Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

Fake Microsoft Scanner Secretly Sends Victim Banking and Remote Access Data to Telegram

Cyber Press
Cyber Press
Published August 25, 2026Original Report

Excerpt

A new refund scam is using fake Microsoft-branded security scan websites to trick users into removing antivirus software and sharing sensitive information. The sites, which use names such as SysScan, claim to check whether antivirus software is working correctly. Instead, they display alarming but fabricated warnings and tell visitors that their installed antivirus is causing serious problems. The pages falsely claim that Windows no longer supports third-party antivirus…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREdetectsysscanner.atCAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(1)
Capability
Victim

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domaindetectsysscanner.atHighScore 58/100First seen

IOC Relationship Graph

Building graph…