IP 104.194.159.150
Indicator published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordPublished file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
Indicator published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordWritten by: Tyler McLellan, Austin Larsen Introduction Google Threat Intelligence Group (GTIG) continues to track UNC6671 actively conducting compromises leading to data theft extortion, despite the alleged announced retirement of the BlackFile extortion brand in May 2026. Telemetry and infrastructure analysis reveal that rather than disbanding, UNC6671 has diversified its operations across multip
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 06, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.