<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Samit Hota — Indicators of Compromise</title><description>Indicators of compromise (IPs, domains, hashes, URLs) by malware family — real, verified, never invented.</description><link>https://samithota.com/</link><item><title>YiBackdoor — 3 indicators</title><link>https://samithota.com/iocs/yibackdoor/</link><guid isPermaLink="true">https://samithota.com/iocs/yibackdoor/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with YiBackdoor.</description><pubDate>Sun, 02 Aug 2026 18:40:25 GMT</pubDate><category>ioc</category><category>yibackdoor</category><author>Samit Hota</author></item><item><title>neshta — 3 indicators</title><link>https://samithota.com/iocs/neshta/</link><guid isPermaLink="true">https://samithota.com/iocs/neshta/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with neshta.</description><pubDate>Sun, 02 Aug 2026 18:40:25 GMT</pubDate><category>ioc</category><category>neshta</category><author>Samit Hota</author></item><item><title>ElectroRAT — 3 indicators</title><link>https://samithota.com/iocs/electrorat/</link><guid isPermaLink="true">https://samithota.com/iocs/electrorat/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with ElectroRAT.</description><pubDate>Sun, 02 Aug 2026 18:40:25 GMT</pubDate><category>ioc</category><category>electrorat</category><author>Samit Hota</author></item><item><title>lampion — 3 indicators</title><link>https://samithota.com/iocs/lampion/</link><guid isPermaLink="true">https://samithota.com/iocs/lampion/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with lampion.</description><pubDate>Sat, 01 Aug 2026 18:40:16 GMT</pubDate><category>ioc</category><category>lampion</category><author>Samit Hota</author></item><item><title>DarkMegi — 50 indicators</title><link>https://samithota.com/iocs/darkmegi/</link><guid isPermaLink="true">https://samithota.com/iocs/darkmegi/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with DarkMegi.</description><pubDate>Sat, 01 Aug 2026 18:40:16 GMT</pubDate><category>ioc</category><category>darkmegi</category><author>Samit Hota</author></item><item><title>Houdini — 1 indicators</title><link>https://samithota.com/iocs/houdini/</link><guid isPermaLink="true">https://samithota.com/iocs/houdini/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with Houdini.</description><pubDate>Fri, 31 Jul 2026 05:52:05 GMT</pubDate><category>ioc</category><category>houdini</category><author>Samit Hota</author></item><item><title>BlankGrabber — 3 indicators</title><link>https://samithota.com/iocs/blankgrabber/</link><guid isPermaLink="true">https://samithota.com/iocs/blankgrabber/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with BlankGrabber.</description><pubDate>Thu, 30 Jul 2026 19:00:21 GMT</pubDate><category>ioc</category><category>blankgrabber</category><author>Samit Hota</author></item><item><title>EDDIESTEALER — 3 indicators</title><link>https://samithota.com/iocs/eddiestealer/</link><guid isPermaLink="true">https://samithota.com/iocs/eddiestealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with EDDIESTEALER.</description><pubDate>Thu, 30 Jul 2026 19:00:21 GMT</pubDate><category>ioc</category><category>eddiestealer</category><author>Samit Hota</author></item><item><title>DOSTEALER — 3 indicators</title><link>https://samithota.com/iocs/dostealer/</link><guid isPermaLink="true">https://samithota.com/iocs/dostealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with DOSTEALER.</description><pubDate>Thu, 30 Jul 2026 14:55:21 GMT</pubDate><category>ioc</category><category>dostealer</category><author>Samit Hota</author></item><item><title>prb_backdoor — 3 indicators</title><link>https://samithota.com/iocs/prb-backdoor/</link><guid isPermaLink="true">https://samithota.com/iocs/prb-backdoor/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with prb_backdoor.</description><pubDate>Thu, 30 Jul 2026 14:55:21 GMT</pubDate><category>ioc</category><category>prb-backdoor</category><author>Samit Hota</author></item><item><title>VoltStealer — 3 indicators</title><link>https://samithota.com/iocs/voltstealer/</link><guid isPermaLink="true">https://samithota.com/iocs/voltstealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with VoltStealer.</description><pubDate>Thu, 30 Jul 2026 14:55:21 GMT</pubDate><category>ioc</category><category>voltstealer</category><author>Samit Hota</author></item><item><title>PITFUEL — 3 indicators</title><link>https://samithota.com/iocs/pitfuel/</link><guid isPermaLink="true">https://samithota.com/iocs/pitfuel/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with PITFUEL.</description><pubDate>Thu, 30 Jul 2026 14:55:21 GMT</pubDate><category>ioc</category><category>pitfuel</category><author>Samit Hota</author></item><item><title>ZuoRAT — 3 indicators</title><link>https://samithota.com/iocs/zuorat/</link><guid isPermaLink="true">https://samithota.com/iocs/zuorat/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with ZuoRAT.</description><pubDate>Thu, 30 Jul 2026 14:55:21 GMT</pubDate><category>ioc</category><category>zuorat</category><author>Samit Hota</author></item><item><title>Xtreme RAT — 5 indicators</title><link>https://samithota.com/iocs/xtreme-rat/</link><guid isPermaLink="true">https://samithota.com/iocs/xtreme-rat/</guid><description>5 indicators of compromise (IPs, domains, hashes, URLs) associated with Xtreme RAT.</description><pubDate>Thu, 30 Jul 2026 10:04:21 GMT</pubDate><category>ioc</category><category>xtreme-rat</category><author>Samit Hota</author></item><item><title>DarkComet — 6 indicators</title><link>https://samithota.com/iocs/darkcomet/</link><guid isPermaLink="true">https://samithota.com/iocs/darkcomet/</guid><description>6 indicators of compromise (IPs, domains, hashes, URLs) associated with DarkComet.</description><pubDate>Thu, 30 Jul 2026 10:04:21 GMT</pubDate><category>ioc</category><category>darkcomet</category><author>Samit Hota</author></item><item><title>Ramnit — 3 indicators</title><link>https://samithota.com/iocs/ramnit/</link><guid isPermaLink="true">https://samithota.com/iocs/ramnit/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Ramnit.</description><pubDate>Thu, 30 Jul 2026 05:26:53 GMT</pubDate><category>ioc</category><category>ramnit</category><author>Samit Hota</author></item><item><title>Bobik — 1 indicators</title><link>https://samithota.com/iocs/bobik/</link><guid isPermaLink="true">https://samithota.com/iocs/bobik/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with Bobik.</description><pubDate>Wed, 29 Jul 2026 18:41:24 GMT</pubDate><category>ioc</category><category>bobik</category><author>Samit Hota</author></item><item><title>Lynx — 15 indicators</title><link>https://samithota.com/iocs/lynx/</link><guid isPermaLink="true">https://samithota.com/iocs/lynx/</guid><description>15 indicators of compromise (IPs, domains, hashes, URLs) associated with Lynx.