← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Lazarus Group Targets macOS Users via ClickFlixAttack
WHITE cryptocti 2026-04-25 Modified: 2026-05-25
31
IOCs
MEDIUM VOLUME
Lazarus Group uses ClickFixto trick macOS users into fake meeting pages and executing malicious commands.
Indicators of Compromise (31)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 0a930f6974b234136c7de1401857f69f MD5 of 871d8f92b008a75607c9f1feb4922b9a02ac7bd2ed61b71ca752a5bed5448bf3 2026-04-25
FileHash-MD5 211571fe53a767e37428005a5db04e6f MD5 of 24af069b8899893cfc7347a4e5b46d717d77994a4b140d58de0be029dba686c9 2026-04-25
FileHash-MD5 2724ac6399fb10c64f39999373894a9f MD5 of 4b08a9e221a20b8024cf778d113732b3e12d363250231e78bae13b1f1dc1495b 2026-04-25
FileHash-MD5 53eff95b800422760c3e93606c966698 MD5 of a9562ab6bce06e92d4e428088eacc1e990e67ceae6f6940047360261b5599614 2026-04-25
FileHash-MD5 af2aeb81a5680c936b6211d4065ee39f MD5 of 85bed283ba95d40d99e79437e6a3161336c94ec0acbc0cd38599d0fc9b2e393c 2026-04-25
FileHash-MD5 b1f2fb42ab2f4ad0adfb05288b094bd9 MD5 of 0f41fd82cac71e27c36eb90c0bf305d6006b4f3d59e8ba55faeacbe62aadef90 2026-04-25
FileHash-MD5 c2e5c4adad409d2bc85d8a10ed424786 MD5 of dfee6ea9cafc674b93a8460b9e6beea7f0eb0c28e28d1190309347fd1514dbb6 2026-04-25
FileHash-MD5 c62dffe79a634516543a32511ad3e0db MD5 of 89616a503ffee8fc70f13c82c4a5e4fa4efafa61410971f4327ed38328af2938 2026-04-25
FileHash-SHA1 0d55ba7883b0732bf99cc0aa8d9e85fb5c56513a SHA1 of dfee6ea9cafc674b93a8460b9e6beea7f0eb0c28e28d1190309347fd1514dbb6 2026-04-25
FileHash-SHA1 8800a6660a53dc1fc8ff4af5c31312a1e81ac6cf SHA1 of 89616a503ffee8fc70f13c82c4a5e4fa4efafa61410971f4327ed38328af2938 2026-04-25
FileHash-SHA1 8a9a52bf8b084bb220e1658dca828929afa12498 SHA1 of 0f41fd82cac71e27c36eb90c0bf305d6006b4f3d59e8ba55faeacbe62aadef90 2026-04-25
FileHash-SHA1 8cd45ae9b53a2e9d3f24cfea654c6d6e9716d544 SHA1 of 85bed283ba95d40d99e79437e6a3161336c94ec0acbc0cd38599d0fc9b2e393c 2026-04-25
FileHash-SHA1 b0c5cc36fa9132379186b1cccb55da67f78e8c53 SHA1 of 24af069b8899893cfc7347a4e5b46d717d77994a4b140d58de0be029dba686c9 2026-04-25
FileHash-SHA1 bbf1cae7aea5561e4ea2775c8f369c23f4f00f57 SHA1 of 4b08a9e221a20b8024cf778d113732b3e12d363250231e78bae13b1f1dc1495b 2026-04-25
FileHash-SHA1 f50634f96e167b1ada616e62f59c58b1ddbcc958 SHA1 of a9562ab6bce06e92d4e428088eacc1e990e67ceae6f6940047360261b5599614 2026-04-25
FileHash-SHA1 fb05b1eada241c663e70c5f43b98560f5d2c5e80 SHA1 of 871d8f92b008a75607c9f1feb4922b9a02ac7bd2ed61b71ca752a5bed5448bf3 2026-04-25
FileHash-SHA256 0f41fd82cac71e27c36eb90c0bf305d6006b4f3d59e8ba55faeacbe62aadef90 — 2026-04-25
FileHash-SHA256 24af069b8899893cfc7347a4e5b46d717d77994a4b140d58de0be029dba686c9 — 2026-04-25
FileHash-SHA256 4b08a9e221a20b8024cf778d113732b3e12d363250231e78bae13b1f1dc1495b — 2026-04-25
FileHash-SHA256 85bed283ba95d40d99e79437e6a3161336c94ec0acbc0cd38599d0fc9b2e393c — 2026-04-25
FileHash-SHA256 871d8f92b008a75607c9f1feb4922b9a02ac7bd2ed61b71ca752a5bed5448bf3 — 2026-04-25
FileHash-SHA256 89616a503ffee8fc70f13c82c4a5e4fa4efafa61410971f4327ed38328af2938 — 2026-04-25
FileHash-SHA256 a9562ab6bce06e92d4e428088eacc1e990e67ceae6f6940047360261b5599614 — 2026-04-25
FileHash-SHA256 cc31b3dc8aeed0af9dd24b7e739f183527d55d5b5ecd3d93ba45dd4aaa8ba260 — 2026-04-25
FileHash-SHA256 dfee6ea9cafc674b93a8460b9e6beea7f0eb0c28e28d1190309347fd1514dbb6 — 2026-04-25
FileHash-SHA256 eb3eae776d175f7fb2fb9986c89154102ba8eabfde10a155af4dfb18f28be1b5 — 2026-04-25
URL http://172.86.113.102/Onedrive — 2026-04-25
URL http://172.86.113.102/localencode — 2026-04-25
URL https://update-teams.live/teams — 2026-04-25
domain ivemicrosft.com — 2026-04-25
domain update-teams.live — 2026-04-25