Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
Blog By Group-IB Published: 2022-12-15 · Archived: 2026-10-20 02:18:32 UTC Malware Analysis · October 14, 2026 https://www.group-ib.com/blog/btc_changer KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize Group-IB researchers analyze KGB RAT, a Windows Remote Access Trojan advertised on underground forums as being fully undetectable, featuring a built-in crypter, HVNC, credential theft, ransomware, and an unusual set of psychological harassment…
Read the original report →Diamond Model
Adversary(63)
Infrastructure(1)
Capability(19)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2023-38831 | High | Score 65/100 | First seen |
| Domain | forbes.ru | High | Score 67/100 | First seen |
| CVE | CVE-2023-23397 | High | Score 65/100 | First seen |
IOC Relationship Graph
Building graph…