IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE2 IOCs

Konni Hackers Target Ukraine With Malicious LNK Files and VelvetCake PowerShell Malware

CP
Cyber Press
Published September 24, 2026Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYGamaredonTA406INFRASTRUCTUREp1o2i3u4y5t6r7e8w9q0.…111.92.246.145CAPABILITYunknownVICTIMunknown
Adversary(2)
Infrastructure(2)
Capability
Victim

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
Domainp1o2i3u4y5t6r7e8w9q0.medianewsonline.com
c2indicatorintel-blog
Low
33
Sep 22, 26
IP111.92.246.145
c2intel-blogmalware
High
58
Sep 25, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
DomainIP
Domain1IP1Actors2REPORTKonni Hackers Target UkraiGamaredonTA406
scroll to zoom · drag to pan · click IOC to open