Overview
Indicators of compromise associated with BeaverTail. 4 indicators listed below, linked to the G0032 adversary profile.
Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.
| Type | Indicator | First Seen | Confidence |
|---|---|---|---|
| ip:port | 151.80.76.67:1224 | September 9, 2026 | 100% |
| url | http://151.80.76.67:1224/api/checkStatus | September 9, 2026 | 100% |
| url | https://a5lab.co/api/settings/linux | September 9, 2026 | 100% |
| domain | a5lab.co | September 9, 2026 | 90% |
Related content