</description><pubDate>Tue, 28 Jul 2026 18:57:13 GMT</pubDate><category>ioc</category><category>lynx</category><author>Samit Hota</author></item><item><title>XMRIG — 3 indicators</title><link>https://samithota.com/iocs/xmrig/</link><guid isPermaLink="true">https://samithota.com/iocs/xmrig/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with XMRIG.</description><pubDate>Tue, 28 Jul 2026 18:57:13 GMT</pubDate><category>ioc</category><category>xmrig</category><author>Samit Hota</author></item><item><title>EtherRAT — 4 indicators</title><link>https://samithota.com/iocs/etherrat/</link><guid isPermaLink="true">https://samithota.com/iocs/etherrat/</guid><description>4 indicators of compromise (IPs, domains, hashes, URLs) associated with EtherRAT.</description><pubDate>Tue, 28 Jul 2026 18:57:13 GMT</pubDate><category>ioc</category><category>etherrat</category><author>Samit Hota</author></item><item><title>AstarionRAT — 1 indicators</title><link>https://samithota.com/iocs/astarionrat/</link><guid isPermaLink="true">https://samithota.com/iocs/astarionrat/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with AstarionRAT.</description><pubDate>Tue, 28 Jul 2026 10:14:56 GMT</pubDate><category>ioc</category><category>astarionrat</category><author>Samit Hota</author></item><item><title>Supper — 3 indicators</title><link>https://samithota.com/iocs/supper/</link><guid isPermaLink="true">https://samithota.com/iocs/supper/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Supper.</description><pubDate>Tue, 28 Jul 2026 05:33:18 GMT</pubDate><category>ioc</category><category>supper</category><author>Samit Hota</author></item><item><title>Prometei — 18 indicators</title><link>https://samithota.com/iocs/prometei/</link><guid isPermaLink="true">https://samithota.com/iocs/prometei/</guid><description>18 indicators of compromise (IPs, domains, hashes, URLs) associated with Prometei.</description><pubDate>Tue, 28 Jul 2026 05:33:18 GMT</pubDate><category>ioc</category><category>prometei</category><author>Samit Hota</author></item><item><title>OrBit — 3 indicators</title><link>https://samithota.com/iocs/orbit/</link><guid isPermaLink="true">https://samithota.com/iocs/orbit/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with OrBit.</description><pubDate>Tue, 28 Jul 2026 05:33:18 GMT</pubDate><category>ioc</category><category>orbit</category><author>Samit Hota</author></item><item><title>VIP Keylogger — 3 indicators</title><link>https://samithota.com/iocs/vip-keylogger/</link><guid isPermaLink="true">https://samithota.com/iocs/vip-keylogger/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with VIP Keylogger.</description><pubDate>Mon, 27 Jul 2026 15:31:13 GMT</pubDate><category>ioc</category><category>vip-keylogger</category><author>Samit Hota</author></item><item><title>BluStealer — 3 indicators</title><link>https://samithota.com/iocs/blustealer/</link><guid isPermaLink="true">https://samithota.com/iocs/blustealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with BluStealer.</description><pubDate>Mon, 27 Jul 2026 15:31:13 GMT</pubDate><category>ioc</category><category>blustealer</category><author>Samit Hota</author></item><item><title>Luca Stealer — 3 indicators</title><link>https://samithota.com/iocs/luca-stealer/</link><guid isPermaLink="true">https://samithota.com/iocs/luca-stealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Luca Stealer.</description><pubDate>Mon, 27 Jul 2026 15:31:13 GMT</pubDate><category>ioc</category><category>luca-stealer</category><author>Samit Hota</author></item><item><title>Elevator — 18 indicators</title><link>https://samithota.com/iocs/elevator/</link><guid isPermaLink="true">https://samithota.com/iocs/elevator/</guid><description>18 indicators of compromise (IPs, domains, hashes, URLs) associated with Elevator.</description><pubDate>Mon, 27 Jul 2026 15:31:13 GMT</pubDate><category>ioc</category><category>elevator</category><author>Samit Hota</author></item><item><title>RevStealer — 50 indicators</title><link>https://samithota.com/iocs/revstealer/</link><guid isPermaLink="true">https://samithota.com/iocs/revstealer/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with RevStealer.</description><pubDate>Mon, 27 Jul 2026 15:31:13 GMT</pubDate><category>ioc</category><category>revstealer</category><author>Samit Hota</author></item><item><title>SectopRAT — 2 indicators</title><link>https://samithota.com/iocs/sectoprat/</link><guid isPermaLink="true">https://samithota.com/iocs/sectoprat/</guid><description>2 indicators of compromise (IPs, domains, hashes, URLs) associated with SectopRAT.</description><pubDate>Mon, 27 Jul 2026 10:56:14 GMT</pubDate><category>ioc</category><category>sectoprat</category><author>Samit Hota</author></item><item><title>Dosia — 1 indicators</title><link>https://samithota.com/iocs/dosia/</link><guid isPermaLink="true">https://samithota.com/iocs/dosia/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with Dosia.</description><pubDate>Mon, 27 Jul 2026 10:56:14 GMT</pubDate><category>ioc</category><category>dosia</category><author>Samit Hota</author></item><item><title>Qilin — 4 indicators</title><link>https://samithota.com/iocs/qilin/</link><guid isPermaLink="true">https://samithota.com/iocs/qilin/</guid><description>4 indicators of compromise (IPs, domains, hashes, URLs) associated with Qilin.</description><pubDate>Mon, 27 Jul 2026 06:05:46 GMT</pubDate><category>ioc</category><category>qilin</category><author>Samit Hota</author></item><item><title>AgendaCrypt — 50 indicators</title><link>https://samithota.com/iocs/agendacrypt/</link><guid isPermaLink="true">https://samithota.com/iocs/agendacrypt/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with AgendaCrypt.</description><pubDate>Mon, 27 Jul 2026 06:05:46 GMT</pubDate><category>ioc</category><category>agendacrypt</category><author>Samit Hota</author></item><item><title>Gentlemen — 28 indicators</title><link>https://samithota.com/iocs/gentlemen/</link><guid isPermaLink="true">https://samithota.com/iocs/gentlemen/</guid><description>28 indicators of compromise (IPs, domains, hashes, URLs) associated with Gentlemen.</description><pubDate>Mon, 27 Jul 2026 06:05:46 GMT</pubDate><category>ioc</category><category>gentlemen</category><author>Samit Hota</author></item><item><title>POOLRAT — 3 indicators</title><link>https://samithota.com/iocs/poolrat/</link><guid isPermaLink="true">https://samithota.com/iocs/poolrat/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with POOLRAT.</description><pubDate>Sun, 26 Jul 2026 18:42:17 GMT</pubDate><category>ioc</category><category>poolrat</category><author>Samit Hota</author></item><item><title>Virut — 3 indicators</title><link>https://samithota.com/iocs/virut/</link><guid isPermaLink="true">https://samithota.com/iocs/virut/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Virut.</description><pubDate>Sun, 26 Jul 2026 18:42:17 GMT</pubDate><category>ioc</category><category>virut</category><author>Samit Hota</author></item><item><title>XoriumStealer — 3 indicators</title><link>https://samithota.com/iocs/xoriumstealer/</link><guid isPermaLink="true">https://samithota.com/iocs/xoriumstealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with XoriumStealer.