Campaigns / Malware / Family

Windigo

1New IOCs · 24h
16New IOCs · 7 days
16Indicators tracked
1Independent feeds
2026-10-11 13:20Last activity

New indicators per day

2026-09-29 to 2026-10-12, by first report.

  • Hash10
  • IP6
  • Malware16

Where its infrastructure is hosted

  1. 🇦🇺 Australia2
  2. 🇧🇬 Bulgaria1
  3. 🇳🇱 Netherlands1
  4. 🇸🇬 Singapore1
  5. 🇷🇺 Russia1

Latest indicators

Filter the live feed →
First seenTypeIndicatorRoleWhere
2026-10-11 13:20IP72.5.161[.]12Contacted by malware—
2026-10-11 04:35SHA256ade72bad7ffa9a83b5eacbe9a3f2154c29af20c1b4c804bb371b625b4d89c258Malware sample—
2026-10-11 04:35IP185.82.216[.]62Contacted by malware—
2026-10-09 15:37SHA256013ae849ec5dadd1701cbd415d4b1c0c1a5d5c41cc3dba32584fd5948727097aMalware sample—
2026-10-09 15:18SHA2561ce2f6949f9338353d372cff78e041d44414c193fe4e00ad51de593e390055cdMalware sample—
2026-10-09 15:18IP190.2.154[.]51Contacted by malware—
2026-10-09 14:42SHA25600191c94824dea1d93aabcd046efa4bd7cc62e061d3cad537653560abbac1045Malware sample—
2026-10-09 14:24SHA256174331eb10c60fc24dc3f56d6dd48915626e5d976661c9104e1cef08e53d7e5aMalware sample—
2026-10-09 14:24IP1.2.3[.]4Contacted by malware—
2026-10-09 14:24IP203.132.94[.]196Contacted by malware—
2026-10-09 14:06SHA256060a397b96852584e6fff098dfe78debb7eca1f4a489e21376c5739c832cab80Malware sample—
2026-10-09 13:45SHA2560dc63cc86d3e3a2283f35e9ef62d343a3a9c367e4b8de0f150242e12f9fd5f62Malware sample—
2026-10-08 12:54SHA2562ea61e0ebdcaa89b3cae278e41064a9a9780b74d734c746de7ad1e4d1c303050Malware sample—
2026-10-08 12:01SHA25608970e2ed8c1e7f7d06a9e671ac46c985e518ee27f13409657f956376143c462Malware sample—
2026-10-07 02:03SHA25652f1edcb8fe336b89fb06626fdca337f1729ca728f55678bf146252fd726e6c2Malware sample—
2026-10-07 02:03IP185.172.128[.]150Contacted by malware—

Defanged for safety. URL query strings removed.