{
    "id": "1692609",
    "ioc": "ballfrank.space",
    "ioc_type": "domain",
    "threat_type": "botnet_cc",
    "malware": "unknown_stealer",
    "malware_printable": "Unknown Stealer",
    "malware_alias": null,
    "confidence_level": "75",
    "first_seen": "2026-01-07 13:38:24 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": "https:\/\/www.jamf.com\/blog\/macsync-stealer-evolution-code-signed-swift-malware-analysis\/",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1692609",
    "tags": [
        "MacSync"
    ]
}