Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
11 IOCs
HelloNet campaign — new malicious modules launched through the ViPNet update system
Excerpt
UPD 16.07.2026: Added rules to protect companies using our SIEM system Kaspersky SIEM, and listed events for developing custom detection rules or conducting Threat hunting. UPD 16.07.2026: Added detection of the malicious activity using Kaspersky Managed Detection and Response. UPD 16.07.2026: Added detection rules and examples using KEDR Expert. UPD 16.07.2026: Added detection of the malicious campaign in network traffic using Kaspersky Anti Targeted Attack (KATA) with the…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Open the mindmap →11 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 176.32.34.135 | High | Score 58/100 | First seen |
| IP | 5.39.253.206 | High | Score 58/100 | First seen |
| MD5 | 6001829a128fe264b4403138700c11a8 | Medium | Score 53/100 | First seen |
| MD5 | 41c938b3cd7e55d4077e34976929b140 | Medium | Score 53/100 | First seen |
| MD5 | f9eed2f0158dc98e7012fb809152209c | Medium | Score 53/100 | First seen |
| MD5 | 16c211c96735f2fae9361b89bd7a31bf | Medium | Score 53/100 | First seen |
| MD5 | 0cfdffc56f0fa325d0c4d24780b46597 | Medium | Score 53/100 | First seen |
| MD5 | 9f5606a0755bc633b9bd7db6d179c09e | Medium | Score 53/100 | First seen |
| MD5 | b103cd21280b4061f88b2bcc51394894 | Medium | Score 53/100 | First seen |
| MD5 | 1bfe2b9493128574907a8279256a8bcc | Medium | Score 53/100 | First seen |
| MD5 | ee4ff46ddd8489e81447962f927bc3f6 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…