Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
RansomwareMalware Family
Active Threat
WannaCry
Critical severity
60.5k
IOCs Tracked
2022
First Seen
Oct 21, 2026
Last Seen
0
YARA Rules
Associated IOCs60,532 total · showing 50
IP49
91.202.233.2142026-10-21High
101.200.193.2112026-10-21High
67.219.102.2442026-10-21High
15.204.95.2282026-10-21High
46.151.182.2052026-10-21High
162.248.225.1652026-10-21High
221.207.101.1752026-10-21High
109.73.193.2422026-10-01High
185.177.72.682026-09-24High
77.83.36.1632026-09-03High
5.101.86.982026-07-04High
5.101.86.1052026-07-06High
178.16.54.2482026-06-23High
115.231.236.1502026-06-21High
88.119.167.1432026-08-17High
84.21.189.2252026-06-20High
107.175.148.682026-07-09High
130.12.180.322026-10-19High
39.107.242.1302026-10-20High
139.159.203.442026-10-21High
MD51
06394646a4d6d959de9420113ea28b362026-09-19High
Related Reports9 shown
PHP2Shell Was Exploited Before the Patch
Sekoia BlogOct 27, 2026
Blog
ORKL Threat Library
Kudelski Security Research
ORKL Threat Library
The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws
CybleOct 14, 2026
2026-01-14: The Day the telnet Died
GreyNoiseFeb 10, 2026
Beyond Lazarus: How North Korea Organizes Its Cyber Operations
Sekoia BlogAug 31, 2026
IT threat evolution in Q2 2026. Non-mobile statistics
SecurelistAug 10, 2026
Weekly Threat Landscape Digest – Week 20
HawkEyeMay 15, 2026
IT threat evolution in Q1 2026. Non-mobile statistics
SecurelistMay 18, 2026
Threat Profile
TypeRansomware
StatusActive
First SeenJul 29, 2022
Last SeenOct 21, 2026
IOCs tracked60,532