Shaping Shadows: Breaking Down New ShadowSyndicate Methods and Infrastructure
ID: 09f3f76b-f980-510f-91e5-f799dcd07947
STIX ID: report--09f3f76b-f980-510f-91e5-f799dcd07947
Feed Name: Group-IB Blog
A consolidated IOC table of IP addresses correlated by recurring SSH host key fingerprints (notably 55c658703c07d6344e325ea26cf96c3b and ddd9ca54c1309cde578062cba965571e), with first/last seen dates spanning 2022–2026, indicating shared or rotating SSH infrastructure likely associated with malicious activity; useful for threat hunting, blocking, and enrichment in network defenses.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.