</description><pubDate>Sun, 26 Jul 2026 09:45:52 GMT</pubDate><category>ioc</category><category>xoriumstealer</category><author>Samit Hota</author></item><item><title>Jackskid — 44 indicators</title><link>https://samithota.com/iocs/jackskid/</link><guid isPermaLink="true">https://samithota.com/iocs/jackskid/</guid><description>44 indicators of compromise (IPs, domains, hashes, URLs) associated with Jackskid.</description><pubDate>Sun, 26 Jul 2026 09:45:52 GMT</pubDate><category>ioc</category><category>jackskid</category><author>Samit Hota</author></item><item><title>RemoteX — 3 indicators</title><link>https://samithota.com/iocs/remotex/</link><guid isPermaLink="true">https://samithota.com/iocs/remotex/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with RemoteX.</description><pubDate>Sun, 26 Jul 2026 05:46:48 GMT</pubDate><category>ioc</category><category>remotex</category><author>Samit Hota</author></item><item><title>Clipper — 3 indicators</title><link>https://samithota.com/iocs/clipper/</link><guid isPermaLink="true">https://samithota.com/iocs/clipper/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Clipper.</description><pubDate>Sun, 26 Jul 2026 05:46:48 GMT</pubDate><category>ioc</category><category>clipper</category><author>Samit Hota</author></item><item><title>MaskGramStealer — 3 indicators</title><link>https://samithota.com/iocs/maskgramstealer/</link><guid isPermaLink="true">https://samithota.com/iocs/maskgramstealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with MaskGramStealer.</description><pubDate>Sun, 26 Jul 2026 05:46:48 GMT</pubDate><category>ioc</category><category>maskgramstealer</category><author>Samit Hota</author></item><item><title>MacDownloader — 1 indicators</title><link>https://samithota.com/iocs/macdownloader/</link><guid isPermaLink="true">https://samithota.com/iocs/macdownloader/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with MacDownloader.</description><pubDate>Sun, 26 Jul 2026 05:46:48 GMT</pubDate><category>ioc</category><category>macdownloader</category><author>Samit Hota</author></item><item><title>INC — 50 indicators</title><link>https://samithota.com/iocs/inc/</link><guid isPermaLink="true">https://samithota.com/iocs/inc/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with INC.</description><pubDate>Sun, 26 Jul 2026 05:46:48 GMT</pubDate><category>ioc</category><category>inc</category><author>Samit Hota</author></item><item><title>Rubeus — 1 indicators</title><link>https://samithota.com/iocs/rubeus/</link><guid isPermaLink="true">https://samithota.com/iocs/rubeus/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with Rubeus.</description><pubDate>Sat, 25 Jul 2026 14:19:12 GMT</pubDate><category>ioc</category><category>rubeus</category><author>Samit Hota</author></item><item><title>stealler — 9 indicators</title><link>https://samithota.com/iocs/stealler/</link><guid isPermaLink="true">https://samithota.com/iocs/stealler/</guid><description>9 indicators of compromise (IPs, domains, hashes, URLs) associated with stealler.</description><pubDate>Sat, 25 Jul 2026 05:30:53 GMT</pubDate><category>ioc</category><category>stealler</category><author>Samit Hota</author></item><item><title>GCleaner — 3 indicators</title><link>https://samithota.com/iocs/gcleaner/</link><guid isPermaLink="true">https://samithota.com/iocs/gcleaner/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with GCleaner.</description><pubDate>Sat, 25 Jul 2026 05:30:53 GMT</pubDate><category>ioc</category><category>gcleaner</category><author>Samit Hota</author></item><item><title>ShadowV2 — 1 indicators</title><link>https://samithota.com/iocs/shadowv2/</link><guid isPermaLink="true">https://samithota.com/iocs/shadowv2/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with ShadowV2.</description><pubDate>Sat, 25 Jul 2026 05:30:53 GMT</pubDate><category>ioc</category><category>shadowv2</category><author>Samit Hota</author></item><item><title>Eye Pyramid — 1 indicators</title><link>https://samithota.com/iocs/eye-pyramid/</link><guid isPermaLink="true">https://samithota.com/iocs/eye-pyramid/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with Eye Pyramid.</description><pubDate>Fri, 24 Jul 2026 09:59:58 GMT</pubDate><category>ioc</category><category>eye-pyramid</category><author>Samit Hota</author></item><item><title>Overlord RAT — 6 indicators</title><link>https://samithota.com/iocs/overlord-rat/</link><guid isPermaLink="true">https://samithota.com/iocs/overlord-rat/</guid><description>6 indicators of compromise (IPs, domains, hashes, URLs) associated with Overlord RAT.</description><pubDate>Fri, 24 Jul 2026 05:36:59 GMT</pubDate><category>ioc</category><category>overlord-rat</category><author>Samit Hota</author></item><item><title>ZStealer — 6 indicators</title><link>https://samithota.com/iocs/zstealer/</link><guid isPermaLink="true">https://samithota.com/iocs/zstealer/</guid><description>6 indicators of compromise (IPs, domains, hashes, URLs) associated with ZStealer.</description><pubDate>Fri, 24 Jul 2026 05:36:59 GMT</pubDate><category>ioc</category><category>zstealer</category><author>Samit Hota</author></item><item><title>MyDoom — 6 indicators</title><link>https://samithota.com/iocs/mydoom/</link><guid isPermaLink="true">https://samithota.com/iocs/mydoom/</guid><description>6 indicators of compromise (IPs, domains, hashes, URLs) associated with MyDoom.</description><pubDate>Fri, 24 Jul 2026 05:36:59 GMT</pubDate><category>ioc</category><category>mydoom</category><author>Samit Hota</author></item><item><title>GUIDLOADER — 3 indicators</title><link>https://samithota.com/iocs/guidloader/</link><guid isPermaLink="true">https://samithota.com/iocs/guidloader/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with GUIDLOADER.</description><pubDate>Thu, 23 Jul 2026 14:54:12 GMT</pubDate><category>ioc</category><category>guidloader</category><author>Samit Hota</author></item><item><title>WebMonitor RAT — 3 indicators</title><link>https://samithota.com/iocs/webmonitor-rat/</link><guid isPermaLink="true">https://samithota.com/iocs/webmonitor-rat/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with WebMonitor RAT.</description><pubDate>Thu, 23 Jul 2026 14:54:12 GMT</pubDate><category>ioc</category><category>webmonitor-rat</category><author>Samit Hota</author></item><item><title>Mozi — 50 indicators</title><link>https://samithota.com/iocs/mozi/</link><guid isPermaLink="true">https://samithota.com/iocs/mozi/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with Mozi.</description><pubDate>Thu, 23 Jul 2026 14:54:12 GMT</pubDate><category>ioc</category><category>mozi</category><author>Samit Hota</author></item><item><title>Arkei Stealer — 3 indicators</title><link>https://samithota.com/iocs/arkei-stealer/</link><guid isPermaLink="true">https://samithota.com/iocs/arkei-stealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Arkei Stealer.