Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
5 IOCs

Cato CTRL™ Threat Research: Oyster Malware Loader Targets Tech-Savvy Users with Smarter Techniques During Summer Malvertising Campaign

Cato Networks
Cato Networks
Published August 13, 2025Original Report

Malware Families

Excerpt

Executive Summary  Summertime in the U.S., Europe, and many other regions typically falls between June and September . Tech teams, admins, and even their bosses take vacations. Inboxes slow down, and production systems finally get a breather. But for the threat actors behind Oyster, while others were reaching for sunscreen or enjoying real sea fishing, they launched their own phishing campaign using something far more effective than email and sharpened their hook. After…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE45.86.230.77skyviberealty.computty.us.comCAPABILITYRhysidaVICTIMunknown
Adversary
Infrastructure(3)
Capability(1)
Victim

Indicators of Compromise

Open the mindmap →

5 indicators

TypeIndicatorConfidenceScoreFirst Seen
IP45.86.230.77HighScore 58/100First seen
Domainskyviberealty.comHighScore 58/100First seen
Domainputty.us.comHighScore 58/100First seen
SHA256e25db8020f7fcadaec5dd54dd7364d8eaa9efd8755fb91a357f3d29bf2d9fbadMediumScore 53/100First seen
SHA2560bb664420f910961b579f5b9f9047d5d9de52f0bb06cd49e08747ecf9056f5d6MediumScore 53/100First seen

IOC Relationship Graph

Building graph…