Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
espionageThreat Actor
Active Threat
UNC5342
12
IOCs Tracked
2
Intel Reports
Associated IOCs12 total
IP1
195.3.222.251
2026-10-26HighDomain7
0x666.info
2026-10-26Highoptimism.blockscout.com2026-10-26High
eth.blockscout.com2026-10-26High
base.blockscout.com2026-10-26High
fea22134.net2026-10-26High
ipif.org2026-10-26High
thoroughly-publisher-troy-clara.trycloudflare.com2026-10-26High
URL1
https://panel.fefea22134.net2026-10-26High
SHA2563
33dacf9f854f636216e5062ca252df8e5bed652efd78b86512f5b868b11ee70f2026-10-26High
70bbb38b70fd836d66e8166ec27be9aa8535b3876596fc80c45e3de4ce3279802026-10-26High
def66275fa3baffb16e6e4ae0297861d9790ae7161fbc271a2ba05d121f13c702026-10-26Medium
Threat Profile
Motivationespionage
Last seenOct 2026
IOCs tracked12