Advanced Persistent Threats

Maltiverse APT threat intelligence feed provides IoCs related to highly skilled, sophisticated and focused Attack Groups currenty active. That includes Nation-State Sponsored APTs, Corporate-Sponsored APTs, Cybercriminal Groups, Hacktivist Groups and Terrorist Groups

Author
agomez
Created
2023-01-21 18:52:34
Last updated
2024-04-09 16:41:29
Downloads
7717021
IPv4 indicators
27
Hostname indicators
1642
URL indicators
108
Sample indicators
1586

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

megadexcargo.com.my Hostname

modified 2026-09-21 09:43:40
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

audit.checkmarx.cx Hostname

modified 2026-09-21 09:41:39
Malicious behavior (Maltiverse Threat Observatory) · teampcp (Maltiverse Threat Observatory)

xn--pz2bq8r.mois-viewer.o-r.kr Hostname

modified 2026-09-21 08:51:09
Kimsuky (ThreatFox Abuse.ch)

first.pokerstarus.kro.kr Hostname

modified 2026-09-21 08:50:50
Kimsuky (ThreatFox Abuse.ch)

ideaceramica.it Hostname

modified 2026-09-21 08:49:48
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

saspecialforces.co.za Hostname

modified 2026-09-21 08:48:29
Gallium (Maltiverse)

elccorp-net.ntc-telecomcorporation.workers.dev Hostname

modified 2026-09-21 08:48:14
SideWinder (ThreatFox Abuse.ch)

www.official-notice.click Hostname

modified 2026-09-21 08:47:59
Kimsuky (ThreatFox Abuse.ch)

queens-college.net Hostname

modified 2026-09-21 08:47:28
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

deck.31ventures.info Hostname

modified 2026-09-21 08:47:14
Lazarus Group (Maltiverse)

4success.zapto.org Hostname

modified 2026-09-21 08:46:01
TA558 (Maltiverse) · Trojan.MSIL (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition) · Trojan.Autoit (Hybrid-Analysis)

culversmenus.com Hostname

modified 2026-09-21 08:45:55
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

zacharryblogs.com Hostname

modified 2026-09-21 08:45:52
Lazarus Group (Maltiverse) · Unknown malware (ThreatFox Abuse.ch) · Malicious URL (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

officeaddons.com Hostname

modified 2026-09-21 08:45:52
Lazarus Group (Maltiverse) · Unknown malware (ThreatFox Abuse.ch) · Malicious URL (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

vendemmiavintage.com.ar Hostname

modified 2026-09-21 08:45:48
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

www.e-billing-service.autos Hostname

modified 2026-09-21 08:43:36
Kimsuky (ThreatFox Abuse.ch)

mfaantivirus.xyz Hostname

modified 2026-09-21 08:43:34
Mirage (Maltiverse) · Backdoordiplomacy (Maltiverse)

assignmentmentor.co.uk Hostname

modified 2026-09-21 08:43:27
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

hicom.com.pk Hostname

modified 2026-09-21 08:43:27
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

www.digital-post.live Hostname

modified 2026-09-21 08:43:00
Kimsuky (ThreatFox Abuse.ch)

camaralastro.pb.gov.br Hostname

modified 2026-09-21 08:42:50
Apt37 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

mail-invest-gov-pk.gwadarportt.workers.dev Hostname

modified 2026-09-21 08:40:45
SideWinder (ThreatFox Abuse.ch)

centroathenea.com Hostname

modified 2026-09-21 08:40:43
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

sbmsa.wiki Hostname

modified 2026-09-21 08:40:39
Malicious URL (Hybrid-Analysis) · Lazarus Group (Maltiverse) · Unknown malware (ThreatFox Abuse.ch) · Top Popularity Site (Cisco Umbrella)

mail.news Hostname

modified 2026-09-21 08:40:13
Nitro (Maltiverse) · Darkhotel (Maltiverse) · Ice Fog (Maltiverse) · Projectsauron (Maltiverse) · Cobalt Strike (Maltiverse)

