IOC Radar
TLP:WHITE2 IOCs

macOS Infostealer Steals Telegram Sessions and Replaces Ledger and Trezor Wallet Apps

CP
Cyber Press
Published July 16, 2026Original Report

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE192.253.248.18186.54.25.213CAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(2)
Capability
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
IP192.253.248.181
botnetintel-blogmalware
High
86
Jun 21, 26
IP86.54.25.213
intel-blognetworkphishing
High
58
Jul 17, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
IP
IP2REPORTmacOS Infostealer Steals T
scroll to zoom · drag to pan · click IOC to open