Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
14 IOCs
How an Infostealer Infection Led to a Sophisticated ClickFix Campaign at Artlist
Malware Families
Excerpt
How an Infostealer Infection Led to a Sophisticated ClickFix Campaign at Artlist A shared research investigation by Hudson Rock and Matt Kirkland ( derp.ca ). In mid-July 2026, researchers discovered a sophisticated ClickFix campaign operating on a subdomain belonging to the popular digital asset platform, Artlist. The attackers had successfully compromised new-blog.artlist[.]io , injecting malicious code designed to trick visitors into installing a Remote Access Trojan (RAT)…
Read the original report →Diamond Model
Adversary
Infrastructure(5)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →14 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 75d4b6cec5bdc40cda25b5b9be136ccca97d77843825796beace7ddbfe87b614 | Medium | Score 53/100 | First seen |
| IP | 62.60.156.11 | High | Score 58/100 | First seen |
| Domain | auth-code-check.info | High | Score 86/100 | First seen |
| SHA1 | b6bc9e1d0b2fb96ab7c47e04cb0be477410bc1f2 | Medium | Score 53/100 | First seen |
| SHA256 | 8035b177ca682962fd6501228ebd460ef174183ac08a87d81514bba3ecfd9502 | Medium | Score 53/100 | First seen |
| IP | 151.236.4.135 | High | Score 86/100 | First seen |
| SHA256 | d518964aa67c359d0a806909451130591e337276bea33b6d41ef79126904ca3a | Medium | Score 53/100 | First seen |
| IP | 45.151.74.119 | High | Score 58/100 | First seen |
| SHA256 | a7c94343b51643b7477ba2c7630b168ce3cb1f03126a85c39363e70742e3afb5 | Medium | Score 53/100 | First seen |
| IP | 109.172.95.184 | High | Score 58/100 | First seen |
| SHA256 | 3a9b8eccad62d84fc59f86dae41e8c74ae6ae544f079b099b12b37de1abd7a60 | Medium | Score 53/100 | First seen |
| SHA256 | 6bc18b6c6050bdd554c4a945838b8b3a35b5c5813b950cf5f2e822b2396718cf | Medium | Score 53/100 | First seen |
| SHA256 | 2f592365de553d8bb023a9e11439c2e18dcbe84d22b0cd6025b043d7d9029ac7 | Medium | Score 53/100 | First seen |
| SHA256 | 26817725650583d99ca3e617a618dd75c0f71bd316b5761780b7361f5f824cad | High | Score 86/100 | First seen |
IOC Relationship Graph
Building graph…