Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Excerpt
Intro On August 18, 2026, gameplay footage and map assets from GTA VI began circulating online under the name Cyberleek. The footage was widely assessed as authentic and judging by the urgency of the takedown requests from Rockstar and TakeTwo I tend to believe the assessments. But Cyberleek isn't the only one cashing in. Within days, fake copies of a "playable Cyberleek build" started showing up on torrent sites and Telegram,and what they actually install has nothing to do…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →17 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | www.docsn.cc | High | Score 58/100 | First seen |
| Domain | files.manuscdn.com | High | Score 58/100 | First seen |
| Domain | img1.wsimg.com | High | Score 58/100 | First seen |
| SHA256 | f87662d5a9fd65adfa3333b416d4b183fcdf3bdccd22fde3dfb65522b69d51c6 | Medium | Score 53/100 | First seen |
| Domain | i.ibb.co | High | Score 58/100 | First seen |
| SHA256 | 9264837d2826e63b1683d1077705b4b71b27c40385655008dce44ab2ff5c4d18 | Medium | Score 53/100 | First seen |
| Domain | companieslogo.com | High | Score 58/100 | First seen |
| Domain | csp.secureserver.net | High | Score 58/100 | First seen |
| Domain | ipapi.co | High | Score 63/100 | First seen |
| Domain | docsn.cc | High | Score 58/100 | First seen |
| Domain | instance-wq4wbt-relay.screenconnect.com | High | Score 58/100 | First seen |
| Domain | cyberleek.click | High | Score 58/100 | First seen |
| SHA256 | 46457d98fb1c53bbccb66c1015eb831355f30c8bf8e6f25cf3183aac2a5fd8ab | Medium | Score 53/100 | First seen |
| Domain | carperterloure.screenconnect.com | High | Score 58/100 | First seen |
| SHA256 | d0f4c31f6db7dad5bb305108ebce66e785518a81dc1741ad04951ed0ccd905f5 | Medium | Score 53/100 | First seen |
| Domain | cyberleek.info | High | Score 58/100 | First seen |
| Domain | gg.noktaarts.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…