Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
8 IOCs

Beware of Phishing Emails Disguised as Purchase Orders

AhnLab
AhnLab
Published October 8, 2026Original Report

Threat Actors

Malware Families

Excerpt

Beware of Phishing Emails Disguised as Purchase Orders - ASEC Threat Resources Malware Dark Web Vulnerabilities Phishing/Scam CERT Smishing EndPoint Mobile Networks APT Trend Daily Threats Security Advisory RSS Feedly Language 한국어 English 日本語 한국어 English 日本語 RSS Feedly Malware Phishing/Scam Beware of Phishing Emails Disguised as Purchase Orders Oct 09 2026 Recently, the AhnLab SEcurity intelligence Center (ASEC) identified instances of phishing emails being circulated that…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlayTurlaINFRASTRUCTUREexzwzc.comCAPABILITYMETA StealerPlayVICTIMunknown
Adversary(2)
Infrastructure(1)
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

8 indicators

TypeIndicatorConfidenceScoreFirst Seen
MD522d304d7e8ceae68e3e1c9038c6b9046MediumScore 53/100First seen
Emailkingmethodlogs2026@exzwzc.comHighScore 58/100First seen
MD50552617f3e2400d7bdac63f91d974be4MediumScore 53/100First seen
MD5889530cef474d71837a415315b78235bMediumScore 53/100First seen
Emailobsender4snake@exzwzc.comHighScore 58/100First seen
Domainexzwzc.comHighScore 58/100First seen
MD53a9699a4de2fdfc04d47e671d6ee11bbMediumScore 53/100First seen
MD546f47d0c02a81ae9ea7b716d404a88b6MediumScore 53/100First seen

IOC Relationship Graph

Building graph…