IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE2 IOCs

GorgonAgora: 4,800+ fake storefronts skim cards across hundreds of impersonated brands

SA
Sansec
Published June 2, 2026Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYMETA StealerMedusaVICTIMunknown
Adversary
Infrastructure
Capability(2)
Victim

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
SHA25605f74c23ac2b6b750c3f5ed33c23ef79a086651965695d43d0e0510c32db6efa
file-hashintel-blogmalware
Medium
53
Oct 9, 26
SHA256e6c60ca4f996b209bbaf7429182d7ed76acf761bb9c1de63486fcb76635fa58c
file-hashintel-blogmalware
Medium
53
Oct 9, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
SHA256
SHA2562Malware2REPORTGorgonAgora: 4,800+ fake sMETA StealerMedusa
scroll to zoom · drag to pan · click IOC to open