IOC Radar
DomainMediumSignal 100/100

zero-trust.solutions

Location
FinlandFinland
First Seen
Oct 23, 2024
Last Seen
Jun 9, 2026
Oct 23
First Seen
595d ago
Jun 9
Last Seen
yesterday
16
Reports
source reports
99%
Confidence
medium
15/91
VirusTotal
detections
Found in 16 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

41 techniques

Feed Intelligence Summary

16 reports99% confidence
16
Source reports
99%
Confidence score
Category tags
abuseacademic institutionsaccount securityaerospace & defenseamazonapplied researchaptapt29archive exfiltrationasiaattackaws iamaws securebotnetbotnet activitybrute forcec2c2 communicationcertcisacivil servicescode injectioncommand and controlcommunication technologiescompromised hostcredential accesscredential harvestingcredential stuffingcrlfcybervolkdane archiwumdane obrazudata encryptiondata exchangedata exfiltrationddos attackdefensedefense contractingdefense logisticsdefense systemsdefense technologydevelopment labsdevice securitydistributed attacksearth koshcheiedgecast weducational resourceseducational serviceseducational technologyenergyenergy distributioneuropeexploitextortionfinlandforeign affairsftp brute forcegovernment technologyhigher educationhttp brute forceiam identityidentity centerimpair defensesimphaszindicatorindonesiainformation technologyinfrastructure acquisitionreconnaissanceinnovation managementintelintrusion detectionit infrastructurejavascript zju samak-12 educationlatest newslub ciekaplikumalicious activitymalicious activity indicatorsmalicious linksmalicious softwaremalwaremalware distributionmidnight blizzardmilitary operationsmobile carriersmobile networksnational securitynazwa smyczkinazwapliku manetworknetwork securityoil & gasoperating system securitypejzaszphishingphishing attackpower generationpower systemsprocess injectionproduct developmentprotocol exploitationpublic administrationpublic infrastructurepublic policypyrdpr&d strategyransomwarerdp campaignregulatory agenciesremote accessremote servicesremoteurl marenewable energyresearch & developmentresearch methodologyresearchedrgbarogue threatrogue_rdpscannerscientific researchsecure dataservicesocial engineeringsoftware developmentspear-phishingssh attacksuomisystem disruptionszybki startt1016t1021t1021.001t1027t1040t1041t1055t1059t1059.007t1071t1071.001t1076t1078t1083t1105t1110t1110.002t1190t1203t1204.001t1486t1490t1496t1499.001t1499.002t1499.003t1562t1563t1565t1566t1566.001t1566.002t1566.003t1566.004t1573t1583t1587.001t1588t1590.001t1595t1619technology researchtekst asciitelecom servicestelecommunicationstelnet threattest zgodnocithreat actorthreat insightsthreat intelligencetor exit nodestrend microtrend visionukraineunauthorized devicesvision onew przypadkuweb exploitationweb securityweb shellwhaszwykrycia yaraz bardzoz terminatoramizero trustzip archivezts device

Activity Timeline

1 total obs
Jun 9Jun 9

Threat Activity Heatmap

Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated

The domain **zero-trust.solutions**, originating from Finland, has emerged as a significant indicator of compromise (IOC) in recent threat intelligence reports. First observed on October

Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
16
Reports
First seenOct 23, 2024
Last seenJun 9, 2026

VirusTotal

15/ 91vendors flagged
16% detection rateJun 10, 2026

WHOIS

description
References: https://community.riskiq.com/article/f1657bc5/indicators, confidence_level: 25, last_seen_utc: Not_Available
domain rank
-1
raw
Administrative city: REDACTED FOR PRIVACY Administrative country: REDACTED FOR PRIVACY Administrative state: REDACTED FOR PRIVACY Create date: 2024-09-10 00:00:00 Domain name: zero-trust.solutions Domain registrar id: 1479 Domain registrar url: http://www.namesilo.com Expiry date: 2025-09-10 00:00:00 Name server 1: ns1.mynymbox.xyz Name server 2: ns2.mynymbox.xyz Query time: 2024-09-11 14:15:28 Registrant city: 1f8f4166599d23ee Registrant company: 566bb814321610e4 Registrant country: United States Registrant email: f651612a2f356ad3s@ Registrant fax: 1f8f4166599d23ee Registrant name: 1f8f4166599d23ee Registrant phone: 1f8f4166599d23ee Registrant state: e1c7c1911395a3cf Registrant zip: 1f8f4166599d23ee Technical city: REDACTED FOR PRIVACY Technical country: REDACTED FOR PRIVACY Technical state: REDACTED FOR PRIVACY Update date: 2024-09-10 00:00:00
references
https://www.trendmicro.com/en_no/research/24/l/earth-koshchei.html, https://www.trendmicro.com/content/dam/trendmicro/global/en/research/24/l/earth-koshchei/IOClist-EarthKoshchei.txt, https://threatfox.abuse.ch/export/csv/recent/, https://www.trendmicro.com/en_us/research/24/l/earth-koshchei.html, https://cybersecuritynews.com/hackers-leverage-red-team-tools-in-rdp-attacks/, https://cert.gov.ua/article/6281076
subdomains count
4

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 1 day ago
Appeared in 16 threat reports