{
    "id": "1814895",
    "ioc": "http:\/\/193.233.82.126\/upload.php",
    "ioc_type": "url",
    "threat_type": "payload_delivery",
    "malware": "win.phantom_stealer",
    "malware_printable": "Phantom Stealer",
    "malware_alias": null,
    "confidence_level": "100",
    "first_seen": "2026-05-15 12:39:39 UTC",
    "last_seen": null,
    "reporter": "anonymous",
    "reference": null,
    "threatfox_link": "https:\/\/threatfox\/ioc\/1814895",
    "tags": [
        "applescript",
        "BSC-testnet",
        "ClearFake",
        "etherhiding",
        "infostealer",
        "macOS"
    ]
}