Repository navigation
Update observed IOC rules - 2026-09-14 - #5337
Merged
Merged
Conversation
Contributor
Author
Test Rules Sync - Action RequiredThis PR was not automatically synced to test-rules because the author is not a member of the To enable syncing, an organization member can comment Once triggered, the rules will be synced on the next scheduled run (every 10 minutes). |
github-actions
Bot
changed the title
Contributor
Author
|
Automated update — 2026-09-13 |
github-actions
Bot
changed the title
Contributor
Author
|
Automated update — 2026-09-14 |
Contributor
Author
|
Automated update — 2026-09-14 |
Contributor
Author
|
Automated update — 2026-09-14 |
markmsublime
approved these changes
Sep 14, 2026
missingn0pe
pushed a commit
that referenced
this pull request
Sep 21, 2026
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Automated IOC update (Last updated: 2026-09-14)
Cumulative Changes Since Last Merge
New IOCs
57bbac04d703d415...(sender_emails) — Compromised student account - fake forwarded thread and fake photo share link phishing campaignsb044f948af172622...(sender_emails) — Observed malicious sender - advance-fee investment fraud campaignse496f21a9a64bb06...(sender_emails) — Observed malicious sender - advance-fee investment fraud campaigns970950880f23d7bc...(sender_emails) — Compromised account - fake eDocument task and Microsoft Teams document share credential phishing campaigns2a9b9e226f23ec63...(sender_emails) — Observed malicious sender - Chinese-language enterprise mailbox credential phishing campaigns6fcd011c929ff7d8...(sender_emails) — Observed malicious sender - advance-fee investment fraud campaigns01eb9fff727d15c5...(sender_emails) — Observed malicious sender - advance-fee investment fraud campaignscaed0ffc5a2f2858...(sender_emails) — Observed malicious sender - advance-fee investment fraud campaigns4c254e837ad5e81e...(sender_emails) — Observed malicious sender - advance-fee investment fraud campaigns4329b35c2cbed4d8...(sender_emails) — Compromised account - Google Calendar invite investment agreement credential phishing campaigns91fe8f768fdef0ef...(sender_emails) — Observed malicious sender - advance-fee investment fraud campaigns0d3de488a096b39c...(sender_emails) — Observed malicious sender - advance-fee investment fraud campaignse06aa19393381532...(sender_emails) — Observed malicious sender - advance-fee investment fraud campaignsUpdate History
Generated by automated IOC management system
Source: Private threat intel repository