Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
17 IOCs

AI brands as bait: How threat actors are using the AI hype in social engineering

Microsoft Threat Intelligence
Microsoft Threat Intelligence
Published June 8, 2026Original Report

Malware Families

Excerpt

In this article ChatGPT-themed lure leads to phishing kit collecting credit card data Claude-themed phishing campaign collected credentials and access tokens "Awesome AI Windows Plugin” malvertising deploys Vidar stealer Fake DeepSeek V4 installers on GitHub delivered Vidar Stealer Mitigation and protection guidance Microsoft Defender detections Indicators of compromise As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREservicing.pureplantcr…pan.rongtv.xyzhttp://dash.awaydoubl…CAPABILITYLummaVidarVICTIMunknown
Adversary
Infrastructure(6)
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

17 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainservicing.pureplantcravings.comHighScore 58/100First seen
Domainpan.rongtv.xyzHighScore 64/100First seen
URLhttp://dash.awaydouble.org/0v2authHighScore 58/100First seen
Domainbrokeapt.comHighScore 64/100First seen
Domainlegendarytrendsbay.shopHighScore 58/100First seen
SHA14f5c5b3ef45cfff7721754487a86aeff9a2e6e32MediumScore 53/100First seen
SHA25656d722b0331bf0aaa86bb37483486c6dff6ad9427fc473ed7c3226c21a9bdd23MediumScore 53/100First seen
Domainpan.ssffaa19.xyzHighScore 64/100First seen
Domainawstrack.meHighScore 58/100First seen
SHA256c7c5072df9f83f4c440a5c3bb4be1d5f6c67bbf78f196406ca20d27b43b975b8MediumScore 53/100First seen
SHA2568610d4fb0ec5b525071c2aaec4df0f8fcbb3673aba58a7e1959fc44e83c0e2caMediumScore 53/100First seen
SHA25625270cc429ada8028b5b33220ed412c47907ecceea7377d608fac5af01bed56aMediumScore 53/100First seen
Domaingrupoconstat.bitrix24.com.brHighScore 58/100First seen
SHA2560a26238f6c516de5885457c93042531aa59bc206a9537cebf5267cedc6c68531MediumScore 53/100First seen
SHA256791efb555eefb7215e96659a1353a97416743b66bdd72705493129c64057d40eMediumScore 53/100First seen
SHA2565455341ed1bbe75a664fca2dd0794c508e1874f75360253a7ff5bc119bc92d80MediumScore 53/100First seen
SHA25699231deb373997364381d1eb513d2d42231d418c3a2db9007c5af9bd56ab9371MediumScore 53/100First seen

IOC Relationship Graph

Building graph…