Tag
Maltrail IOC List Analysis - June 1, 2026
2 rules 1 TTP 50 IOCsThis brief analyzes a Maltrail IOC list from June 1, 2026, identifying domains and IP addresses associated with various malware and threat actors, including android_fvncbot, lummac2, magentocore, sectoprat, apt_lazarus, offloader, android_joker, cyberstrikeai, and nightshadec2, potentially used for command and control, malware distribution, or phishing campaigns.
Maltrail IOC Feed Update - 2026-05-15
3 rules 2 TTPs 50 IOCsThis brief summarizes a Maltrail IOC feed update on 2026-05-15, containing indicators associated with APT_Kimsuky, CyberstrikeAI, Android_Joker, Sectoprat, EK_Landupdate808, and MagentoCore campaigns involving suspicious domains and IP addresses.
Maltrail IOC Feed Update for Multiple Threats
3 rules 6 TTPs 50 IOCsThis brief summarizes IOCs extracted from the Maltrail feed on March 15, 2026, covering domains and URLs associated with threats targeting macOS and Android platforms, including OSX_Atomic, FakeApp, Android_Joker, Lummack2, APT_Sidewinder, APT_Kimsuky, and Hak5Cloud_C2.
Maltrail IOCs Targeting Multiple Threat Actors
2 rules 4 TTPs 32 IOCsThis brief analyzes IOCs aggregated by Maltrail on March 13, 2026, revealing network activity associated with multiple threat actors including UNC2465, SideWinder, 0ktapus, LummaC2, XWorm, PowerShell Injector, CyberStrikeAI, and others, indicating potential widespread targeting and diverse attack vectors.
Maltrail IOCs Report: Tracking Multiple Threat Actors
3 rules 5 TTPs 27 IOCsThis brief analyzes IOCs aggregated by Maltrail on February 27, 2026, highlighting network activity associated with diverse threat actors including APT_UNC2465, Lazarus Group, Gorat, APT_Bitter, Android_Joker, PowerShell Injector, SmokeLoader, and FakeApp campaigns targeting various sectors.
Maltrail IOCs for Android Joker, APT Lazarus, UNC2465, and Powershell Injector
3 rules 3 TTPs 49 IOCsThis brief covers IOCs associated with Android Joker malware, APT Lazarus group, APT UNC2465 activity, and PowerShell Injector campaigns identified by Maltrail on February 25, 2026.
Maltrail Feed IOCs Targeting Multiple Verticals
2 rules 2 TTPs 42 IOCsThis brief covers newly identified malicious domains and IPs from the Maltrail feed on 2026-02-19, which are actively being used in various campaigns to deliver malware and facilitate command and control.
Maltrail Feed - Newly Observed Domains and IP Address
2 rules 2 TTPs 50 IOCsThis brief details newly observed network activity, specifically a list of domains and one IP address, reported by the Maltrail feed on February 18, 2026, potentially indicating emerging threats or malicious infrastructure.