Active IOC requests
You can request IOCs from the community and reward people who share their IOCs. Below is a list of current active IOC requests from the community.
| Date (UTC) | Request ID | Malware | IOC Type | Threat Type | Reward | Requester |
|---|---|---|---|---|---|---|
| 2025-09-24 13:46 | #411 | PseudoManuscrypt | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-09-24 13:46 | #410 | ValleyRAT | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-09-16 19:12 | #409 | AndroRAT | url | botnet_cc | 10 credits | Anonymous |
| 2025-09-12 03:17 | #408 | RansomHub | md5_hash | payload | 10 credits | @umba |
| 2025-09-10 21:30 | #407 | Cobalt Strike | domain | botnet_cc | 10 credits | Anonymous |
| 2025-09-04 16:40 | #406 | RedLine Stealer | ip:port | botnet_cc | 10 credits | @ujin |
| 2025-09-03 13:21 | #405 | PovertyStealer | sha256_hash | payload | 10 credits | @ManuelPZ |
| 2025-09-01 16:04 | #404 | TamperedChef | url | botnet_cc | 10 credits | @P425s8a |
| 2025-08-22 10:49 | #403 | BoneSpy | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-08-21 07:48 | #402 | Aberebot | url | botnet_cc | 10 credits | @Manh |
| 2025-08-14 12:37 | #401 | Andromeda | md5_hash | payload | 10 credits | @Drake |
| 2025-08-12 15:02 | #400 | XWorm | ip:port | botnet_cc | 10 credits | @Saber |
| 2025-08-12 13:26 | #399 | XWorm | ip:port | botnet_cc | 10 credits | @akanine |
| 2025-08-11 09:14 | #398 | FastCash | md5_hash | payload | 10 credits | @medsa |
| 2025-08-11 08:41 | #397 | PureRAT | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-08-10 10:35 | #396 | TemptingCedar Spyware | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-08-08 13:29 | #395 | FastCash | domain | cc_skimming | 10 credits | @Legandrary |
| 2025-08-08 06:51 | #394 | Akira | md5_hash | payload | 10 credits | @sbksib |
| 2025-07-31 03:43 | #393 | FastCash | domain | botnet_cc | 10 credits | @NQSang |
| 2025-07-21 16:59 | #392 | PureCrypter | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-07-21 00:17 | #391 | Tofsee | url | payload_delivery | 10 credits | @aachum |
| 2025-07-18 07:09 | #390 | Backdoorit | url | payload_delivery | 10 credits | Anonymous |
| 2025-07-17 14:25 | #389 | WikiLoader | url | botnet_cc | 10 credits | @RakeshEmpirical |
| 2025-07-11 19:21 | #388 | Revenge RAT | ip:port | botnet_cc | 10 credits | @BookMan911 |
| 2025-07-11 05:46 | #387 | Agent Smith | url | botnet_cc | 10 credits | @Jihed77 |
| 2025-07-10 19:53 | #386 | Emotet | domain | payload_delivery | 10 credits | @g33k247 |
| 2025-07-06 21:47 | #385 | LockBit | domain | botnet_cc | 10 credits | @mohamed101 |
| 2025-06-28 14:04 | #384 | Kimsuky | ip:port | botnet_cc | 10 credits | @Superman |
| 2025-06-25 10:10 | #383 | Stabuniq | domain | botnet_cc | 10 credits | @Kocarnik |
| 2025-06-24 14:51 | #382 | Loki | url | botnet_cc | 10 credits | @xuantan2345 |
| 2025-06-21 06:32 | #381 | Aberebot | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-06-18 09:18 | #380 | FlyTrap | sha256_hash | payload | 50 credits | @b14ckr053 |
| 2025-06-17 10:37 | #379 | DAAM | sha256_hash | payload | 10 credits | Anonymous |
| 2025-06-17 08:51 | #378 | ValleyRAT | url | botnet_cc | 10 credits | @spider |
| 2025-06-15 17:30 | #377 | Lumma Stealer | domain | cc_skimming | 10 credits | @molzy |
| 2025-06-12 21:40 | #376 | Ratty | ip:port | botnet_cc | 10 credits | @aisaacsphd |
| 2025-06-12 15:58 | #375 | Quasar RAT | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-06-12 15:58 | #374 | XWorm | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-06-10 06:58 | #373 | PureLogs Stealer | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-06-09 07:20 | #372 | Mirai | ip:port | botnet_cc | 10 credits | @emmathecatlol |
| 2025-06-04 15:06 | #371 | PlugX | sha256_hash | payload | 10 credits | Anonymous |
| 2025-06-04 14:03 | #370 | Chaos | sha256_hash | payload | 10 credits | @Paul |
| 2025-06-03 13:45 | #369 | MoDi RAT | ip:port | botnet_cc | 10 credits | @NihatTunarli |
| 2025-05-31 15:11 | #368 | Lumma Stealer | md5_hash | payload | 10 credits | @ahmedhesham |
| 2025-05-30 09:58 | #367 | XWorm | ip:port | botnet_cc | 50 credits | Anonymous |
| 2022-08-10 09:25 | #113 | Cobalt Strike | domain | payload_delivery | 10 credits | Anonymous |
| 2022-08-10 09:25 | #112 | Cobalt Strike | ip:port | botnet_cc | 10 credits | Anonymous |