Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
85 IOCs
Flexrat – Chilloutvr Lures, Shared Secrets, and an Opsec Hangover
Threat Actors
Excerpt
https://hexastrike.com/resources/blog/threat-intelligence/flexrat-chilloutvr-lures-shared-secrets-and-an-opsec-hangover/ FLEXRAT – ChilloutVR Lures, Shared Secrets, and an OPSEC Hangover By Maurice Fielenbach Published: 2026-10-04 · Archived: 2026-10-08 02:01:36 UTC Executive Summary Hexastrike uncovered an undocumented commodity stealer and remote access toolset, which we track as FLEXRAT, distributed through counterfeit game-modification websites. The most prominent lure…
Read the original report →Diamond Model
Adversary(4)
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →85 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | chilloutvrmod.vip | High | Score 67/100 | First seen |
| Domain | modschillout.com | High | Score 67/100 | First seen |
| Domain | chilloutvrmods.pages.dev | High | Score 67/100 | First seen |
| Domain | chilloutvrplugin.com | High | Score 67/100 | First seen |
| Domain | chilloutvr-mods.netlify.app | High | Score 67/100 | First seen |
| Domain | modschilloutvr.com | High | Score 67/100 | First seen |
| Domain | l874.lol | High | Score 67/100 | First seen |
| Domain | vrchatsmod.netlify.app | High | Score 67/100 | First seen |
| Domain | chillvrmod.com | High | Score 86/100 | First seen |
| Domain | customvrchat.com | High | Score 67/100 | First seen |
| Domain | chilloutplugin.com | High | Score 67/100 | First seen |
| Domain | qabyostore.icu | High | Score 67/100 | First seen |
| Domain | chilloutvrlabs.com.tr | High | Score 67/100 | First seen |
| Domain | mods.zip | High | Score 67/100 | First seen |
| Domain | chilloutvrmods.xyz | High | Score 67/100 | First seen |
| Domain | chilloutvrmods.netlify.app | High | Score 67/100 | First seen |
| Domain | chilloutplugins.info | High | Score 67/100 | First seen |
| URL | https://flexrat.org/cdn/telemetry/error | High | Score 67/100 | First seen |
| Domain | chilloutvrlabs.online | High | Score 67/100 | First seen |
| Domain | chillvrmod.online | High | Score 67/100 | First seen |
| Domain | chilloutvrhub.com | High | Score 67/100 | First seen |
| Domain | chilloutvr.cc | High | Score 67/100 | First seen |
| Domain | vrcplugin.com | High | Score 67/100 | First seen |
| Domain | chilloutsvrmods.info | High | Score 67/100 | First seen |
| Domain | chilloutvr.online | High | Score 67/100 | First seen |
| Domain | chilloutvr.org | High | Score 67/100 | First seen |
| Domain | chilloutvrmodded.com | High | Score 67/100 | First seen |
| Domain | vrchilloutmods.com | High | Score 67/100 | First seen |
| Domain | chilloutplugins.netlify.app | High | Score 67/100 | First seen |
| Domain | chilloutvr-x.netlify.app | High | Score 67/100 | First seen |
| Domain | chilloutsvrmod.com | High | Score 67/100 | First seen |
| Domain | chilloutvr.info | High | Score 67/100 | First seen |
| Domain | chilloutmode.com | High | Score 67/100 | First seen |
| Domain | chilloutvrmods.netliy.app | High | Score 67/100 | First seen |
| Domain | chilloutmodsvr.pages.dev | High | Score 67/100 | First seen |
| Domain | flexrat.com | High | Score 67/100 | First seen |
| Domain | chilloutmod.pages.dev | High | Score 67/100 | First seen |
| Domain | lexoramods.com | High | Score 67/100 | First seen |
