Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Malware Families
Excerpt
When TypeSafe AI’s Jev API opened to the public, we did what everyone does: we googled it. “Jev AI” gave us jev-ai.pro as the #1 result. “Jev TypeSafe” gave us jevtypesafeai.com, also #1. Both had a playground, API docs, pricing pages and a checkout. Neither belonged to TypeSafe. Google search for “jev ai”: the first result is jev-ai.pro, not TypeSafe What they sell is real Jev. Every request goes straight to TypeSafe’s own API.…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →17 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | taomateh3.pro | High | Score 58/100 | First seen |
| URL | https://jevtypesafeai.com/pricing | High | Score 58/100 | First seen |
| URL | https://jevmodel.org/jev-pricing | High | Score 58/100 | First seen |
| Domain | h3maxturbo.pro | High | Score 58/100 | First seen |
| Domain | laya-ai.pro | High | Score 58/100 | First seen |
| Domain | lyria35.pro | High | Score 58/100 | First seen |
| Domain | faceless-reels.pro | High | Score 58/100 | First seen |
| Domain | jev-agent.org | High | Score 58/100 | First seen |
| URL | https://jevapi.pro/pricing | High | Score 58/100 | First seen |
| URL | https://jev-ai.pro/about | High | Score 58/100 | First seen |
| URL | https://jev-ai.pro/pricing | High | Score 58/100 | First seen |
| URL | https://jev-ai.pro/privacy | High | Score 58/100 | First seen |
| URL | https://jevtypesafeai.com/get-jev | High | Score 58/100 | First seen |
| Domain | jevai.site | High | Score 58/100 | First seen |
| Domain | jev-agent.com | High | Score 58/100 | First seen |
| URL | https://jev-ai.pro/refund | High | Score 58/100 | First seen |
| URL | https://jevtypesafeai.com/terms | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…