Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
|
System Breach • Coinbasecartel | No | 2026-08-25T12:28:20 |
fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd.onion
|
| Initial Access | Execution | Persistence | Defense Evasion | Discovery | Exfiltration | Impact |
|---|---|---|---|---|---|---|
| Valid Accounts: Cloud Accounts | Command and Scripting Interpreter: Unix Shell | Account Manipulation: Additional Cloud Credentials | Masquerading: Match Legitimate Name or Location | Remote System Discovery | Exfiltration Over Web Service: Exfiltration to Cloud Storage | Data Encrypted for Impact |
| Replication Through Removable Media | Command and Scripting Interpreter: Python | Create Account: Local Account | Indicator Removal: Clear Windows Event Logs | File and Directory Discovery | Financial Theft | |
| External Remote Services | User Execution: Malicious File | Impair Defenses: Disable or Modify Tools | Cloud Service Dashboard | |||
| Phishing: Spearphishing Voice (Vishing) |
| Type | IOC |
|---|---|
Tox
|
58041B45371485934F798C77F2F9705DA735F28AC9EBA2A19B4C9DBAF462802B88E33CEF482A
|