IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE3 IOCs

Interlock Ransomware Abuses Volatility3 and WinPmem to Dump Windows Credentials From Memory

CP
Cyber Press
Published August 10, 2026Original Report

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE104.236.109.139afshapiro.comCAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(2)
Capability
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise3

TypeIndicatorConfidenceScoreFirst Seen
IP104.236.109.139
clickfix lurecloudcloud computing
Medium
50
Aug 5, 26
CVECVE-2026-20131
exploitintel-blogmalware
High
58
Jun 2, 26
Domainafshapiro.com
abusech-threatfox-c2cactive scanactive scanning
High
77
Mar 19, 26

IOC Relationship Graph

IOC Relationship Graph3 total IOCs
IPCVEDomain
IP1CVE1Domain1REPORTInterlock Ransomware Abuse
scroll to zoom · drag to pan · click IOC to open