</description><pubDate>Thu, 23 Jul 2026 10:05:34 GMT</pubDate><category>ioc</category><category>arkei-stealer</category><author>Samit Hota</author></item><item><title>MASS Logger — 3 indicators</title><link>https://samithota.com/iocs/mass-logger/</link><guid isPermaLink="true">https://samithota.com/iocs/mass-logger/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with MASS Logger.</description><pubDate>Thu, 23 Jul 2026 10:05:34 GMT</pubDate><category>ioc</category><category>mass-logger</category><author>Samit Hota</author></item><item><title>BTMOB RAT — 2 indicators</title><link>https://samithota.com/iocs/btmob-rat/</link><guid isPermaLink="true">https://samithota.com/iocs/btmob-rat/</guid><description>2 indicators of compromise (IPs, domains, hashes, URLs) associated with BTMOB RAT.</description><pubDate>Thu, 23 Jul 2026 10:05:34 GMT</pubDate><category>ioc</category><category>btmob-rat</category><author>Samit Hota</author></item><item><title>Empire Downloader — 1 indicators</title><link>https://samithota.com/iocs/empire-downloader/</link><guid isPermaLink="true">https://samithota.com/iocs/empire-downloader/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with Empire Downloader.</description><pubDate>Thu, 23 Jul 2026 10:05:34 GMT</pubDate><category>ioc</category><category>empire-downloader</category><author>Samit Hota</author></item><item><title>NetSupportManager RAT — 1 indicators</title><link>https://samithota.com/iocs/netsupportmanager-rat/</link><guid isPermaLink="true">https://samithota.com/iocs/netsupportmanager-rat/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with NetSupportManager RAT.</description><pubDate>Thu, 23 Jul 2026 10:05:34 GMT</pubDate><category>ioc</category><category>netsupportmanager-rat</category><author>Samit Hota</author></item><item><title>BlackMatter — 3 indicators</title><link>https://samithota.com/iocs/blackmatter/</link><guid isPermaLink="true">https://samithota.com/iocs/blackmatter/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with BlackMatter.</description><pubDate>Thu, 23 Jul 2026 05:40:34 GMT</pubDate><category>ioc</category><category>blackmatter</category><author>Samit Hota</author></item><item><title>Lambert — 3 indicators</title><link>https://samithota.com/iocs/lambert/</link><guid isPermaLink="true">https://samithota.com/iocs/lambert/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Lambert.</description><pubDate>Thu, 23 Jul 2026 05:40:34 GMT</pubDate><category>ioc</category><category>lambert</category><author>Samit Hota</author></item><item><title>LALALA Stealer — 6 indicators</title><link>https://samithota.com/iocs/lalala-stealer/</link><guid isPermaLink="true">https://samithota.com/iocs/lalala-stealer/</guid><description>6 indicators of compromise (IPs, domains, hashes, URLs) associated with LALALA Stealer.</description><pubDate>Thu, 23 Jul 2026 05:40:34 GMT</pubDate><category>ioc</category><category>lalala-stealer</category><author>Samit Hota</author></item><item><title>NetWire RC — 6 indicators</title><link>https://samithota.com/iocs/netwire-rc/</link><guid isPermaLink="true">https://samithota.com/iocs/netwire-rc/</guid><description>6 indicators of compromise (IPs, domains, hashes, URLs) associated with NetWire RC.</description><pubDate>Thu, 23 Jul 2026 05:40:34 GMT</pubDate><category>ioc</category><category>netwire-rc</category><author>Samit Hota</author></item><item><title>RN Stealer — 3 indicators</title><link>https://samithota.com/iocs/rn-stealer/</link><guid isPermaLink="true">https://samithota.com/iocs/rn-stealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with RN Stealer.</description><pubDate>Thu, 23 Jul 2026 05:40:34 GMT</pubDate><category>ioc</category><category>rn-stealer</category><author>Samit Hota</author></item><item><title>Godzilla Webshell — 1 indicators</title><link>https://samithota.com/iocs/godzilla-webshell/</link><guid isPermaLink="true">https://samithota.com/iocs/godzilla-webshell/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with Godzilla Webshell.</description><pubDate>Wed, 22 Jul 2026 18:47:36 GMT</pubDate><category>ioc</category><category>godzilla-webshell</category><author>Samit Hota</author></item><item><title>SVCStealer — 3 indicators</title><link>https://samithota.com/iocs/svcstealer/</link><guid isPermaLink="true">https://samithota.com/iocs/svcstealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with SVCStealer.</description><pubDate>Wed, 22 Jul 2026 14:47:40 GMT</pubDate><category>ioc</category><category>svcstealer</category><author>Samit Hota</author></item><item><title>FaceStealer — 3 indicators</title><link>https://samithota.com/iocs/facestealer/</link><guid isPermaLink="true">https://samithota.com/iocs/facestealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with FaceStealer.</description><pubDate>Wed, 22 Jul 2026 10:07:09 GMT</pubDate><category>ioc</category><category>facestealer</category><author>Samit Hota</author></item><item><title>Creal Stealer — 3 indicators</title><link>https://samithota.com/iocs/creal-stealer/</link><guid isPermaLink="true">https://samithota.com/iocs/creal-stealer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Creal Stealer.</description><pubDate>Wed, 22 Jul 2026 10:07:09 GMT</pubDate><category>ioc</category><category>creal-stealer</category><author>Samit Hota</author></item><item><title>TonRAT — 1 indicators</title><link>https://samithota.com/iocs/tonrat/</link><guid isPermaLink="true">https://samithota.com/iocs/tonrat/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with TonRAT.</description><pubDate>Wed, 22 Jul 2026 10:07:09 GMT</pubDate><category>ioc</category><category>tonrat</category><author>Samit Hota</author></item><item><title>SmokeLoader — 1 indicators</title><link>https://samithota.com/iocs/smokeloader/</link><guid isPermaLink="true">https://samithota.com/iocs/smokeloader/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with SmokeLoader.</description><pubDate>Wed, 22 Jul 2026 10:07:09 GMT</pubDate><category>ioc</category><category>smokeloader</category><author>Samit Hota</author></item><item><title>Coinminer — 3 indicators</title><link>https://samithota.com/iocs/coinminer/</link><guid isPermaLink="true">https://samithota.com/iocs/coinminer/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Coinminer.</description><pubDate>Wed, 22 Jul 2026 05:35:39 GMT</pubDate><category>ioc</category><category>coinminer</category><author>Samit Hota</author></item><item><title>Latrodectus — 37 indicators</title><link>https://samithota.com/iocs/latrodectus/</link><guid isPermaLink="true">https://samithota.com/iocs/latrodectus/</guid><description>37 indicators of compromise (IPs, domains, hashes, URLs) associated with Latrodectus.</description><pubDate>Wed, 22 Jul 2026 05:35:39 GMT</pubDate><category>ioc</category><category>latrodectus</category><author>Samit Hota</author></item><item><title>AdWind — 1 indicators</title><link>https://samithota.com/iocs/adwind/</link><guid isPermaLink="true">https://samithota.com/iocs/adwind/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with AdWind.