Active IOC requests
You can request IOCs from the community and reward people who share their IOCs. Below is a list of current active IOC requests from the community.
| Date (UTC) | Request ID | Malware | IOC Type | Threat Type | Reward | Requester |
|---|---|---|---|---|---|---|
| 2026-01-03 12:21 | #443 | BTMOB RAT | sha256_hash | payload | 15 credits | @BlackSquadbatch |
| 2025-12-16 09:46 | #442 | Remcos | sha256_hash | payload | 10 credits | @PavelDib |
| 2025-12-16 03:42 | #441 | FastCash | url | botnet_cc | 50 credits | Anonymous |
| 2025-12-15 13:18 | #440 | Agent Tesla | url | botnet_cc | 10 credits | Anonymous |
| 2025-12-15 01:01 | #439 | AdoBot | domain | botnet_cc | 10 credits | Anonymous |
| 2025-12-13 03:27 | #438 | BRATA | url | botnet_cc | 10 credits | Anonymous |
| 2025-12-08 03:34 | #437 | 888 RAT | domain | cc_skimming | 10 credits | @asdokjsdjfohnasd |
| 2025-12-04 09:08 | #436 | LokiBot | ip:port | botnet_cc | 10 credits | @difr000 |
| 2025-11-26 12:01 | #435 | LockBit | url | payload_delivery | 10 credits | @kyl4nprax |
| 2025-11-26 09:16 | #434 | Abcbot | url | botnet_cc | 10 credits | @rahultayal |
| 2025-11-26 08:45 | #433 | RansomHub | ip:port | botnet_cc | 10 credits | @scusi |
| 2025-11-26 06:57 | #432 | ZStealer | domain | botnet_cc | 20 credits | @zemen |
| 2025-11-23 17:53 | #431 | HARDRAIN | url | botnet_cc | 50 credits | Anonymous |
| 2025-11-23 09:05 | #430 | Silver Sparrow | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-11-22 00:24 | #429 | TamperedChef | sha256_hash | payload | 10 credits | Anonymous |
| 2025-11-16 08:41 | #428 | AsyncRAT | domain | botnet_cc | 10 credits | @wance |
| 2025-11-13 13:44 | #427 | Triout | url | botnet_cc | 10 credits | @boyani |
| 2025-11-11 14:26 | #426 | RedLine Stealer | ip:port | botnet_cc | 10 credits | @miguelmiralles |
| 2025-11-08 07:29 | #425 | FastCash | url | botnet_cc | 10 credits | @Nardkie |
| 2025-11-05 09:17 | #424 | Vidar | domain | cc_skimming | 10 credits | Anonymous |
| 2025-11-05 08:12 | #423 | 888 RAT | url | botnet_cc | 10 credits | Anonymous |
| 2025-10-28 13:37 | #422 | UPSTYLE | ip:port | botnet_cc | 10 credits | @Noora |
| 2025-10-27 06:49 | #421 | FastCash | ip:port | botnet_cc | 10 credits | @mahin |
| 2025-10-24 18:41 | #420 | Asprox | md5_hash | payload | 10 credits | @sia |
| 2025-10-20 06:40 | #419 | 888 RAT | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-10-20 06:39 | #418 | FastCash | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-10-18 04:51 | #417 | dmsSpy | sha256_hash | payload | 10 credits | @dhirenbhardwaj |
| 2025-10-15 05:42 | #416 | DracuLoader | ip:port | botnet_cc | 10 credits | @74540362 |
| 2025-10-12 19:07 | #415 | DCRat | url | botnet_cc | 10 credits | @wowabuse |
| 2025-10-11 01:56 | #414 | Chaos | ip:port | botnet_cc | 10 credits | @chanyuwong |
| 2025-10-05 15:19 | #413 | badbazaar | domain | botnet_cc | 10 credits | @zohoori |
| 2025-10-02 06:51 | #412 | Sliver | md5_hash | payload | 10 credits | Anonymous |
| 2025-09-24 13:46 | #411 | PseudoManuscrypt | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-09-24 13:46 | #410 | ValleyRAT | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-09-16 19:12 | #409 | AndroRAT | url | botnet_cc | 10 credits | Anonymous |
| 2025-09-12 03:17 | #408 | RansomHub | md5_hash | payload | 10 credits | @umba |
| 2025-09-10 21:30 | #407 | Cobalt Strike | domain | botnet_cc | 10 credits | Anonymous |
| 2025-08-12 15:02 | #400 | XWorm | ip:port | botnet_cc | 10 credits | @Saber |
| 2022-08-10 09:25 | #113 | Cobalt Strike | domain | payload_delivery | 10 credits | Anonymous |
| 2022-08-10 09:25 | #112 | Cobalt Strike | ip:port | botnet_cc | 10 credits | Anonymous |