onion anonymizationexfiltrationintel-blog | High | 58 | Sep 25, 26 |
IOC Relationship Graph
IOC Relationship Graph2 total IOCs
Domain