</description><pubDate>Wed, 22 Jul 2026 05:35:39 GMT</pubDate><category>ioc</category><category>adwind</category><author>Samit Hota</author></item><item><title>N-W0rm — 2 indicators</title><link>https://samithota.com/iocs/n-w0rm/</link><guid isPermaLink="true">https://samithota.com/iocs/n-w0rm/</guid><description>2 indicators of compromise (IPs, domains, hashes, URLs) associated with N-W0rm.</description><pubDate>Wed, 22 Jul 2026 05:35:39 GMT</pubDate><category>ioc</category><category>n-w0rm</category><author>Samit Hota</author></item><item><title>RatonRAT — 1 indicators</title><link>https://samithota.com/iocs/ratonrat/</link><guid isPermaLink="true">https://samithota.com/iocs/ratonrat/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with RatonRAT.</description><pubDate>Wed, 22 Jul 2026 05:35:39 GMT</pubDate><category>ioc</category><category>ratonrat</category><author>Samit Hota</author></item><item><title>AMOS — 1 indicators</title><link>https://samithota.com/iocs/amos/</link><guid isPermaLink="true">https://samithota.com/iocs/amos/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with AMOS.</description><pubDate>Tue, 21 Jul 2026 18:54:40 GMT</pubDate><category>ioc</category><category>amos</category><author>Samit Hota</author></item><item><title>InvisibleFerret — 16 indicators</title><link>https://samithota.com/iocs/invisibleferret/</link><guid isPermaLink="true">https://samithota.com/iocs/invisibleferret/</guid><description>16 indicators of compromise (IPs, domains, hashes, URLs) associated with InvisibleFerret.</description><pubDate>Tue, 21 Jul 2026 18:54:40 GMT</pubDate><category>ioc</category><category>invisibleferret</category><author>Samit Hota</author></item><item><title>MetaStealer — 50 indicators</title><link>https://samithota.com/iocs/metastealer/</link><guid isPermaLink="true">https://samithota.com/iocs/metastealer/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with MetaStealer.</description><pubDate>Tue, 21 Jul 2026 18:54:40 GMT</pubDate><category>ioc</category><category>metastealer</category><author>Samit Hota</author></item><item><title>DarkTortilla — 3 indicators</title><link>https://samithota.com/iocs/darktortilla/</link><guid isPermaLink="true">https://samithota.com/iocs/darktortilla/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with DarkTortilla.</description><pubDate>Tue, 21 Jul 2026 18:54:40 GMT</pubDate><category>ioc</category><category>darktortilla</category><author>Samit Hota</author></item><item><title>PrivateLoader — 3 indicators</title><link>https://samithota.com/iocs/privateloader/</link><guid isPermaLink="true">https://samithota.com/iocs/privateloader/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with PrivateLoader.</description><pubDate>Tue, 21 Jul 2026 18:54:40 GMT</pubDate><category>ioc</category><category>privateloader</category><author>Samit Hota</author></item><item><title>KrakenKeylogger — 6 indicators</title><link>https://samithota.com/iocs/krakenkeylogger/</link><guid isPermaLink="true">https://samithota.com/iocs/krakenkeylogger/</guid><description>6 indicators of compromise (IPs, domains, hashes, URLs) associated with KrakenKeylogger.</description><pubDate>Tue, 21 Jul 2026 14:48:39 GMT</pubDate><category>ioc</category><category>krakenkeylogger</category><author>Samit Hota</author></item><item><title>Socks5Systemz — 3 indicators</title><link>https://samithota.com/iocs/socks5systemz/</link><guid isPermaLink="true">https://samithota.com/iocs/socks5systemz/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Socks5Systemz.</description><pubDate>Tue, 21 Jul 2026 14:48:39 GMT</pubDate><category>ioc</category><category>socks5systemz</category><author>Samit Hota</author></item><item><title>Bashlite — 3 indicators</title><link>https://samithota.com/iocs/bashlite/</link><guid isPermaLink="true">https://samithota.com/iocs/bashlite/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Bashlite.</description><pubDate>Tue, 21 Jul 2026 14:48:39 GMT</pubDate><category>ioc</category><category>bashlite</category><author>Samit Hota</author></item><item><title>STRRAT — 1 indicators</title><link>https://samithota.com/iocs/strrat/</link><guid isPermaLink="true">https://samithota.com/iocs/strrat/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with STRRAT.</description><pubDate>Tue, 21 Jul 2026 14:48:39 GMT</pubDate><category>ioc</category><category>strrat</category><author>Samit Hota</author></item><item><title>Remus — 8 indicators</title><link>https://samithota.com/iocs/remus/</link><guid isPermaLink="true">https://samithota.com/iocs/remus/</guid><description>8 indicators of compromise (IPs, domains, hashes, URLs) associated with Remus.</description><pubDate>Tue, 21 Jul 2026 14:48:39 GMT</pubDate><category>ioc</category><category>remus</category><author>Samit Hota</author></item><item><title>PureLogs Stealer — 6 indicators</title><link>https://samithota.com/iocs/purelogs-stealer/</link><guid isPermaLink="true">https://samithota.com/iocs/purelogs-stealer/</guid><description>6 indicators of compromise (IPs, domains, hashes, URLs) associated with PureLogs Stealer.</description><pubDate>Tue, 21 Jul 2026 10:08:14 GMT</pubDate><category>ioc</category><category>purelogs-stealer</category><author>Samit Hota</author></item><item><title>Sliver — 2 indicators</title><link>https://samithota.com/iocs/sliver/</link><guid isPermaLink="true">https://samithota.com/iocs/sliver/</guid><description>2 indicators of compromise (IPs, domains, hashes, URLs) associated with Sliver.</description><pubDate>Tue, 21 Jul 2026 10:08:14 GMT</pubDate><category>ioc</category><category>sliver</category><author>Samit Hota</author></item><item><title>PureRAT — 26 indicators</title><link>https://samithota.com/iocs/purerat/</link><guid isPermaLink="true">https://samithota.com/iocs/purerat/</guid><description>26 indicators of compromise (IPs, domains, hashes, URLs) associated with PureRAT.</description><pubDate>Tue, 21 Jul 2026 10:08:14 GMT</pubDate><category>ioc</category><category>purerat</category><author>Samit Hota</author></item><item><title>RemCom — 1 indicators</title><link>https://samithota.com/iocs/remcom/</link><guid isPermaLink="true">https://samithota.com/iocs/remcom/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with RemCom.</description><pubDate>Tue, 21 Jul 2026 10:08:14 GMT</pubDate><category>ioc</category><category>remcom</category><author>Samit Hota</author></item><item><title>VShell — 30 indicators</title><link>https://samithota.com/iocs/vshell/</link><guid isPermaLink="true">https://samithota.com/iocs/vshell/</guid><description>30 indicators of compromise (IPs, domains, hashes, URLs) associated with VShell.</description><pubDate>Tue, 21 Jul 2026 10:08:14 GMT</pubDate><category>ioc</category><category>vshell</category><author>Samit Hota</author></item><item><title>WannaCryptor — 27 indicators</title><link>https://samithota.com/iocs/wannacryptor/</link><guid isPermaLink="true">https://samithota.com/iocs/wannacryptor/</guid><description>27 indicators of compromise (IPs, domains, hashes, URLs) associated with WannaCryptor.