← All actors Recent activity

BLACKGEAR

BLACKGEAR

Indicators
121
Source reports
3
Activity span
not dated
Newest indicator
unknown
Upstream change
2026-01-02
20172020

Overview 121 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

domain121BLACKGEAR-domain.txt

Principal sources 3 reports

Ranked by how many of this actor's indicators each report brought in.

What the sources have in common — not a claim that these are the same actor. See the whole graph.

Timeline 121 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

  1. 6 domain6 yrs ago

    malpedia.caad.fkie.fraunhofer.de/actor/blackgear · documents.trendmicro.com/assets/appendix-blackgear-cyberespionag…

    fisu.rr.nu
    lycosgame.com
    s27.dondon555.com
    sctw06.com
    support-microsoft.net
    tencent.ikwb.com

  2. 1 domain6 yrs ago

    virustotal.com/gui/file/42ee9dd43ea0f2766f1419733d2383…

    vcvcvcvc.dyndns.org

  3. 112 domain6 yrs ago

    malpedia.caad.fkie.fraunhofer.de/actor/blackgear · documents.trendmicro.com/assets/appendix-blackgear-cyberespionag…

    abcdns.bounceme.net
    abcpees.webhop.net
    ancelon.webhop.net
    anitacxb.servebbs.com
    bi-apple.net
    bitdefender.minidns.net
    ccc.th-fish.com
    ccuugo.8866.org
    checkerror.obama20009.com
    cheng.pc-officer.com
    cometocome.8866.org
    computerupdate.servegame.com
    cooperlzh.liondrive.com
    d1c2f3.3322.org
    data.lovequintet.com
    divineart.dyndns.org
    domain.uyghuri.com
    enterdia.zyns.com
    erbilin.blogdns.com
    feng.pc-officer.com
    fifaoopp.webhop.net
    gmail.servebbs.com
    goodhope.no-ip.org
    googleads.serveftp.com
    handinhand.blogdns.org
    harris.3322.org
    hinetrouter.serveftp.org
    hongzong.xicp.net
    hzcj.8866.org
    hzong.welikejack.com
    ie-update.sytes.net
    ifsbsa.bounceme.net
    ihe1979.3322.org
    intershare.zapto.net
    intershare.zapto.org
    introy.toh.info
    ius.uyghuri.com
    japanisok.selfip.org
    jmjm.bounceme.net
    killabcd.9966.org
    kingcoast.3322.org
    kingcoast.6688.org
    kingcoast.homedns.org
    kmtzh.zyns.com
    ksforever.no-ip.org
    liveupdate.dyndns.biz
    lovemoney.2288.org
    lyle.3322.org
    lyle.homedns.org
    mcrcancer.podzone.org
    mcrcount.bounceme.net
    mcrcount.podzone.org
    meet.servebbs.org
    menberservice.3322.org
    microsoft.dumb1.com
    mkmk.bounceme.net
    mmm.freesite.us
    msdndown1.3322.org
    myblog.bounceme.net
    mylife33.zapto.org
    mywebpage.3322.org
    newton1666.3322.org
    nothingtolose.3322.org
    nothingtolose.changeip.org
    olyone.com
    oohshit.dnsdojo.com
    own.webhop.net
    oyd.3322.org
    pklei45.3322.org
    pklei56.3322.org
    plscoverko.meibu.com
    pop.miyazakihousou.com
    popftp.bounceme.net
    popo.bi-apple.net
    popularcat.hopto.org
    pvp.scylla4421.com
    rainflow.dontexist.com
    readdook.selfip.com
    red.istme.com
    sbd.7766.org
    services.dyndns.biz
    smtp.hitachis.net
    sportsnews.chilichi.com
    stemba.bounceme.net
    sweetbug.selfip.net
    sweetcard.3322.org
    sweetseed.3322.org
    tempfy.9966.org
    tempsys.8866.prg
    todayzh.sytes.net
    tv.kingdomcer.com
    update.ddns.ms
    update.ns01.biz
    update.support-microsoft.net
    update.toh.info
    vnn.dinhk.net
    web.achteins.com
    webcache.zapto.org
    webhost.j2ee.us
    webmail.hinet2010.com
    webstation.webhop.net
    webupdate.selfip.com
    winautoupdate.acmetoy.com
    windowsupdate8.3322.org
    xinxin.6600.org
    yahoo.jungleheart.com
    yahoo.qpoe.com
    yaxiko.bounceme.net
    yitiao.dyndns-blog.com
    yunmin.3322.org
    zhngzng.mcchrystalvs.com
    zwy2007.pc-officer.com

  4. 2 domain9 yrs ago

    malpedia.caad.fkie.fraunhofer.de/actor/blackgear · documents.trendmicro.com/assets/appendix-blackgear-cyberespionag…

    liumingzhen.myftp.org
    liumingzhen.zapto.org

Further reading 3