### Malware IOC Summary Suspicious campaign abusing GitHub, Dropbox, and Cloudflare for distributing .bat scripts, .zip archives, and disguised .png files (likely infostealers or ransomware payloads). Key IOCs include domains like nonever.net/tkuong.shop (C2?), Cloudflare IPs (104.21.*), and numerous SHA-256 hashes tied to evasion tactics (e.g., 7-Zip MotW bypass). High risk; block and monitor! #CyberSecurity #Malware