</description><pubDate>Tue, 21 Jul 2026 05:37:08 GMT</pubDate><category>ioc</category><category>wannacryptor</category><author>Samit Hota</author></item><item><title>DeimosC2 — 2 indicators</title><link>https://samithota.com/iocs/deimosc2/</link><guid isPermaLink="true">https://samithota.com/iocs/deimosc2/</guid><description>2 indicators of compromise (IPs, domains, hashes, URLs) associated with DeimosC2.</description><pubDate>Tue, 21 Jul 2026 05:37:08 GMT</pubDate><category>ioc</category><category>deimosc2</category><author>Samit Hota</author></item><item><title>Tsundere — 1 indicators</title><link>https://samithota.com/iocs/tsundere/</link><guid isPermaLink="true">https://samithota.com/iocs/tsundere/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with Tsundere.</description><pubDate>Tue, 21 Jul 2026 05:37:08 GMT</pubDate><category>ioc</category><category>tsundere</category><author>Samit Hota</author></item><item><title>DanaBot — 1 indicators</title><link>https://samithota.com/iocs/danabot/</link><guid isPermaLink="true">https://samithota.com/iocs/danabot/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with DanaBot.</description><pubDate>Tue, 21 Jul 2026 05:37:08 GMT</pubDate><category>ioc</category><category>danabot</category><author>Samit Hota</author></item><item><title>MintsLoader — 9 indicators</title><link>https://samithota.com/iocs/mintsloader/</link><guid isPermaLink="true">https://samithota.com/iocs/mintsloader/</guid><description>9 indicators of compromise (IPs, domains, hashes, URLs) associated with MintsLoader.</description><pubDate>Tue, 21 Jul 2026 05:37:08 GMT</pubDate><category>ioc</category><category>mintsloader</category><author>Samit Hota</author></item><item><title>Phantom Stealer — 14 indicators</title><link>https://samithota.com/iocs/phantom-stealer/</link><guid isPermaLink="true">https://samithota.com/iocs/phantom-stealer/</guid><description>14 indicators of compromise (IPs, domains, hashes, URLs) associated with Phantom Stealer.</description><pubDate>Mon, 20 Jul 2026 19:16:37 GMT</pubDate><category>ioc</category><category>phantom-stealer</category><author>Samit Hota</author></item><item><title>CrossRAT — 9 indicators</title><link>https://samithota.com/iocs/crossrat/</link><guid isPermaLink="true">https://samithota.com/iocs/crossrat/</guid><description>9 indicators of compromise (IPs, domains, hashes, URLs) associated with CrossRAT.</description><pubDate>Mon, 20 Jul 2026 19:16:37 GMT</pubDate><category>ioc</category><category>crossrat</category><author>Samit Hota</author></item><item><title>NjRAT — 8 indicators</title><link>https://samithota.com/iocs/njrat/</link><guid isPermaLink="true">https://samithota.com/iocs/njrat/</guid><description>8 indicators of compromise (IPs, domains, hashes, URLs) associated with NjRAT.</description><pubDate>Mon, 20 Jul 2026 19:16:37 GMT</pubDate><category>ioc</category><category>njrat</category><author>Samit Hota</author></item><item><title>Agent Tesla — 50 indicators</title><link>https://samithota.com/iocs/agent-tesla/</link><guid isPermaLink="true">https://samithota.com/iocs/agent-tesla/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with Agent Tesla.</description><pubDate>Mon, 20 Jul 2026 19:16:37 GMT</pubDate><category>ioc</category><category>agent-tesla</category><author>Samit Hota</author></item><item><title>Pony — 1 indicators</title><link>https://samithota.com/iocs/pony/</link><guid isPermaLink="true">https://samithota.com/iocs/pony/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with Pony.</description><pubDate>Mon, 20 Jul 2026 19:16:37 GMT</pubDate><category>ioc</category><category>pony</category><author>Samit Hota</author></item><item><title>Formbook — 15 indicators</title><link>https://samithota.com/iocs/formbook/</link><guid isPermaLink="true">https://samithota.com/iocs/formbook/</guid><description>15 indicators of compromise (IPs, domains, hashes, URLs) associated with Formbook.</description><pubDate>Mon, 20 Jul 2026 14:57:41 GMT</pubDate><category>ioc</category><category>formbook</category><author>Samit Hota</author></item><item><title>Tofsee — 3 indicators</title><link>https://samithota.com/iocs/tofsee/</link><guid isPermaLink="true">https://samithota.com/iocs/tofsee/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Tofsee.</description><pubDate>Mon, 20 Jul 2026 14:57:41 GMT</pubDate><category>ioc</category><category>tofsee</category><author>Samit Hota</author></item><item><title>Rhadamanthys — 3 indicators</title><link>https://samithota.com/iocs/rhadamanthys/</link><guid isPermaLink="true">https://samithota.com/iocs/rhadamanthys/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with Rhadamanthys.</description><pubDate>Mon, 20 Jul 2026 14:57:41 GMT</pubDate><category>ioc</category><category>rhadamanthys</category><author>Samit Hota</author></item><item><title>XWorm — 17 indicators</title><link>https://samithota.com/iocs/xworm/</link><guid isPermaLink="true">https://samithota.com/iocs/xworm/</guid><description>17 indicators of compromise (IPs, domains, hashes, URLs) associated with XWorm.</description><pubDate>Mon, 20 Jul 2026 14:57:41 GMT</pubDate><category>ioc</category><category>xworm</category><author>Samit Hota</author></item><item><title>SmartApeSG — 41 indicators</title><link>https://samithota.com/iocs/smartapesg/</link><guid isPermaLink="true">https://samithota.com/iocs/smartapesg/</guid><description>41 indicators of compromise (IPs, domains, hashes, URLs) associated with SmartApeSG.</description><pubDate>Mon, 20 Jul 2026 14:57:41 GMT</pubDate><category>ioc</category><category>smartapesg</category><author>Samit Hota</author></item><item><title>magecart — 4 indicators</title><link>https://samithota.com/iocs/magecart/</link><guid isPermaLink="true">https://samithota.com/iocs/magecart/</guid><description>4 indicators of compromise (IPs, domains, hashes, URLs) associated with magecart.</description><pubDate>Mon, 20 Jul 2026 10:30:22 GMT</pubDate><category>ioc</category><category>magecart</category><author>Samit Hota</author></item><item><title>Chaos — 2 indicators</title><link>https://samithota.com/iocs/chaos/</link><guid isPermaLink="true">https://samithota.com/iocs/chaos/</guid><description>2 indicators of compromise (IPs, domains, hashes, URLs) associated with Chaos.</description><pubDate>Mon, 20 Jul 2026 10:30:22 GMT</pubDate><category>ioc</category><category>chaos</category><author>Samit Hota</author></item><item><title>Ave Maria — 6 indicators</title><link>https://samithota.com/iocs/ave-maria/</link><guid isPermaLink="true">https://samithota.com/iocs/ave-maria/</guid><description>6 indicators of compromise (IPs, domains, hashes, URLs) associated with Ave Maria.</description><pubDate>Mon, 20 Jul 2026 10:30:22 GMT</pubDate><category>ioc</category><category>ave-maria</category><author>Samit Hota</author></item><item><title>Evilginx — 16 indicators</title><link>https://samithota.com/iocs/evilginx/</link><guid isPermaLink="true">https://samithota.com/iocs/evilginx/</guid><description>16 indicators of compromise (IPs, domains, hashes, URLs) associated with Evilginx.