🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain backtoblack7.com.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1964249
IOC: backtoblack7.com
IOC Type :domain
Threat Type :botnet_cc
Malware: WARDENStealer
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-10-14 05:42:02 UTC
Last seen:never
UUID:b6dd177f-c753-11f1-bd13-42010aa4000a
Reporter Daydream
Reward 5 credits from ThreatFox
Tags:stealer WARDENStealer YapStealer
Reference: https://www.gendigital.com/blog/insights/research/warden-stealer-rust-infostealer-analysis

Avatar
Daydream
Warden Stealer control-server domains as published by Gen Digital (Gen Threat Labs) on 2026-10-08 in their analysis and in github.com/gendigitalinc/ioc (WardenStealer). Reported by Gen; not verified from samples by the submitter. Filed because they were not on ThreatFox on 2026-10-13. Domains the submitter did read from samples are in a separate entry.