| Domain | chilloutvrplugin-d6v.pages.dev | High | Score 67/100 | First seen |
| Domain | chilloutvrbeta.netlify.app | High | Score 67/100 | First seen |
| Domain | chilloutsvrworld.com | High | Score 67/100 | First seen |
| Domain | chilloutvrmodded.net | High | Score 86/100 | First seen |
| Domain | chilloutvrmod.com | High | Score 67/100 | First seen |
| Domain | chilloutvrmod.org | High | Score 86/100 | First seen |
| Domain | chilloutmodvr.online | High | Score 67/100 | First seen |
| Domain | chilloutvr-docs.pages.dev | High | Score 67/100 | First seen |
| Domain | vrcpluginlab.com | High | Score 67/100 | First seen |
| Domain | chilloutsvrmod.online | High | Score 67/100 | First seen |
| Domain | vrchatmod.com | High | Score 67/100 | First seen |
| URL | https://l874.xyz | High | Score 67/100 | First seen |
| Domain | chilloutvrsmod.net | High | Score 67/100 | First seen |
| Domain | chilloutmodvr.netlify.app | High | Score 67/100 | First seen |
| SHA256 | 3400a2fdc62cefa8c0945b505dbff5540163ed30df84dd125bb64dcff6985600 | High | Score 67/100 | First seen |
| Domain | chilloutsmods.com | High | Score 67/100 | First seen |
| Domain | chilloutvrlabs.com | High | Score 67/100 | First seen |
| Domain | chilloutmodvrr.netlify.app | High | Score 67/100 | First seen |
| Domain | chilloutvrmods.com | High | Score 67/100 | First seen |
| URL | https://hexastrike.com/resources/blog/threat-intelligence/flexrat-chilloutvr-lures-shared-secrets-and-an-opsec-hangover/ | High | Score 67/100 | First seen |
| Domain | chilloutvr.vip | High | Score 67/100 | First seen |
| Domain | chilloutsvrmod.info | High | Score 67/100 | First seen |
| Domain | modschilloutvr.netlify.app | High | Score 67/100 | First seen |
| Domain | chilloutmodsvr.netlify.app | High | Score 67/100 | First seen |
| Domain | chilloutmods.netlify.app | High | Score 67/100 | First seen |
| Domain | chilloutmodes.com | High | Score 67/100 | First seen |
| Domain | vrchilloutmod.com | High | Score 67/100 | First seen |
| Domain | chilloutmods.pages.dev | High | Score 67/100 | First seen |
| Domain | chilloutworlds.com | High | Score 67/100 | First seen |
| Domain | chilloutvrmod.net | High | Score 67/100 | First seen |
| Domain | chilloutvrlabs.info | High | Score 67/100 | First seen |
| Domain | l874_.zip | High | Score 67/100 | First seen |
| Domain | chilloutmodvr.com | High | Score 67/100 | First seen |
| Domain | chilloutvrchat.com | High | Score 67/100 | First seen |
| Domain | chilloutsvrmods.online | High | Score 67/100 | First seen |
| Domain | chilloutmodvr.info | High | Score 67/100 | First seen |
| Domain | chilloutsvrmods.com.tr | High | Score 67/100 | First seen |
| Domain | chilloutvrmods.net | High | Score 67/100 | First seen |
| Domain | chilloutsvrmods.com | High | Score 67/100 | First seen |
| Domain | chilloutmod.com | High | Score 67/100 | First seen |
| Domain | chilloutvrplugin.xyz | High | Score 67/100 | First seen |
| Domain | vrchilloutmods.shop | High | Score 67/100 | First seen |
| Domain | chilloutvrplugins.com | High | Score 67/100 | First seen |
| Domain | vrchatmodes.com | High | Score 67/100 | First seen |
| Domain | chilloutvrgame.net | High | Score 67/100 | First seen |
| Domain | chilloutvrsmod.com | High | Score 67/100 | First seen |
| Domain | chilloutsvrmod.com.tr | High | Score 67/100 | First seen |
IOC Relationship Graph
Building graph…