{
    "id": "1807816",
    "ioc": "silent-orbit.cc",
    "ioc_type": "domain",
    "threat_type": "botnet_cc",
    "malware": "unknown",
    "malware_printable": "Unknown malware",
    "malware_alias": null,
    "confidence_level": "49",
    "first_seen": "2026-05-06 20:53:14 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": "https:\/\/www.malwarebytes.com\/blog\/threat-intel\/2026\/05\/attackers-adopt-javascript-runtime-bun-to-spread-nwhstealer",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1807816",
    "tags": [
        "NWHStealer"
    ]
}