grupoallo.com.br Hostname

modified 2026-09-21 08:38:48
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

nhl2vc.dynu.org Hostname

modified 2026-09-21 08:37:47
Kimsuky (ThreatFox Abuse.ch)

cpcpipe.org Hostname

modified 2026-09-21 08:37:23
Electrum (Maltiverse)

nchosedirect.maincert.1cooldns.com Hostname

modified 2026-09-21 08:37:22
naver phishing (Maltiverse) · Kimsuky (ThreatFox Abuse.ch)

www.k-admin-portal.quest Hostname

modified 2026-09-21 08:37:22
Kimsuky (ThreatFox Abuse.ch)

www.alarm-doc-review.site Hostname

modified 2026-09-21 08:37:11
Kimsuky (ThreatFox Abuse.ch)

jw577.co.kr Hostname

modified 2026-09-21 08:36:05
Kimsuky (Maltiverse)

picc-penang.com Hostname

modified 2026-09-21 08:35:02
2023-06-13 16:37:19 (URLhaus Abuse.ch) · (URLhaus Abuse.ch) · 2023-05-30 16:51:09 (URLhaus Abuse.ch) · 2023-05-23 13:07:50 (URLhaus Abuse.ch) · Malware Download (URLhaus Abuse.ch)

cliknet.com.br Hostname

modified 2026-09-21 08:35:01
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

webmail-gda-gov-pk.gwadarportt.workers.dev Hostname

modified 2026-09-21 08:35:01
SideWinder (ThreatFox Abuse.ch)

airbusocean.com Hostname

modified 2026-09-21 08:34:42
Top Popularity Site (Cisco Umbrella) · Malware (Hybrid-Analysis) · APT 40 (Maltiverse Research Team)

srv-cdn3-system.com Hostname

modified 2026-09-21 08:34:14
Gen:Variant.Mikey (Hybrid-Analysis) · Trojan.APosT (Hybrid-Analysis) · Dropper.Trojan.Generic (Hybrid-Analysis) · Trojan.StrongPity (Hybrid-Analysis) · StrongPity (ThreatFox Abuse.ch)

officecdn-microsoft-com.akamaixed.net Hostname

modified 2026-09-21 08:32:55
Redgolf (Maltiverse) · Aurora Panda (Maltiverse) · Axiom (Maltiverse)

ilnadir.com Hostname

modified 2026-09-21 08:32:53
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

www.epdf-user-view.quest Hostname

modified 2026-09-21 08:32:40
Kimsuky (ThreatFox Abuse.ch)

president-gov-ik.donwloaded.net Hostname

modified 2026-09-21 08:32:02
SideWinder (ThreatFox Abuse.ch)

googledrives.ddns.net Hostname

modified 2026-09-21 08:31:54
AsyncRAT (ThreatFox Abuse.ch) · TA558 (Maltiverse)

awards-piacaero.servehttp.com Hostname

modified 2026-09-21 04:40:05
SideWinder (ThreatFox Abuse.ch)

www.pol4vz.dynu.org Hostname

modified 2026-09-21 04:39:58
Kimsuky (ThreatFox Abuse.ch)

cimiercc.com Hostname

modified 2026-09-21 04:39:26
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

fortigate.forticloud.online Hostname

modified 2026-09-21 04:39:15
0Ktapus (Maltrail)

evolutionshotcrete.com.au Hostname

modified 2026-09-21 04:38:17
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

mail-dgdp-gov-pk.ntc-telecomcorporation.workers.dev Hostname

modified 2026-09-21 04:37:41
SideWinder (ThreatFox Abuse.ch)

mail-pc-gov-pk-login.ethanhunthero125.workers.dev Hostname

modified 2026-09-21 04:36:49
SideWinder (ThreatFox Abuse.ch)

keiko.com.ar Hostname

modified 2026-09-21 04:36:43
Phishing (OpenPhish) · Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

microsoftcontents.com Hostname

modified 2026-09-21 04:36:40
Redgolf (Maltiverse) · Aurora Panda (Maltiverse) · Axiom (Maltiverse)

