48

Overview 10 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 5 reports

Ranked by how many of this actor's indicators each report brought in.

• 8x.com/blackorbird/status/2067395589197951117
• 8mp.weixin.qq.com/s/0aCqF4Qvi8sb8d6W3yxWbg
• 2x.com/blackorbird/status/1861348202156564993
• 2mp.weixin.qq.com/s/Xb8bEZMV3FHC1O6lWt-4pg
• 2app.validin.com/detail?find=b0caff7b71c1e189a304b3420d6…

Timeline 10 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2026-06-19 4 domain, 1 ipv4, 3 url_paththis year

   x.com/blackorbird/status/2067395589197951117 · mp.weixin.qq.com/s/0aCqF4Qvi8sb8d6W3yxWbg

   domain	efb.recume.ink
   domain	klp.recume.ink
   domain	mnb.recume.ink
   domain	recume.ink
   ipv4	185.243.112.142:443
   url_path	/ldhifwdgfjdbcu/
   url_path	/ldhifwdgfjdbcu/qbjhwgf/
   url_path	/qbjhwgf/

   copy batch

2. 2024-11-26 2 domain2 yrs ago

   x.com/blackorbird/status/1861348202156564993 · mp.weixin.qq.com/s/Xb8bEZMV3FHC1O6lWt-4pg · app.validin.com/detail?find=b0caff7b71c1e189a304b3420d6…

   panbaiclu.com

   vpn616865750.softether.net

   copy batch

Further reading 5

• x.com/blackorbird/status/1861348202156564993
• x.com/blackorbird/status/2067395589197951117
• mp.weixin.qq.com/s/0aCqF4Qvi8sb8d6W3yxWbg
• app.validin.com/detail?find=b0caff7b71c1e189a304b3420d6…
• mp.weixin.qq.com/s/Xb8bEZMV3FHC1O6lWt-4pg