| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| #trickbot #yas8 | Feb 14th, 2021 | Never | 286 | 0 | None | - |
| imperial market buyers | Jun 29th, 2020 | Never | 201 | 0 | None | - |
| 217.8.117.132 - domains | Jun 16th, 2020 | Never | 286 | 0 | None | - |
| Bankbot Anubis Target list and C2 | Jan 26th, 2019 | Never | 2,133 | 0 | None | - |
| Banking phishing threat actors | Dec 14th, 2018 | Never | 217 | 0 | None | - |
| Formbook IOC | Nov 28th, 2018 | Never | 834 | 0 | None | - |
| Onedrive phishing | Nov 8th, 2018 | Never | 225 | 0 | None | - |
| Trickbot version 1000245 : group_tag : 0813 | Aug 13th, 2018 | Never | 200 | 0 | None | - |
| Directory structure | Jul 27th, 2018 | Never | 177 | 0 | None | - |
| #phishing Domains on 37.187.93.35 | Jul 27th, 2018 | Never | 162 | 0 | None | - |
| etc/btc adresses/hashes used in phishing | Jul 14th, 2018 | Never | 236 | 0 | None | - |
| Remcos RAT and Loki panel | Jul 11th, 2018 | Never | 68 | 0 | None | - |
| 18.216.53.253 > domains | Jul 10th, 2018 | Never | 2,761 | 0 | None | - |
| Dropbox phishing sites | Jun 30th, 2018 | Never | 503 | 0 | None | - |
| Phishing site on 144.208.71.214 | Jun 24th, 2018 | Never | 203 | 0 | None | - |
| #198.54.117.200 | May 27th, 2018 | Never | 1,215 | 0 | None | - |
| IP hosting phishing and panels | May 23rd, 2018 | Never | 716 | 0 | None | - |
| PayPal phishing | Apr 7th, 2018 | Never | 132 | 0 | None | - |
| snatchloader hashes | Apr 5th, 2018 | Never | 333 | 0 | None | - |
| Hashes of LNK files | Mar 15th, 2018 | Never | 714 | 0 | None | - |
| multiple malware hashes | Mar 14th, 2018 | Never | 151 | 0 | None | - |
| Gootkit Hashes | Mar 12th, 2018 | Never | 398 | 0 | None | - |
| Malware/Botnet infrastructure serving different malware | Mar 2nd, 2018 | Never | 429 | 0 | None | - |
| RAT/Nanocore/Trojan IOCs | Feb 13th, 2018 | Never | 145 | 0 | None | - |
| Ursnif Variant Dreambot IOCs-CnC | Dec 13th, 2017 | Never | 303 | 0 | None | - |
| BadRabbit IOCs | Oct 24th, 2017 | Never | 244 | 0 | None | - |
| Necurs botnet - Locky and Trickbot | Sep 28th, 2017 | Never | 389 | 0 | None | - |
| Trickbot Config - mac1 - 1000051 | Sep 12th, 2017 | Never | 268 | 0 | None | - |
| SharePoint link to ursnif | Aug 23rd, 2017 | Never | 135 | 0 | None | - |
