Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
Inside an Indian Data Brokerage Running on Unauthorized KYC Access
Malware Families
Excerpt
Inside an Indian Data Brokerage Running on Unauthorized KYC Access Skip to content Solutions Identity & Access Management Managed Detection & Response Exposure Management Meridian Howler Cell Partners CrowdStrike Microsoft Palo Alto Networks SailPoint Splunk Resources Company About Leadership Careers News Contact Us Login Contact Us Login 6 Cents USD per Lookup: Inside an Indian Data Brokerage Running on Unauthorized KYC Access September 01, 2026 Reegun Jayapaul…
Read the original report →Diamond Model
Adversary
Infrastructure(5)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | kyc-api.surepass.io | High | Score 58/100 | First seen |
| Domain | surepass.io | High | Score 58/100 | First seen |
| Domain | truthscreen.com | High | Score 58/100 | First seen |
| Domain | iam.gserviceaccount.com | High | Score 58/100 | First seen |
| Domain | api.invincibleocean.com | High | Score 58/100 | First seen |
| dev.sevenunique@surepass.io | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…