>samit_hota
Back to IOCs

Indicators of Compromise

24 INDICATORSwin.warden_stealer

WARDENStealer — Indicators of Compromise

Samit Hota·
#ioc#wardenstealer

Overview

Indicators of compromise associated with WARDENStealer. 24 indicators listed below.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
domainpublisher99.comOctober 14, 2026100%
domainredlable3.websiteOctober 14, 2026100%
domainredlable1.websiteOctober 14, 2026100%
domainsnacky-time.clubOctober 14, 2026100%
domainskibidistealer.teamOctober 14, 2026100%
domainbobroviysmex.shopOctober 14, 202675%
domainbacktoblack7.comOctober 14, 202675%
domainhroffice.workOctober 14, 202675%
domaindiseazhjw.cloudOctober 14, 202675%
domainkonradkerz40000.workOctober 14, 202675%
domainincoming.rentOctober 14, 202675%
domainmacfilecloud8.comOctober 14, 202675%
domainluqiuid91.comOctober 14, 202675%
domainlibrary2000.comOctober 14, 202675%
domainplainhorizon.orgOctober 14, 202675%
domainnextlanding.netOctober 14, 202675%
domainrabbids-sixseven.ccOctober 14, 202675%
domainsfgiantslive.comOctober 14, 202675%
domainrocks56.comOctober 14, 202675%
domainskibidiproliv.comOctober 14, 202675%
domainskibidiclipper.pwOctober 14, 202675%
domainzalupka.websiteOctober 14, 202675%
domainwosback.ccOctober 14, 202675%
domainzxcwork.comOctober 14, 202675%

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call