Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
3 IOCs

Fake Utility Downloads Used to Deploy ScreenConnect and Crypto Mining Malware

Cyber Press
Cyber Press
Published June 10, 2026Original Report

Excerpt

A sophisticated cryptojacking campaign that leverages manipulated search engine results and AI chatbot interactions to distribute malware. Attackers are actively spoofing popular system utilities to trick users into downloading compromised packages. Microsoft Security researchers noted that this emerging delivery technique extends social engineering beyond conventional search results, thereby increasing the visibility of malicious recommendations. The primary goal of this…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREstart-download.gleeze…direct-download.gleez…direct-downloads.giiz…CAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(3)
Capability
Victim

Indicators of Compromise

Open the mindmap →

3 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainstart-download.gleeze.comLowScore 31/100First seen
Domaindirect-download.gleeze.comLowScore 47/100First seen
Domaindirect-downloads.giize.comLowScore 28/100First seen

IOC Relationship Graph

Building graph…