Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Excerpt
_Overview DarkCloud is a type of malware categorized as a Stealer, which has evolved over time and positioned itself as one of the most widely used in its category. DarkCloud began making an impact in 2022 and gained relevance that same year and in 2023 by being promoted in various forums showcasing its functionalities. As usual, it was sold through different sources, often leading buyers to communicate via Telegram for its acquisition. The execution and distribution of this…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →7 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | toyscenter.cl | High | Score 58/100 | First seen |
| Domain | www.arandelasespeciales.com | High | Score 58/100 | First seen |
| Domain | hngandpartners.com | High | Score 58/100 | First seen |
| Domain | websiteskrupasindhudevelopers.com | High | Score 58/100 | First seen |
| Domain | alcomax.com.co | High | Score 58/100 | First seen |
| Domain | gugaequiposyservicios.com.mx | High | Score 58/100 | First seen |
| Domain | centuryharvestlink.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…