Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
12 IOCs
PDFChampions YAPA Browser Hijacker/Loader Analysis
Excerpt
TL;DR PDFChampions is a YAPA Browser Hijacker, delivered via ads, that changes the browsers default search engine and also functions as a loader. Table of Contents TL;DR Tactical Pause Summary Up Front After-publish Edit Notes Intro Google Advertisement Delivery Execution Loader Functions Summary References Indicators WITH PLANNY ALOHA, MAHALO FOR YOUR TIME! Tactical Pause THE CONTENT, VIEWS, AND OPINIONS EXPRESSED ON THIS DOCUMENT ARE MY OWN AND DO NOT…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →12 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://more.mariosearch.com/api/v1/getprofiler?profile_id=9kie7cg6.default-release. | High | Score 58/100 | First seen |
| URL | https://more.mariosearch.com/api/v1/getprofiler?profile_id=\” </p> | High | Score 58/100 | First seen |
| URL | https://more.mariosearch.com/search?uid=3a6a9d7ca49600337da9e57538771f20&pid=s50002&install_date=29-10-2025&q=searchTerms. | High | Score 58/100 | First seen |
| MD5 | 3a6a9d7ca49600337da9e57538771f20 | Medium | Score 53/100 | First seen |
| Domain | govsalaries.com | High | Score 63/100 | First seen |
| SHA256 | 7c5004c9d3ed4325c547ec0127d59205529f4574444a9e74dc108b0783d6e392 | Medium | Score 53/100 | First seen |
| URL | https://pdfchampions.com/privacy.html | High | Score 58/100 | First seen |
| URL | https://pdfchampions.com/thanks | High | Score 58/100 | First seen |
| URL | https://more.mariosearch.com/api/v1/getprofiler?profile_id= | High | Score 58/100 | First seen |
| URL | https://pdfchampions.com/pdfchampions”. | High | Score 58/100 | First seen |
| URL | https://pdfchampions.com/uninstall.html | High | Score 58/100 | First seen |
| URL | https://pdfchampions.com/terms.html | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…