customelisa.com Hostname

modified 2026-09-21 04:36:18
Kimsuky (ThreatFox Abuse.ch)

asontechsol.com Hostname

modified 2026-09-21 04:35:52
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

smartdatahub.com.ng Hostname

modified 2026-09-21 04:35:52
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

egymap.net Hostname

modified 2026-09-21 04:35:33
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

guider.serverpit.com Hostname

modified 2026-09-21 04:35:32
naver phishing (Maltiverse) · Kimsuky (ThreatFox Abuse.ch)

quedabesouro.ddns.net Hostname

modified 2026-09-21 04:35:16
TA558 (Maltiverse) · Generic.Malware (Hybrid-Analysis)

checko.paperless-korea.one Hostname

modified 2026-09-21 04:35:15
Kimsuky (ThreatFox Abuse.ch)

www.cantrip.org Hostname

modified 2026-09-21 04:34:32
Nitro (Maltiverse) · Darkhotel (Maltiverse) · Ice Fog (Maltiverse) · Projectsauron (Maltiverse) · Cobalt Strike (Maltiverse)

farmacomdemexico.com Hostname

modified 2026-09-21 04:34:23
2023-05-23 13:07:30 (URLhaus Abuse.ch) · Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

pausewatchings.com Hostname

modified 2026-09-21 04:18:22
ta569 (Maltiverse Threat Observatory)

ipsdoc.groups.id Hostname

modified 2026-09-21 01:52:40
Kimsuky (ThreatFox Abuse.ch)

nid-session.govt.hu Hostname

modified 2026-09-21 01:52:23
naver phishing (Maltiverse) · Kimsuky (ThreatFox Abuse.ch)

nivercloud.d-n-s.name Hostname

modified 2026-09-21 01:52:23
naver phishing (Maltiverse) · Kimsuky (ThreatFox Abuse.ch)

www.paperless-korea.one Hostname

modified 2026-09-21 01:52:22
Kimsuky (ThreatFox Abuse.ch)

mail-nespak-com-pk.gwadarportt.workers.dev Hostname

modified 2026-09-21 00:39:43
SideWinder (ThreatFox Abuse.ch)

mail-modp-gov-pk.pak-gov-pk.workers.dev Hostname

modified 2026-09-21 00:39:41
SideWinder (ThreatFox Abuse.ch)

donaldtrump.cc Hostname

modified 2026-09-21 00:39:41
Teamtnt (Maltiverse)

prod.tools Hostname

modified 2026-09-21 00:39:41
Nitro (Maltiverse) · Darkhotel (Maltiverse) · Ice Fog (Maltiverse) · Projectsauron (Maltiverse) · Cobalt Strike (Maltiverse)

msn-service.co Hostname

modified 2026-09-21 00:39:41
OilRig (Maltiverse)

autoacores.com Hostname

modified 2026-09-21 00:39:41
Razor Tiger (Maltiverse) · Gamaredon Group (Maltiverse) · Malware Download (URLhaus Abuse.ch)

devnull.anondns.net Hostname

modified 2026-09-21 00:39:41
TeamTNT (ThreatFox Abuse.ch)

microsoftshop.org Hostname

modified 2026-09-21 00:39:40
Backdoordiplomacy (Maltiverse)

intribune.blogspot.com Hostname

modified 2026-09-21 00:39:40
Transparent Tribe (Maltrail)

pfs1010.xyz Hostname

modified 2026-09-21 00:39:40
Mirage (Maltiverse) · Backdoordiplomacy (Maltiverse)

support-ntc.servehttp.com Hostname

modified 2026-09-21 00:39:40
SideWinder (ThreatFox Abuse.ch)

hrmis-financegovpk.serveftp.com Hostname

modified 2026-09-21 00:39:40
SideWinder (ThreatFox Abuse.ch)

