Active IOC requests
You can request IOCs from the community and reward people who share their IOCs. Below is a list of current active IOC requests from the community.
| Date (UTC) | Request ID | Malware | IOC Type | Threat Type | Reward | Requester |
|---|---|---|---|---|---|---|
| 2025-11-13 13:44 | #427 | Triout | url | botnet_cc | 10 credits | @boyani |
| 2025-11-11 14:26 | #426 | RedLine Stealer | ip:port | botnet_cc | 10 credits | @miguelmiralles |
| 2025-11-08 07:29 | #425 | FastCash | url | botnet_cc | 10 credits | @Nardkie |
| 2025-11-05 09:17 | #424 | Vidar | domain | cc_skimming | 10 credits | Anonymous |
| 2025-11-05 08:12 | #423 | 888 RAT | url | botnet_cc | 10 credits | Anonymous |
| 2025-10-28 13:37 | #422 | UPSTYLE | ip:port | botnet_cc | 10 credits | @Noora |
| 2025-10-27 06:49 | #421 | FastCash | ip:port | botnet_cc | 10 credits | @mahin |
| 2025-10-24 18:41 | #420 | Asprox | md5_hash | payload | 10 credits | @sia |
| 2025-10-20 06:40 | #419 | 888 RAT | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-10-20 06:39 | #418 | FastCash | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-10-18 04:51 | #417 | dmsSpy | sha256_hash | payload | 10 credits | @dhirenbhardwaj |
| 2025-10-15 05:42 | #416 | DracuLoader | ip:port | botnet_cc | 10 credits | @74540362 |
| 2025-10-12 19:07 | #415 | DCRat | url | botnet_cc | 10 credits | @wowabuse |
| 2025-10-11 01:56 | #414 | Chaos | ip:port | botnet_cc | 10 credits | @chanyuwong |
| 2025-10-05 15:19 | #413 | badbazaar | domain | botnet_cc | 10 credits | @zohoori |
| 2025-10-02 06:51 | #412 | Sliver | md5_hash | payload | 10 credits | Anonymous |
| 2025-09-24 13:46 | #411 | PseudoManuscrypt | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-09-24 13:46 | #410 | ValleyRAT | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-09-16 19:12 | #409 | AndroRAT | url | botnet_cc | 10 credits | Anonymous |
| 2025-09-12 03:17 | #408 | RansomHub | md5_hash | payload | 10 credits | @umba |
| 2025-09-10 21:30 | #407 | Cobalt Strike | domain | botnet_cc | 10 credits | Anonymous |
| 2025-09-04 16:40 | #406 | RedLine Stealer | ip:port | botnet_cc | 10 credits | @ujin |
| 2025-09-03 13:21 | #405 | PovertyStealer | sha256_hash | payload | 10 credits | @ManuelPZ |
| 2025-09-01 16:04 | #404 | TamperedChef | url | botnet_cc | 10 credits | @P425s8a |
| 2025-08-22 10:49 | #403 | BoneSpy | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-08-21 07:48 | #402 | Aberebot | url | botnet_cc | 10 credits | @Manh |
| 2025-08-14 12:37 | #401 | Andromeda | md5_hash | payload | 10 credits | @Drake |
| 2025-08-12 15:02 | #400 | XWorm | ip:port | botnet_cc | 10 credits | @Saber |
| 2025-08-12 13:26 | #399 | XWorm | ip:port | botnet_cc | 10 credits | @akanine1337 |
| 2025-08-11 09:14 | #398 | FastCash | md5_hash | payload | 10 credits | @medsa |
| 2025-08-11 08:41 | #397 | PureRAT | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-08-10 10:35 | #396 | TemptingCedar Spyware | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-08-08 13:29 | #395 | FastCash | domain | cc_skimming | 10 credits | @Legandrary |
| 2025-08-08 06:51 | #394 | Akira | md5_hash | payload | 10 credits | @sbksib |
| 2025-07-31 03:43 | #393 | FastCash | domain | botnet_cc | 10 credits | @NQSang |
| 2025-07-21 16:59 | #392 | PureCrypter | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-07-21 00:17 | #391 | Tofsee | url | payload_delivery | 10 credits | @aachum |
| 2025-07-18 07:09 | #390 | Backdoorit | url | payload_delivery | 10 credits | Anonymous |
| 2025-07-17 14:25 | #389 | WikiLoader | url | botnet_cc | 10 credits | @RakeshEmpirical |
| 2022-08-10 09:25 | #113 | Cobalt Strike | domain | payload_delivery | 10 credits | Anonymous |
| 2022-08-10 09:25 | #112 | Cobalt Strike | ip:port | botnet_cc | 10 credits | Anonymous |