</description><pubDate>Mon, 20 Jul 2026 10:30:22 GMT</pubDate><category>ioc</category><category>evilginx</category><author>Samit Hota</author></item><item><title>Kimwolf — 11 indicators</title><link>https://samithota.com/iocs/kimwolf/</link><guid isPermaLink="true">https://samithota.com/iocs/kimwolf/</guid><description>11 indicators of compromise (IPs, domains, hashes, URLs) associated with Kimwolf.</description><pubDate>Mon, 20 Jul 2026 10:30:22 GMT</pubDate><category>ioc</category><category>kimwolf</category><author>Samit Hota</author></item><item><title>Unidentified macOS 001 (UnionCryptoTrader) — 1 indicators</title><link>https://samithota.com/iocs/unidentified-macos-001-unioncryptotrader/</link><guid isPermaLink="true">https://samithota.com/iocs/unidentified-macos-001-unioncryptotrader/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with Unidentified macOS 001 (UnionCryptoTrader).</description><pubDate>Mon, 20 Jul 2026 05:55:47 GMT</pubDate><category>ioc</category><category>unidentified-macos-001-unioncryptotrader</category><author>Samit Hota</author></item><item><title>Havoc — 25 indicators</title><link>https://samithota.com/iocs/havoc/</link><guid isPermaLink="true">https://samithota.com/iocs/havoc/</guid><description>25 indicators of compromise (IPs, domains, hashes, URLs) associated with Havoc.</description><pubDate>Mon, 20 Jul 2026 05:55:47 GMT</pubDate><category>ioc</category><category>havoc</category><author>Samit Hota</author></item><item><title>Amadey — 8 indicators</title><link>https://samithota.com/iocs/amadey/</link><guid isPermaLink="true">https://samithota.com/iocs/amadey/</guid><description>8 indicators of compromise (IPs, domains, hashes, URLs) associated with Amadey.</description><pubDate>Mon, 20 Jul 2026 05:55:47 GMT</pubDate><category>ioc</category><category>amadey</category><author>Samit Hota</author></item><item><title>Phorpiex — 15 indicators</title><link>https://samithota.com/iocs/phorpiex/</link><guid isPermaLink="true">https://samithota.com/iocs/phorpiex/</guid><description>15 indicators of compromise (IPs, domains, hashes, URLs) associated with Phorpiex.</description><pubDate>Mon, 20 Jul 2026 05:55:47 GMT</pubDate><category>ioc</category><category>phorpiex</category><author>Samit Hota</author></item><item><title>RedLine Stealer — 12 indicators</title><link>https://samithota.com/iocs/redline-stealer/</link><guid isPermaLink="true">https://samithota.com/iocs/redline-stealer/</guid><description>12 indicators of compromise (IPs, domains, hashes, URLs) associated with RedLine Stealer.</description><pubDate>Mon, 20 Jul 2026 05:55:47 GMT</pubDate><category>ioc</category><category>redline-stealer</category><author>Samit Hota</author></item><item><title>Brute Ratel C4 — 1 indicators</title><link>https://samithota.com/iocs/brute-ratel-c4/</link><guid isPermaLink="true">https://samithota.com/iocs/brute-ratel-c4/</guid><description>1 indicator of compromise (IPs, domains, hashes, URLs) associated with Brute Ratel C4.</description><pubDate>Sun, 19 Jul 2026 18:38:02 GMT</pubDate><category>ioc</category><category>brute-ratel-c4</category><author>Samit Hota</author></item><item><title>Meterpreter — 4 indicators</title><link>https://samithota.com/iocs/meterpreter/</link><guid isPermaLink="true">https://samithota.com/iocs/meterpreter/</guid><description>4 indicators of compromise (IPs, domains, hashes, URLs) associated with Meterpreter.</description><pubDate>Sun, 19 Jul 2026 18:38:02 GMT</pubDate><category>ioc</category><category>meterpreter</category><author>Samit Hota</author></item><item><title>Quasar RAT — 5 indicators</title><link>https://samithota.com/iocs/quasar-rat/</link><guid isPermaLink="true">https://samithota.com/iocs/quasar-rat/</guid><description>5 indicators of compromise (IPs, domains, hashes, URLs) associated with Quasar RAT.</description><pubDate>Sun, 19 Jul 2026 18:38:02 GMT</pubDate><category>ioc</category><category>quasar-rat</category><author>Samit Hota</author></item><item><title>KongTuke — 50 indicators</title><link>https://samithota.com/iocs/kongtuke/</link><guid isPermaLink="true">https://samithota.com/iocs/kongtuke/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with KongTuke.</description><pubDate>Sun, 19 Jul 2026 18:38:02 GMT</pubDate><category>ioc</category><category>kongtuke</category><author>Samit Hota</author></item><item><title>5.t Downloader — 3 indicators</title><link>https://samithota.com/iocs/5-t-downloader/</link><guid isPermaLink="true">https://samithota.com/iocs/5-t-downloader/</guid><description>3 indicators of compromise (IPs, domains, hashes, URLs) associated with 5.t Downloader.</description><pubDate>Sun, 19 Jul 2026 18:38:02 GMT</pubDate><category>ioc</category><category>5-t-downloader</category><author>Samit Hota</author></item><item><title>FAKEUPDATES — 8 indicators</title><link>https://samithota.com/iocs/fakeupdates/</link><guid isPermaLink="true">https://samithota.com/iocs/fakeupdates/</guid><description>8 indicators of compromise (IPs, domains, hashes, URLs) associated with FAKEUPDATES.</description><pubDate>Sun, 19 Jul 2026 14:13:19 GMT</pubDate><category>ioc</category><category>fakeupdates</category><author>Samit Hota</author></item><item><title>Vjw0rm — 19 indicators</title><link>https://samithota.com/iocs/vjw0rm/</link><guid isPermaLink="true">https://samithota.com/iocs/vjw0rm/</guid><description>19 indicators of compromise (IPs, domains, hashes, URLs) associated with Vjw0rm.</description><pubDate>Sun, 19 Jul 2026 14:13:19 GMT</pubDate><category>ioc</category><category>vjw0rm</category><author>Samit Hota</author></item><item><title>Tsunami — 2 indicators</title><link>https://samithota.com/iocs/tsunami/</link><guid isPermaLink="true">https://samithota.com/iocs/tsunami/</guid><description>2 indicators of compromise (IPs, domains, hashes, URLs) associated with Tsunami.</description><pubDate>Sun, 19 Jul 2026 14:13:19 GMT</pubDate><category>ioc</category><category>tsunami</category><author>Samit Hota</author></item><item><title>AdaptixC2 — 50 indicators</title><link>https://samithota.com/iocs/adaptixc2/</link><guid isPermaLink="true">https://samithota.com/iocs/adaptixc2/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with AdaptixC2.</description><pubDate>Sun, 19 Jul 2026 14:13:19 GMT</pubDate><category>ioc</category><category>adaptixc2</category><author>Samit Hota</author></item><item><title>IClickFix — 5 indicators</title><link>https://samithota.com/iocs/iclickfix/</link><guid isPermaLink="true">https://samithota.com/iocs/iclickfix/</guid><description>5 indicators of compromise (IPs, domains, hashes, URLs) associated with IClickFix.</description><pubDate>Sun, 19 Jul 2026 14:13:19 GMT</pubDate><category>ioc</category><category>iclickfix</category><author>Samit Hota</author></item><item><title>Nanocore RAT — 6 indicators</title><link>https://samithota.com/iocs/nanocore-rat/</link><guid isPermaLink="true">https://samithota.com/iocs/nanocore-rat/</guid><description>6 indicators of compromise (IPs, domains, hashes, URLs) associated with Nanocore RAT.