>samit_hota
Back to IOCs
G105315 indicators

Lynx — Indicators of Compromise

Samit Hota·
#ioc#lynx

Overview

Indicators of compromise associated with Lynx. 15 indicators listed below, linked to the G1053 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
domainlynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad.onionJuly 28, 2026100%
domainlynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad.onionJuly 28, 2026100%
domainlynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad.onionJuly 28, 2026100%
domainlynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd.onionJuly 28, 2026100%
domainlynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd.onionJuly 28, 2026100%
domainlynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd.onionJuly 28, 2026100%
domainlynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd.onionJuly 28, 2026100%
domainlynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd.onionJuly 28, 2026100%
domainlynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd.onionJuly 28, 2026100%
domainlynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd.onionJuly 28, 2026100%
domainlynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad.onionJuly 28, 2026100%
domainlynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad.onionJuly 28, 2026100%
domainlynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad.onionJuly 28, 2026100%
domainlynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid.onionJuly 28, 2026100%
domainlynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd.onionJuly 28, 2026100%

Related content

Adversary Profile

Storm-0501: An Evolving Hybrid Cloud Ransomware Threat

IOCs

INC — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

IOCs

ACR Stealer — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call