Ransomware needs a way in. Stolen credentials are the cheapest one.
IOCs Feed
Hashes, IPs, domains, URLs from active ransomware campaigns
Indicators of compromise (IOCs) are file hashes, IP addresses, domains, and URLs observed in real ransomware attacks — security teams use them to detect, block, and hunt for the same infrastructure and malware across their own environment. This feed lists IOCs collected from active ransomware campaigns, attributed to the group and leak site that used them where known.
IOC charts
| Ransomware group | Type | Value | Copy |
|---|---|---|---|