Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
27 IOCs
Jingle Thief: Inside a Cloud Based Gift Card Fraud Campaign
Excerpt
https://unit42.paloaltonetworks.com/cloud-based-gift-card-fraud-campaign/ Jingle Thief: Inside a Cloud-Based Gift Card Fraud Campaign By Stav Setty, Shachar Roitman Published: 2025-10-22 · Archived: 2026-10-28 02:00:49 UTC Executive Summary We investigated a campaign waged by financially motivated threat actors operating out of Morocco. We refer to this campaign as Jingle Thief, due to the attackers’ modus operandi of conducting gift card fraud during festive seasons. Jingle…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →27 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 196.65.237.97 | High | Score 68/100 | First seen |
| Domain | malicious.cl | High | Score 67/100 | First seen |
| IP | 196.74.183.81 | High | Score 68/100 | First seen |
| Domain | organization.com | High | Score 68/100 | First seen |
| IP | 160.178.201.89 | High | Score 68/100 | First seen |
| IP | 105.157.86.136 | High | Score 68/100 | First seen |
| IP | 105.156.109.227 | High | Score 68/100 | First seen |
| IP | 41.250.180.114 | High | Score 68/100 | First seen |
| Domain | vtext.com | High | Score 67/100 | First seen |
| URL | com.ng/* | High | Score 67/100 | First seen |
| IP | 160.179.102.157 | High | Score 68/100 | First seen |
| IP | 160.176.128.242 | High | Score 68/100 | First seen |
| IP | 196.65.139.51 | High | Score 68/100 | First seen |
| IP | 196.65.146.114 | High | Score 68/100 | First seen |
| URL | https://organization.com@malicious.cl | High | Score 67/100 | First seen |
| IP | 196.74.125.243 | High | Score 68/100 | First seen |
| IP | 196.89.141.80 | High | Score 68/100 | First seen |
| IP | 196.77.47.232 | High | Score 68/100 | First seen |
| IP | 41.250.190.104 | High | Score 68/100 | First seen |
| IP | 105.158.237.165 | High | Score 68/100 | First seen |
| IP | 196.65.172.48 | High | Score 68/100 | First seen |
| IP | 105.158.226.49 | High | Score 68/100 | First seen |
| IP | 41.141.201.19 | High | Score 68/100 | First seen |
| IP | 72.49.91.23 | High | Score 68/100 | First seen |
| IP | 196.64.165.160 | High | Score 68/100 | First seen |
| IP | 105.156.234.139 | High | Score 68/100 | First seen |
| IP | 70.187.192.236 | High | Score 68/100 | First seen |
IOC Relationship Graph
Building graph…