Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
59 IOCs
APT Meets GPT: Targeted Operations with Untamed LLMs
Malware Families
Excerpt
Starting in June 2025, Volexity detected a series of spear phishing campaigns targeting several customers and their users in North America, Asia, and Europe. The initially observed campaigns were tailored to the targets, and the messages purported to be sent by senior researchers and analysts from legitimate-sounding, completely fabricated organizations. The goal of these spear phishing campaigns was to socially engineer targets into clicking links that led to a remotely…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →59 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 82.118.16.173 | High | Score 58/100 | First seen |
| URL | https://hllowrodcanlhelipme.netlify.app/file/zip | High | Score 58/100 | First seen |
| URL | https://subtle-klepon-d73b9b.netlify.app/file/zip | High | Score 58/100 | First seen |
| URL | https://aquamarine-choux-46cb43.netlify.app/file/rar | High | Score 58/100 | First seen |
| URL | https://loveusa.netlify.app/file/rar | High | Score 58/100 | First seen |
| URL | https://subtle-klepon-d73b9b.netlify.app/file/rar | High | Score 58/100 | First seen |
| URL | https://1drv.ms/u/c/F703BC98FAB44D61/ESz4UV9JeOhOp8kiWd0Ie10ByH7eUdSRlBy2NCiNeo2LYw | High | Score 58/100 | First seen |
| IP | 45.141.139.222 | High | Score 58/100 | First seen |
| Domain | doccloude.info | High | Score 58/100 | First seen |
| URL | https://vocal-crostata-86ebbf.netlify.app/files/zip | High | Score 58/100 | First seen |
| SHA256 | 0414217624404930137ec8f6a26aebd8a3605fe089dbfb9f5aaaa37a9e2bad2e | High | Score 58/100 | First seen |
| SHA256 | ad5718f6810714bc6527cc86d71d34d8c556fe48706d18b5d14f0261eb27d942 | High | Score 58/100 | First seen |
| URL | wss://outlook.windows-app.store/ws | High | Score 58/100 | First seen |
| URL | https://statuesque-unicorn-09420f.netlify.app/r | High | Score 58/100 | First seen |
| IP | 80.85.154.48 | High | Score 58/100 | First seen |
| URL | https://aesthetic-donut-1af43s2.netlify.app/file/rar | High | Score 58/100 | First seen |
| IP | 80.85.157.117 | High | Score 58/100 | First seen |
| Domain | azure-app.store | High | Score 58/100 | First seen |
| Domain | www.twmoc.info | High | Score 58/100 | First seen |
| SHA256 | a5ee55a78d420dbba6dec0b87ffd7ad6252628fd4130ed4b1531ede960706d2d | High | Score 58/100 | First seen |
| IP | 185.144.28.68 | High | Score 58/100 | First seen |
| SHA256 | 2ffe1e4f4df34e1aca3b8a8e93eee34bfc4b7876cedd1a0b6ca5d63d89a26301 | High | Score 58/100 | First seen |
| URL | https://1drv.ms/u/c/F703BC98FAB44D61/ER_XG5FDkURHtsmna8vOQrIBRODKiQBKYJVKnI-kGKwX0A | High | Score 58/100 | First seen |
| URL | https://animated-dango-0fa8c8.netlify.app/file/Taiwan%20Intro.zip | High | Score 58/100 | First seen |
| Domain | windows-app.store | High | Score 58/100 | First seen |
| IP | 31.192.234.22 | High | Score 58/100 | First seen |
| SHA256 | 126c3d21a1dae94df2b7a7d0b2f0213eeeec3557c21717e02ffaed690c4b1dbd | High | Score 58/100 | First seen |
| URL | wss://onedrive.azure-app.store/ws | High | Score 58/100 | First seen |
| URL | https://dainty-licorice-db2b1e.netlify.app/file/zip | High | Score 58/100 | First seen |
| IP | 74.119.193.175 | High | Score 58/100 | First seen |
| URL | https://harmonious-malabi-a8ebfa.netlify.app/file/Taiwan%20Intro.rar | High | Score 58/100 | First seen |
| Domain | 202507_please_check_the_document.zip | High | Score 58/100 | First seen |
| IP | 104.194.152.152 | High | Score 58/100 | First seen |
| Domain | twmoc.info | High | Score 58/100 | First seen |
| SHA256 | 7d7d75e4d524e32fc471ef2d36fd6f7972c05674a9f2bac909a07dfd3e19dd18 | High | Score 58/100 | First seen |
| URL | https://1drv.ms/u/c/F703BC98FAB44D61/ERpeLpJlb7FAkbfyuffpFJYBZ-8u2MmQH6LW5xH86B4M8w | High | Score 58/100 | First seen |
| URL | wss://api.twmoc.info/ws | High | Score 58/100 | First seen |
| Domain | globalsolutionsinc.com | High | Score 58/100 | First seen |
| SHA256 | 88782d26f05d82acd084861d6a4b9397d5738e951c722ec5afed8d0f6b07f95e | High | Score 58/100 | First seen |
| SHA256 | 4c041c7c0d5216422d5d22164f83762be1e70f39fb8a791d758a816cdf3779a9 | High | Score 58/100 | First seen |
| URL | https://aquamarine-choux-46cb43.netlify.app/file/zip | High | Score 58/100 | First seen |
| URL | https://jazzy-biscotti-68241f.netlify.app/files/Intro-Doc.rar | High | Score 58/100 | First seen |
| URL | https://app-site-association.cdn-apple.info:443/updates.rss | High | Score 58/100 | First seen |
| IP | 80.85.156.234 | High | Score 58/100 | First seen |
| Domain | sliddeshare.online | High | Score 58/100 | First seen |
| URL | https://aesthetic-donut-1af43s2.netlify.app/file/zip | High | Score 58/100 | First seen |
| Domain | researchanalytics.co.uk | High | Score 58/100 | First seen |
| URL | https://1drv.ms/u/c/f9e3b332ce488781/Eap6_fxYFP5Eh1ZKDZaf8lMBjJNcfdba4MVcr4YfKj674w?e=fgNIj4,url,GOVERSHELL | High | Score 58/100 | First seen |
| URL | https://pulicwordfiledownlos.netlify.app/file/rar | High | Score 58/100 | First seen |
| URL | https://spontaneous-selkie-d3346f.netlify.app/file/zip | High | Score 58/100 | First seen |
| Domain | moctw.info | High | Score 58/100 | First seen |
| SHA256 | 998e314a8babf6db11145687be18dc3b8652a3dd4b36c115778b7ca5f240aae4 | High | Score 58/100 | First seen |
| SHA256 | 53af82811514992241e232e5c04e5258e506f9bc2361b5a5b718b4e4b5690040 | High | Score 58/100 | First seen |
| URL | https://dulcet-mooncake-36558c.netlify.app/file/zip | High | Score 58/100 | First seen |
| URL | https://ln5.sync.com/4.0/dl/100016f90#3d5wrb4z-hfb4iz3m-qmjzsqnq-39rn3vjv,url,GOVERSHELL | High | Score 58/100 | First seen |
| SHA256 | fbade9d8a040ed643b68e25e19cba9562d2bd3c51d38693fe4be72e01da39861 | High | Score 58/100 | First seen |
| IP | 104.194.152.137 | High | Score 58/100 | First seen |
| Domain | cdn-apple.info | High | Score 58/100 | First seen |
| URL | https://aquamarine-choux-46cb43.netlify.app/index/file/ | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…