Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

PY Threat Intelligence

14 IOCs with confidence of 50% or more associated with PY

URLhttp://gcm.setelagoas.mg.gov.br/files/notepadd.exeMediumDomainnd.tdpqnf.comHighIP186.182.105.49MediumIP45.177.204.1MediumIP200.9.4.41HighDomainpayment-verify.comMediumDomaintwizt.netMediumSHA256f689ee9af94b00e9e3f0bb072b34caaf207f32dcb4f5782fc9ca351df9a06c97HighIP186.158.200.214MediumIP181.94.229.11MediumIP190.128.144.102MediumIP186.17.71.199MediumIP181.124.147.156HighDomaincheck.mojtf.icuMedium