UNC4108

Overview 5 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 2 reports

Ranked by how many of this actor's indicators each report brought in.

• 5trac-labs.com/dont-ghost-the-socgholish-ghostweaver-b…
• 5app.validin.com/detail?find=192.52.167.63&type=ip4&ref_…

Timeline 5 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2026-01-02 or earlier 2 domainthis year

   trac-labs.com/dont-ghost-the-socgholish-ghostweaver-b… · app.validin.com/detail?find=192.52.167.63&type=ip4&ref_…

   content-cdnsclfr.com

   query-js-ajax.com

   copy batch

2. 2025-02-15 3 domain1 yr ago

   trac-labs.com/dont-ghost-the-socgholish-ghostweaver-b… · app.validin.com/detail?find=192.52.167.63&type=ip4&ref_…

   akami-cdns.com

   cdns-clfr-dns.com

   query-dns-cdn.com

   copy batch

Further reading 2

• app.validin.com/detail?find=192.52.167.63&type=ip4&ref_…
• trac-labs.com/dont-ghost-the-socgholish-ghostweaver-b…