← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
IOC - Black Hole of Trust: SEO Poisoning in Silver Fox’s Space Odyssey
Zero Trust is often touted as the ultimate defence for organisations, yet even threat actors sometimes leave the door unlocked, creating the perfect opening for us to walk through. This publication presents our findings on an ongoing campaign orchestrated by Silver Fox,
uncovered through an insecure web panel identified as part of our Threat Intelligence
operations.
Indicators of Compromise (56)
| TYPE | INDICATOR | DESCRIPTION | CREATED | |
|---|---|---|---|---|
| domain | 3tiao.org | — | 2025-12-22 | |
| domain | aisi-i4.com | — | 2025-12-22 | |
| domain | ch-safew.com | — | 2025-12-22 | |
| domain | cn-safew.com | — | 2025-12-22 | |
| domain | cn-sigua.com | — | 2025-12-22 | |
| domain | fantalks.cc | — | 2025-12-22 | |
| domain | fantalks88.cc | — | 2025-12-22 | |
| domain | ivcduidnxudhwiucn.org | — | 2025-12-22 | |
| domain | khjxvc.top | — | 2025-12-22 | |
| domain | letsvpn-kl.org | — | 2025-12-22 | |
| domain | letsvpnm.com | — | 2025-12-22 | |
| domain | orayy.com | — | 2025-12-22 | |
| domain | oryz.com | — | 2025-12-22 | |
| domain | paopaoim.org | — | 2025-12-22 | |
| domain | potato-im.org | — | 2025-12-22 | |
| domain | safew-hk.com | — | 2025-12-22 | |
| domain | safew-web.org | — | 2025-12-22 | |
| domain | safew-zhe.com | — | 2025-12-22 | |
| domain | safew.love | — | 2025-12-22 | |
| domain | shurufa-sougou.org | — | 2025-12-22 | |
| domain | sigua-cn.icu | — | 2025-12-22 | |
| domain | sigua-zq.com | — | 2025-12-22 | |
| domain | sigua.im | — | 2025-12-22 | |
| domain | sigua.io | — | 2025-12-22 | |
| domain | sigua.tw | — | 2025-12-22 | |
| domain | snipaste-cn.com | — | 2025-12-22 | |
| domain | snipaste.net | — | 2025-12-22 | |
| domain | snipastesec.com | — | 2025-12-22 | |
| domain | snipastesis.com | — | 2025-12-22 | |
| domain | ssl3.space | — | 2025-12-22 | |
| domain | sunlogin-orayc.com | — | 2025-12-22 | |
| domain | telegramdld.com | — | 2025-12-22 | |
| domain | telegramk.org | — | 2025-12-22 | |
| domain | vpm-kl.com | — | 2025-12-22 | |
| domain | wps-excel.org | — | 2025-12-22 | |
| domain | youdao-fy.org | — | 2025-12-22 | |
| domain | zh-signal.com | — | 2025-12-22 | |
| domain | zh-snipaste.com | — | 2025-12-22 | |
| hostname | snipaste.naifeiplus.com | — | 2025-12-22 | |
| hostname | zh.snipaste.com | — | 2025-12-22 | |
| FileHash-MD5 | e33bc6389af5a3122ca5f17acdaa21cc | MD5 of bd5a0f1715ebe8c6d3d3d2d6ea31b7e84cc9c6021610509292648fca2e942d7b | 2025-12-22 | |
| FileHash-MD5 | fbc1ad91d66044d37d982cc888b07681 | MD5 of 18a80813682b7ccc7428ab56e8c882ebeba94ae43df8993bd46c541d77fde56f | 2025-12-22 | |
| FileHash-SHA1 | e781b06230c0f76c93fa40ac733be5f4efe9c302 | SHA1 of bd5a0f1715ebe8c6d3d3d2d6ea31b7e84cc9c6021610509292648fca2e942d7b | 2025-12-22 | |
| FileHash-SHA1 | ecf8365d28a6565b1b1c5f5076302913da8c5aa0 | SHA1 of 18a80813682b7ccc7428ab56e8c882ebeba94ae43df8993bd46c541d77fde56f | 2025-12-22 | |
| FileHash-SHA256 | 18a80813682b7ccc7428ab56e8c882ebeba94ae43df8993bd46c541d77fde56f | — | 2025-12-22 | |
| FileHash-SHA256 | 3aa43350f17fb366174c77894a893d4e8d24c3b0f302190c16c2f62d5ab890b4 | — | 2025-12-22 | |
| FileHash-SHA256 | 3c7ef5d15d9b5429cd615900e2e50235db3badff75f6b66afa32dabd5167be15 | — | 2025-12-22 | |
| FileHash-SHA256 | 3fb0fb8ec636e8ee47ad3b48827a5ffd9af39f0442bd5dd98ae9f659e3d65309 | — | 2025-12-22 | |
| FileHash-SHA256 | 40d69efcf04bb00c4411c1b8920bc35968e6b903f4f60c04b4e881e482672031 | — | 2025-12-22 | |
| FileHash-SHA256 | 5ee4e4c8fcc00ea45aec5dda8cba27c090d115e287b4784867e3ce6d21239466 | — | 2025-12-22 | |
| FileHash-SHA256 | 822097f90504a419dd3e10ef91308f83606f4a6c80c95b7be786fe90a01e620c | — | 2025-12-22 | |
| FileHash-SHA256 | ada97bc3f0c142f50f006e19bf7e1d5fc25089334c782f4de0979bb0a9da7e35 | — | 2025-12-22 | |
| FileHash-SHA256 | bd0ef6fbc7188c9434111e071751a244b79ea3ff9eac558d60b5d28ee480d87f | — | 2025-12-22 | |
| FileHash-SHA256 | bd5a0f1715ebe8c6d3d3d2d6ea31b7e84cc9c6021610509292648fca2e942d7b | — | 2025-12-22 | |
| FileHash-SHA256 | be62dc844ab234da9a29c6ba05aad1f323d30d163dd88002ac22a26508421435 | — | 2025-12-22 | |
| FileHash-SHA256 | f521e9a5cc0ab97b5b797e31bafdfe642aca95b4f8186ac6eb565d0395b0c430 | — | 2025-12-22 |