← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Token Bingo: Don't Let Your Code be the Winner
WHITE Tr1sa111 2026-04-29 Modified: 2026-05-25
7
IOCs
LOW VOLUME
credential theftoauth abusetoken theftkali365microsoft 365inbox rulesdevice code phishingphishing-as-a-service
MITRE ATT&CK & Malware Families
MALWARE FAMILIES
Kali365
Indicators of Compromise (7)
All FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 09bb7e568e573497e22bfa3f36d71fe9d104899826608affedb25d988f391c85 — 2026-04-29
FileHash-SHA256 2fa6fc2199d3be55e240500d87e4484f39b9315bf336be25434f6716b8d28ec8 — 2026-04-29
FileHash-SHA256 883d5d4a73b0ac8cf4f78fe46d8f4e76e21508872836f2b439af2de4a205128e — 2026-04-29
domain duemineral.uk — 2026-04-29
domain kali365.xyz — 2026-04-29
hostname api.kali365.xyz — 2026-04-29
hostname v2.kali365.xyz — 2026-04-29
References (1)
↗ https://arcticwolf.com/resources/blog/token-bingo-dont-let-your-code-be-the-winner/