Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
26 IOCs

Scams, Slaves and (Malware-as-a) Service: Tracking a Trojan to Cambodia’s Scam Centers

Infoblox
Infoblox
Published April 10, 2026Original Report

Threat Actors

Malware Families

Excerpt

Authors: Infoblox Threat Intel and Chong Lua Dao Incidents of malware-enabled fraud and remote access scams have been on the rise against the backdrop of proliferating industrial-scale scam operations in Southeast Asia, with many countries in the region issuing official warnings over the past three years. But connecting specific malware to the notorious compounds has been elusive … until now. In collaboration with the Vietnamese non-profit Chong Lua Dao , we uncovered…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYRoyalINFRASTRUCTUREorbiixtrade.comvnwd.topalperu.topCAPABILITYRoyalVICTIMunknown
Adversary(1)
Infrastructure(6)
Capability(1)
Victim

Indicators of Compromise

Open the mindmap →

26 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainorbiixtrade.comHighScore 58/100First seen
Domainvnwd.topMediumScore 58/100First seen
Domainalperu.topHighScore 58/100First seen
SHA25639ea88f852b25d3c55d605464a3440bd250a577e3e21f52d1eaf94d15aad5b82HighScore 71/100First seen
IP38.47.52.4HighScore 58/100First seen
Domainnmxgo.ccHighScore 58/100First seen
Domainngovbr.ccHighScore 64/100First seen
SHA2564338ab77d05aeacd7eac5acbe9eed5568778c8e3e9499562816805b54b4d1a6aHighScore 74/100First seen
Domaingoogleplay.djppajakgoid.comHighScore 58/100First seen
Domainimmigration-kr.netHighScore 58/100First seen
Domaincedula-registraduria-gov.orgHighScore 58/100First seen
Domainopenbank-es.comHighScore 58/100First seen
Domainsss.oiago.ccHighScore 58/100First seen
Domainidphil.netHighScore 58/100First seen
Domainvsgo.ccHighScore 58/100First seen
Domainorgo.ccHighScore 68/100First seen
Domainsafeapk.xyzHighScore 58/100First seen
Domainalafrica.xyzHighScore 58/100First seen
SHA2564fff28eecc0ab6303e4948df77671009dda5b93ed3d1cead527b02d1317426bcHighScore 68/100First seen
Domaindkhth.comHighScore 64/100First seen
Domainavianca.sxjgo.ccHighScore 66/100First seen
IP18.167.169.60HighScore 58/100First seen
Domainegov.nbsvgo.ccHighScore 58/100First seen
Domainrycnair.comHighScore 58/100First seen
IP103.214.169.197HighScore 58/100First seen
Domainlx-yindu.topHighScore 58/100First seen

IOC Relationship Graph

Building graph…