Active IOC requests
You can request IOCs from the community and reward people who share their IOCs. Below is a list of current active IOC requests from the community.
| Date (UTC) | Request ID | Malware | IOC Type | Threat Type | Reward | Requester |
|---|---|---|---|---|---|---|
| 2025-03-21 08:03 | #338 | TitanStealer | sha256_hash | payload | 10 credits | Anonymous |
| 2025-03-17 17:34 | #337 | Lumma Stealer | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-03-17 11:26 | #336 | SkinnyBoy | domain | botnet_cc | 10 credits | @Ker4es |
| 2025-03-17 11:26 | #335 | Sliver | domain | botnet_cc | 10 credits | @Ker4es |
| 2025-03-17 11:26 | #334 | Sliver | url | botnet_cc | 10 credits | @Ker4es |
| 2025-03-13 10:59 | #333 | MedusaLocker | sha256_hash | payload | 10 credits | @soccccc |
| 2025-03-06 06:59 | #332 | Mirai | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-03-04 08:00 | #331 | Kuiper | domain | botnet_cc | 10 credits | @xkorva03 |
| 2025-02-27 16:33 | #330 | Copybara | url | botnet_cc | 10 credits | @badwater |
| 2025-02-20 12:11 | #329 | ScareCrow | url | payload_delivery | 10 credits | @runchtokyo |
| 2025-02-19 12:39 | #328 | Cobalt Strike | ip:port | payload_delivery | 10 credits | Anonymous |
| 2025-02-17 10:49 | #327 | BADBOX | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-02-17 00:50 | #326 | LockBit | sha256_hash | payload | 10 credits | Anonymous |
| 2025-02-15 09:34 | #325 | ActionSpy | md5_hash | payload | 10 credits | Anonymous |
| 2025-02-12 10:23 | #324 | FastCash | url | payload_delivery | 10 credits | @JFK_ |
| 2025-02-07 07:57 | #323 | Lumma Stealer | domain | cc_skimming | 10 credits | @akiemkaza |
| 2025-02-07 07:39 | #322 | Vidar | domain | cc_skimming | 10 credits | @akiemkaza |
| 2025-01-31 21:17 | #321 | Lumma Stealer | domain | cc_skimming | 10 credits | Anonymous |
| 2025-01-31 16:04 | #320 | FastCash | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-01-30 14:41 | #319 | 888 RAT | sha256_hash | payload | 10 credits | Anonymous |
| 2025-01-26 21:33 | #318 | Emotet | ip:port | payload_delivery | 10 credits | @BrunoSantana |
| 2025-01-14 03:54 | #317 | AbstractEmu | md5_hash | payload | 15 credits | Anonymous |
| 2025-01-14 03:54 | #316 | AbstractEmu | ip:port | botnet_cc | 15 credits | Anonymous |
| 2025-01-14 03:53 | #315 | 888 RAT | ip:port | botnet_cc | 15 credits | @chrischang |
| 2025-01-13 23:59 | #314 | Nexus | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-01-09 15:09 | #313 | Rook | domain | botnet_cc | 10 credits | @DataSOC |
| 2025-01-08 11:03 | #312 | Yasso | ip:port | botnet_cc | 10 credits | @h0c1n3 |
| 2025-01-03 20:43 | #311 | DCRat | url | botnet_cc | 50 credits | @Folz |
| 2025-01-03 05:03 | #310 | RedLine Stealer | ip:port | botnet_cc | 10 credits | @Sreehari3011 |
| 2024-12-26 07:43 | #309 | ZXShell | sha1_hash | payload | 10 credits | Anonymous |
| 2024-12-17 06:15 | #308 | Lilith | url | botnet_cc | 10 credits | Anonymous |
| 2024-12-13 04:11 | #307 | GootLoader | ip:port | payload_delivery | 10 credits | Anonymous |
| 2024-12-12 15:16 | #306 | 888 RAT | domain | cc_skimming | 10 credits | @ziad128 |
| 2024-12-10 09:49 | #305 | FAKEUPDATES | domain | botnet_cc | 10 credits | Anonymous |
| 2024-12-06 20:40 | #304 | Remcos | ip:port | botnet_cc | 10 credits | @justromeo |
| 2024-11-28 07:42 | #303 | 888 RAT | sha256_hash | payload | 20 credits | Anonymous |
| 2024-11-27 00:06 | #302 | Unidentified 077 (Lazarus Downloader) | domain | botnet_cc | 10 credits | @seven212 |
| 2024-11-25 16:29 | #301 | Lumma Stealer | sha1_hash | payload | 10 credits | Anonymous |
| 2022-08-10 09:25 | #113 | Cobalt Strike | domain | payload_delivery | 10 credits | Anonymous |
| 2022-08-10 09:25 | #112 | Cobalt Strike | ip:port | botnet_cc | 10 credits | Anonymous |