Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

GorgonAgora: 4,800+ fake storefronts skim cards across hundreds of impersonated brands

Sansec
Sansec
Published June 2, 2026Original Report

Malware Families

Excerpt

GorgonAgora: 4,800+ fake storefronts skim cards across hundreds of impersonated brands | Sansec 112) { this.ssScrolled = true; } else if (window.pageYOffset Scan your store now Scan your store now Product Pricing Resources Research Partners Guides Malware Company Contact Product Pricing Resources Company Contact Research Partners Support Scan your store now! GorgonAgora: 4,800+ fake storefronts skim cards across hundreds of impersonated brands by Sansec Forensics Team…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYMETA StealerMedusaVICTIMunknown
Adversary
Infrastructure
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA25605f74c23ac2b6b750c3f5ed33c23ef79a086651965695d43d0e0510c32db6efaMediumScore 53/100First seen
SHA256e6c60ca4f996b209bbaf7429182d7ed76acf761bb9c1de63486fcb76635fa58cMediumScore 53/100First seen

IOC Relationship Graph

Building graph…