IOC / Reference Classification Actor Risk
mail.party.biz Lateral Movement Turla 46
devfolio.co Adware Rocket Kitten 48
6968e101545ad.site123.me Botnet Activity Charming Kitten 34
alianzy-businesspartnership.com DDoS Turla 15
www.cnbv.gob.mx DNS Tunneling Conti 87
dentalclinicuk.com Adware Magecart 62
Web API: Docker Cryptojacking Turla 30
penzu.com Lateral Movement DarkSide 47
Hacker News: Elasticsearch Spear Phishing Lazarus Group 32
saowinmexcom.s3.us-east-2.amazonaws.com DNS Tunneling Carbanak 32
www.exchangle.com Whaling Deep Panda 10
prrush.com Worm Deep Panda 27
bettaso.com Credential Stuffing Conti 62
ascendio-corporate.com Ransomware Charming Kitten 32
www.dailymotion.com DNS Tunneling Charming Kitten 59
www.lola.vn Adware Charming Kitten 13
HN Discussion: Objective-C Botnet Activity Conti 99
Web API: Debian Phishing Wizard Spider 90
datos.chduero.es Credential Stuffing Charming Kitten 37
Web API: DeFi CSRF DarkSide 21
nexuswoot.com CSRF Silence 43
magic.ly Botnet Activity Turla 70
www.adsfare.com CSRF Turla 12
foodbagtoday.com DNS Tunneling Sandworm 45
www.coffeesix-store.com Beaconing Rocket Kitten 54
medley-web.com Credential Stuffing Turla 67
writeablog.net Rootkit Deep Panda 82
MongoDB Definition CSRF LockBit 43
www.bestloveweddingstudio.com DNS Tunneling Sandworm 69
ve88cncom1.weebly.com DDoS Silence 45
Q&A: Ethereum Whaling Rocket Kitten 97
teachers.io XSS Silence 54
hairsocietycouk.shopinfo.jp Worm Lazarus Group 25
mylittlebookmark.com SQL Injection APT41 (Double Dragon) 35

Incident C4CA4238: Malware & C2 Indicators

Real-time threat intelligence feed for Defense sector. Report #C4CA4238 contains IoCs, TTPs, and risk scoring for active campaigns detected in the last 24 hours.