← All actors Recent activity

SHAMOON

SHAMOON

Indicators
10
Source reports
5
Activity span
not dated
Newest indicator
unknown
Upstream change
2026-01-02
20172019

Overview 10 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

domain10SHAMOON-domain.txt

Principal sources 5 reports

Ranked by how many of this actor's indicators each report brought in.

What the sources have in common — not a claim that these are the same actor. See the whole graph.

Timeline 10 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

  1. 1 domain7 yrs ago

    github.com/advanced-threat-research/IOCs/blob/mast…

    winupdater.com

  2. 1 domain7 yrs ago

    github.com/advanced-threat-research/IOCs/blob/mast…

    possibletarget.ddns.com

  3. 1 domain7 yrs ago

    github.com/advanced-threat-research/IOCs/blob/mast…

    key8854321.pub

  4. 1 domain7 yrs ago

    github.com/advanced-threat-research/IOCs/blob/mast…

    mynetwork.ddns.net

  5. 3 domain9 yrs ago

    securityintelligence.com/the-full-shamoon-how-the-devastating-ma…

    maps-modon.club
    mol.com-ho.me
    ntg-sa.com

  6. 1 domain9 yrs ago

    arbornetworks.com/blog/asert/additional-insights-on-shamo…

    go-microstf.com

  7. 1 domain9 yrs ago

    arbornetworks.com/blog/asert/additional-insights-on-shamo…

    analytics-google.org

  8. 1 domain9 yrs ago

    github.com/advanced-threat-research/IOCs/blob/mast…

    winappupdater.com

Further reading 5