Active IOC requests
You can request IOCs from the community and reward people who share their IOCs. Below is a list of current active IOC requests from the community.
| Date (UTC) | Request ID | Malware | IOC Type | Threat Type | Reward | Requester |
|---|---|---|---|---|---|---|
| 2025-10-18 04:51 | #417 | dmsSpy | sha256_hash | payload | 10 credits | @dhirenbhardwaj |
| 2025-10-15 05:42 | #416 | DracuLoader | ip:port | botnet_cc | 10 credits | @74540362 |
| 2025-10-12 19:07 | #415 | DCRat | url | botnet_cc | 10 credits | @wowabuse |
| 2025-10-11 01:56 | #414 | Chaos | ip:port | botnet_cc | 10 credits | @chanyuwong |
| 2025-10-05 15:19 | #413 | badbazaar | domain | botnet_cc | 10 credits | @zohoori |
| 2025-10-02 06:51 | #412 | Sliver | md5_hash | payload | 10 credits | Anonymous |
| 2025-09-24 13:46 | #411 | PseudoManuscrypt | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-09-24 13:46 | #410 | ValleyRAT | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-09-16 19:12 | #409 | AndroRAT | url | botnet_cc | 10 credits | Anonymous |
| 2025-09-12 03:17 | #408 | RansomHub | md5_hash | payload | 10 credits | @umba |
| 2025-09-10 21:30 | #407 | Cobalt Strike | domain | botnet_cc | 10 credits | Anonymous |
| 2025-09-04 16:40 | #406 | RedLine Stealer | ip:port | botnet_cc | 10 credits | @ujin |
| 2025-09-03 13:21 | #405 | PovertyStealer | sha256_hash | payload | 10 credits | @ManuelPZ |
| 2025-09-01 16:04 | #404 | TamperedChef | url | botnet_cc | 10 credits | @P425s8a |
| 2025-08-22 10:49 | #403 | BoneSpy | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-08-21 07:48 | #402 | Aberebot | url | botnet_cc | 10 credits | @Manh |
| 2025-08-14 12:37 | #401 | Andromeda | md5_hash | payload | 10 credits | @Drake |
| 2025-08-12 15:02 | #400 | XWorm | ip:port | botnet_cc | 10 credits | @Saber |
| 2025-08-12 13:26 | #399 | XWorm | ip:port | botnet_cc | 10 credits | @akanine1337 |
| 2025-08-11 09:14 | #398 | FastCash | md5_hash | payload | 10 credits | @medsa |
| 2025-08-11 08:41 | #397 | PureRAT | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-08-10 10:35 | #396 | TemptingCedar Spyware | ip:port | botnet_cc | 10 credits | Anonymous |
| 2025-08-08 13:29 | #395 | FastCash | domain | cc_skimming | 10 credits | @Legandrary |
| 2025-08-08 06:51 | #394 | Akira | md5_hash | payload | 10 credits | @sbksib |
| 2025-07-31 03:43 | #393 | FastCash | domain | botnet_cc | 10 credits | @NQSang |
| 2025-07-21 16:59 | #392 | PureCrypter | ip:port | botnet_cc | 10 credits | @netresec |
| 2025-07-21 00:17 | #391 | Tofsee | url | payload_delivery | 10 credits | @aachum |
| 2025-07-18 07:09 | #390 | Backdoorit | url | payload_delivery | 10 credits | Anonymous |
| 2025-07-17 14:25 | #389 | WikiLoader | url | botnet_cc | 10 credits | @RakeshEmpirical |
| 2025-07-11 19:21 | #388 | Revenge RAT | ip:port | botnet_cc | 10 credits | @BookMan911 |
| 2025-07-11 05:46 | #387 | Agent Smith | url | botnet_cc | 10 credits | @Jihed77 |
| 2025-07-10 19:53 | #386 | Emotet | domain | payload_delivery | 10 credits | @g33k247 |
| 2025-07-06 21:47 | #385 | LockBit | domain | botnet_cc | 10 credits | @mohamed101 |
| 2025-06-28 14:04 | #384 | Kimsuky | ip:port | botnet_cc | 10 credits | @Superman |
| 2025-06-25 10:10 | #383 | Stabuniq | domain | botnet_cc | 10 credits | @Kocarnik |
| 2025-06-24 14:51 | #382 | Loki | url | botnet_cc | 10 credits | @xuantan2345 |
| 2025-06-21 06:32 | #381 | Aberebot | ip:port | botnet_cc | 10 credits | Anonymous |
| 2022-08-10 09:25 | #113 | Cobalt Strike | domain | payload_delivery | 10 credits | Anonymous |
| 2022-08-10 09:25 | #112 | Cobalt Strike | ip:port | botnet_cc | 10 credits | Anonymous |