96r1yh643o.de Hostname

modified 2026-09-21 00:39:40
Bahamut (ThreatFox Abuse.ch)

news-ptvcompk.servehttp.com Hostname

modified 2026-09-21 00:39:30
SideWinder (ThreatFox Abuse.ch)

moma.com Hostname

modified 2026-09-21 00:39:27
SideWinder (ThreatFox Abuse.ch)

duratechsolutions.com.ng Hostname

modified 2026-09-21 00:39:26
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

www.urgent-notice-check.click Hostname

modified 2026-09-21 00:39:25
Kimsuky (ThreatFox Abuse.ch)

essayever.com Hostname

modified 2026-09-21 00:39:25
Apt37 (Maltiverse) · QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch) · (URLhaus Abuse.ch) · 2023-05-31 15:57:11 (URLhaus Abuse.ch)

autodiscover.cn Hostname

modified 2026-09-21 00:39:24
Nitro (Maltiverse) · Darkhotel (Maltiverse) · Ice Fog (Maltiverse) · Projectsauron (Maltiverse) · Cobalt Strike (Maltiverse)

tech-assist.com.au Hostname

modified 2026-09-21 00:39:23
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

pakhams.com Hostname

modified 2026-09-21 00:39:22
Apt37 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

webdisk.us Hostname

modified 2026-09-21 00:39:22
Nitro (Maltiverse) · Darkhotel (Maltiverse) · Ice Fog (Maltiverse) · Projectsauron (Maltiverse) · Cobalt Strike (Maltiverse)

mypsh.ddns.net Hostname

modified 2026-09-21 00:39:16
Generic.Malware (Hybrid-Analysis) · Malware site (Hybrid-Analysis) · APT33 (Maltiverse Research Team)

cdt2021.zapto.org Hostname

modified 2026-09-21 00:39:15
AsyncRAT (ThreatFox Abuse.ch) · TA558 (Maltiverse) · Asyncrat (Maltrail)

mail.blog Hostname

modified 2026-09-21 00:39:14
Nitro (Maltiverse) · Darkhotel (Maltiverse) · Ice Fog (Maltiverse) · Projectsauron (Maltiverse) · Cobalt Strike (Maltiverse)

3030pp.hopto.org Hostname

modified 2026-09-21 00:39:04
TA558 (Maltiverse)

autoconfig.de Hostname

modified 2026-09-21 00:39:04
Nitro (Maltiverse) · Darkhotel (Maltiverse) · Ice Fog (Maltiverse) · Projectsauron (Maltiverse) · Cobalt Strike (Maltiverse)

queda212.duckdns.org Hostname

modified 2026-09-21 00:38:53
TA558 (Maltiverse) · Gen:Variant.Ursu (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis) · Revetrat.A.gen (Hybrid-Analysis) · Gen:Variant.Razy (Hybrid-Analysis)

eservice-ptclnetpk.servehttp.com Hostname

modified 2026-09-21 00:38:44
SideWinder (ThreatFox Abuse.ch)

howtosocial.it Hostname

modified 2026-09-21 00:38:29
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

growlb.com Hostname

modified 2026-09-21 00:38:28
Gold Cabin (Maltiverse) · Ta570 (Maltiverse) · QakBot (ThreatFox Abuse.ch)

www.franceconsobanque.fr Hostname

modified 2026-09-21 00:38:27
Sidewinder (Maltiverse) · Gamaredon Group (Maltiverse) · Razor Tiger (Maltiverse) · Malware Download (URLhaus Abuse.ch)

fuschia-rhinestone.cleverapps.io Hostname

modified 2026-09-21 00:38:26
OilRig (Maltiverse)

duckducklive.top Hostname

modified 2026-09-21 00:38:26
Stone Panda (Maltiverse) · Bronze Starlight (Maltiverse) · Malicious URL (Hybrid-Analysis) · Cobalt Strike (ThreatFox Abuse.ch)

email-govin.duia.eu Hostname

modified 2026-09-21 00:38:25
Trojan.Generic (Hybrid-Analysis) · Malicious site (Hybrid-Analysis) · Malicious URL (Hybrid-Analysis) · Transparent Tribe (Maltrail)