Content menu Close

APT reports

Icefog OpenIOC Release

APT reports

minute read

Authors

Yesterday we published our research on Icefog, a sophisticated cyber-espionage operation. You can read more about it here. We also have a detailed FAQ and in-depth report.

We’re sharing Indicators of Compromise based on the OpenIOC framework for Icefog. This way organizations have an alternative way of checking their network for presence of (active) Icefog infections.

You can download the ZIPed IOC file here.

Kaspersky products detect all malicious files associated with Icefog.

Authors

Icefog OpenIOC Release

Your email address will not be published. Required fields are marked *

 

This site uses Akismet to reduce spam. Learn how your comment data is processed.

GReAT webinars

From the same authors

In the same category

    • Latest Posts
    Latest Webinars
    Reports

    Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs

    Kaspersky GReAT experts dive deep into the BlueNoroff APT’s GhostCall and GhostHire campaigns. Extensive research detailing multiple malware chains targeting macOS, including a stealer suite, fake Zoom and Microsoft Teams clients and ChatGPT-enhanced images.

    Mem3nt0 mori – The Hacking Team is back!

    Kaspersky researchers discovered previously unidentified commercial Dante spyware developed by Memento Labs (formerly Hacking Team) and linked it to the ForumTroll APT attacks.

    Mysterious Elephant: a growing threat

    Kaspersky GReAT experts describe the latest Mysterious Elephant APT activity. The threat actor exfiltrates data related to WhatsApp and employs tools such as BabShell and MemLoader HidenDesk.

    Threats

    Threats

    Categories

    Categories

    Other sections

    © 2025 AO Kaspersky Lab. All Rights Reserved.
    Registered trademarks and service marks are the property of their respective owners.