Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Unmasking Lawxsz: Attributing the Developer Behind Valkyrie and Prysmax Stealers
Excerpt
TL;DR This is Part 2 of our investigation into Lawxsz, an Argentinian threat actor behind the Valkyrie, Prysmax, and Packit stealers, along with several RATs and supporting cybercrime services. Where Part 1 reverse-engineered the malware itself, this report focuses on the operator. Through multi-vector OSINT (Telegram intelligence, underground forum breach correlation, infrastructure pivoting, and platform-specific enumeration), we collapsed a fragmented network of aliases:…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | valkyr.cx | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…