Overview
Indicators of compromise associated with OtterCookie. 4 indicators listed below, linked to the G1052 adversary profile.
Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.
| Type | Indicator | First Seen | Confidence |
|---|---|---|---|
| ip:port | 138.226.247.152:80 | September 17, 2026 | 95% |
| url | http://138.226.247.152:80/session/0f2a3fba69d29493 | September 17, 2026 | 100% |
| url | https://www.jsonkeeper.com/b/PAB1R | September 17, 2026 | 95% |
| url | https://www.jsonkeeper.com/b/7EBZP | September 17, 2026 | 95% |
Related content