</description><pubDate>Sun, 19 Jul 2026 09:31:03 GMT</pubDate><category>ioc</category><category>nanocore-rat</category><author>Samit Hota</author></item><item><title>ValleyRAT — 44 indicators</title><link>https://samithota.com/iocs/valleyrat/</link><guid isPermaLink="true">https://samithota.com/iocs/valleyrat/</guid><description>44 indicators of compromise (IPs, domains, hashes, URLs) associated with ValleyRAT.</description><pubDate>Sun, 19 Jul 2026 09:31:03 GMT</pubDate><category>ioc</category><category>valleyrat</category><author>Samit Hota</author></item><item><title>Ghost RAT — 15 indicators</title><link>https://samithota.com/iocs/ghost-rat/</link><guid isPermaLink="true">https://samithota.com/iocs/ghost-rat/</guid><description>15 indicators of compromise (IPs, domains, hashes, URLs) associated with Ghost RAT.</description><pubDate>Sun, 19 Jul 2026 09:31:03 GMT</pubDate><category>ioc</category><category>ghost-rat</category><author>Samit Hota</author></item><item><title>HijackLoader — 7 indicators</title><link>https://samithota.com/iocs/hijackloader/</link><guid isPermaLink="true">https://samithota.com/iocs/hijackloader/</guid><description>7 indicators of compromise (IPs, domains, hashes, URLs) associated with HijackLoader.</description><pubDate>Sun, 19 Jul 2026 09:31:03 GMT</pubDate><category>ioc</category><category>hijackloader</category><author>Samit Hota</author></item><item><title>SalatStealer — 21 indicators</title><link>https://samithota.com/iocs/salatstealer/</link><guid isPermaLink="true">https://samithota.com/iocs/salatstealer/</guid><description>21 indicators of compromise (IPs, domains, hashes, URLs) associated with SalatStealer.</description><pubDate>Sun, 19 Jul 2026 09:31:03 GMT</pubDate><category>ioc</category><category>salatstealer</category><author>Samit Hota</author></item><item><title>Kuiper — 50 indicators</title><link>https://samithota.com/iocs/kuiper/</link><guid isPermaLink="true">https://samithota.com/iocs/kuiper/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with Kuiper.</description><pubDate>Sun, 19 Jul 2026 07:23:02 GMT</pubDate><category>ioc</category><category>kuiper</category><author>Samit Hota</author></item><item><title>BianLian — 2 indicators</title><link>https://samithota.com/iocs/bianlian/</link><guid isPermaLink="true">https://samithota.com/iocs/bianlian/</guid><description>2 indicators of compromise (IPs, domains, hashes, URLs) associated with BianLian.</description><pubDate>Sun, 19 Jul 2026 07:23:02 GMT</pubDate><category>ioc</category><category>bianlian</category><author>Samit Hota</author></item><item><title>Venus Stealer — 50 indicators</title><link>https://samithota.com/iocs/venus-stealer/</link><guid isPermaLink="true">https://samithota.com/iocs/venus-stealer/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with Venus Stealer.</description><pubDate>Sun, 19 Jul 2026 07:23:02 GMT</pubDate><category>ioc</category><category>venus-stealer</category><author>Samit Hota</author></item><item><title>AsyncRAT — 50 indicators</title><link>https://samithota.com/iocs/asyncrat/</link><guid isPermaLink="true">https://samithota.com/iocs/asyncrat/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with AsyncRAT.</description><pubDate>Sun, 19 Jul 2026 07:23:02 GMT</pubDate><category>ioc</category><category>asyncrat</category><author>Samit Hota</author></item><item><title>ACR Stealer — 14 indicators</title><link>https://samithota.com/iocs/acr-stealer/</link><guid isPermaLink="true">https://samithota.com/iocs/acr-stealer/</guid><description>14 indicators of compromise (IPs, domains, hashes, URLs) associated with ACR Stealer.</description><pubDate>Sun, 19 Jul 2026 07:23:02 GMT</pubDate><category>ioc</category><category>acr-stealer</category><author>Samit Hota</author></item><item><title>Stealc — 21 indicators</title><link>https://samithota.com/iocs/stealc/</link><guid isPermaLink="true">https://samithota.com/iocs/stealc/</guid><description>21 indicators of compromise (IPs, domains, hashes, URLs) associated with Stealc.</description><pubDate>Sun, 19 Jul 2026 07:10:31 GMT</pubDate><category>ioc</category><category>stealc</category><author>Samit Hota</author></item><item><title>DCRat — 21 indicators</title><link>https://samithota.com/iocs/dcrat/</link><guid isPermaLink="true">https://samithota.com/iocs/dcrat/</guid><description>21 indicators of compromise (IPs, domains, hashes, URLs) associated with DCRat.</description><pubDate>Sun, 19 Jul 2026 07:10:31 GMT</pubDate><category>ioc</category><category>dcrat</category><author>Samit Hota</author></item><item><title>Aisuru — 50 indicators</title><link>https://samithota.com/iocs/aisuru/</link><guid isPermaLink="true">https://samithota.com/iocs/aisuru/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with Aisuru.</description><pubDate>Sun, 19 Jul 2026 07:10:31 GMT</pubDate><category>ioc</category><category>aisuru</category><author>Samit Hota</author></item><item><title>Mirai — 48 indicators</title><link>https://samithota.com/iocs/mirai/</link><guid isPermaLink="true">https://samithota.com/iocs/mirai/</guid><description>48 indicators of compromise (IPs, domains, hashes, URLs) associated with Mirai.</description><pubDate>Sun, 19 Jul 2026 07:10:31 GMT</pubDate><category>ioc</category><category>mirai</category><author>Samit Hota</author></item><item><title>Remcos — 50 indicators</title><link>https://samithota.com/iocs/remcos/</link><guid isPermaLink="true">https://samithota.com/iocs/remcos/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with Remcos.</description><pubDate>Sun, 19 Jul 2026 07:10:31 GMT</pubDate><category>ioc</category><category>remcos</category><author>Samit Hota</author></item><item><title>Vidar — 50 indicators</title><link>https://samithota.com/iocs/vidar/</link><guid isPermaLink="true">https://samithota.com/iocs/vidar/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with Vidar.</description><pubDate>Sun, 19 Jul 2026 07:08:54 GMT</pubDate><category>ioc</category><category>vidar</category><author>Samit Hota</author></item><item><title>Cobalt Strike — 50 indicators</title><link>https://samithota.com/iocs/cobalt-strike/</link><guid isPermaLink="true">https://samithota.com/iocs/cobalt-strike/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with Cobalt Strike.</description><pubDate>Sun, 19 Jul 2026 07:08:54 GMT</pubDate><category>ioc</category><category>cobalt-strike</category><author>Samit Hota</author></item><item><title>ClearFake — 50 indicators</title><link>https://samithota.com/iocs/clearfake/</link><guid isPermaLink="true">https://samithota.com/iocs/clearfake/</guid><description>50 indicators of compromise (IPs, domains, hashes, URLs) associated with ClearFake.</description><pubDate>Sun, 19 Jul 2026 07:08:54 GMT</pubDate><category>ioc</category><category>clearfake</category><author>Samit Hota</author></item></channel></rss>