| IOC / Reference | Classification | Actor | Risk |
|---|---|---|---|
| Node Module: SaaS | Cryptojacking | Wizard Spider | 39 |
| docs.google.com | DNS Tunneling | Rocket Kitten | 80 |
| hu.pinterest.com | SQL Injection | Deep Panda | 94 |
| clinicalpsychologistme.com | Worm | Sandworm | 10 |
| Investopedia: Python | Fileless Malware | Rocket Kitten | 28 |
| addmeintop10.com | C2 Communication | REvil | 64 |
| www.cemkrete.com | Lateral Movement | Wizard Spider | 23 |
| h5555netbr1.mystrikingly.com | Botnet Activity | Charming Kitten | 31 |
| www.bonback.com | DDoS | Magecart | 77 |
| barcelonadema-participa.cat | CSRF | Magecart | 99 |
| Learn Grafana | XSS | REvil | 95 |
| imageevent.com | Cryptojacking | LockBit | 19 |
| telegra.ph | Rootkit | DarkSide | 13 |
| MariaDB Issues | Spear Phishing | Magecart | 49 |
| writexo.com | DDoS | Turla | 47 |
| www.pearltrees.com | Data Exfiltration | Wizard Spider | 85 |
| worldrankedlist.com | Credential Stuffing | Wizard Spider | 70 |
| ofuse.me | Adware | LockBit | 53 |
| chromewebstore.google.com | Zero-Day Exploit | LockBit | 25 |
| paper.wf | Beaconing | Equation Group | 90 |
| 11taixiucom1.exblog.jp | DNS Tunneling | APT28 (Fancy Bear) | 27 |
| www.monofeya.gov.eg | XSS | Carbanak | 49 |
| medium.com | Credential Stuffing | DarkSide | 57 |
| addons.mozilla.org | Adware | Charming Kitten | 81 |
| www.jk-green.com | Zero-Day Exploit | Sandworm | 85 |
| pattern-wiki.win | Whaling | Conti | 64 |
| etwinningonline.eba.gov.tr | Trojan | Wizard Spider | 20 |
| HN Discussion: Large Language Model | SQL Injection | Wizard Spider | 29 |
| IOC-178 | Ransomware | Gamaredon | 94 |
| r/Neo4j Community | DNS Tunneling | APT28 (Fancy Bear) | 32 |
| bogotamihuerta.jbb.gov.co | Remote Code Execution (RCE) | Charming Kitten | 79 |
| ml007.k12.sd.us | CSRF | Carbanak | 90 |
| www.igesi.edu.pe | Data Exfiltration | REvil | 32 |
| cointr.ee | Worm | Gamaredon | 18 |
| letsbookmarktoday.com | Rootkit | Charming Kitten | 85 |
| The Verge: Web3 | Spyware | OilRig | 58 |
| scrapbox.io | Ransomware | Carbanak | 21 |
| network.hu | Credential Stuffing | Silence | 15 |
| savee.com | Cryptojacking | DarkSide | 79 |
| datcang.vn | C2 Communication | Silence | 10 |
Incident C4CA4238: Malware & C2 Indicators
Real-time threat intelligence feed for Defense sector. Report #C4CA4238 contains IoCs, TTPs, and risk scoring for active campaigns detected in the last 24 hours.