Skip to content
Bulwark Black Bulwark Black LLC
Latest
Jscrambler npm Compromise Shows Build Pipelines Need Runtime ControlsGhost Phishing Shows Why Email Security Must Follow the BrowserPakistani Police Intrusions Show Why Public-Sector Data Systems Are Strategic TargetsBad Epoll Shows Linux Kernel LPEs Belong in the Patch Priority QueueFake Payment SDKs Show Why Dependency Risk Is Credential RiskCritical UniFi Flaws Put Network Control Planes Back in the Patch QueueVidar Stealer Campaign Shows Why File Size and Fake Signatures Still Beat Weak ControlsADFS Signing Keys Show Why Federation Servers Are Tier-Zero Identity InfrastructureUAT-7810 Shows Edge Devices Are Becoming China-Nexus Relay InfrastructureFortiBleed Shows Firewall Credentials Are Ransomware FuelNetNut and Popa Takedown Shows Residential Proxies Are Now Attack InfrastructureVect and TeamPCP Show Supply-Chain Credentials Are Ransomware FuelOusaban Shows Banking Trojans Are Learning to Hide From SandboxesNUT upsmon Command Injection Shows UPS Monitoring Belongs in the Patch Queue

Indicator of Compromise

2f7b4dca1c79e525aef8da537294a6c4

MD5 hash Seen in 1 report Watch this →

An MD5 file hash identifying a specific malicious sample. Match it against files on disk or in your EDR.

Included in the Hashes feed (live, machine-readable).

Seen in these reports

Russian Cyber Threat Intelligence · Feb 9, 2026

APT28 Exploits CVE-2026-21509 in Operation Neusploit: Stealing Emails with MiniDoor Backdoor

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

0bb0d54033767f081cae775e3cf9ede7ae6bea75f35fbfb748ccba9325e28e5e 154ff6774294e0e6a46581c8452a77de 1ed863a32372160b3a25549aad25d48d5352d9b4f58d4339408c4eea69807f50 22da6a104149cad87d5ec5da4c3153bebf68c411 23b6f9c00b9d5475212173ec3cbbcff34c4400a7 2822c72a59b58c00fc088aa551cdeeb92ca10fd23e23745610ff207f53118db9 3f446d316efe2514efd70c975d0c87e12357db9fca54a25834d60b28192c6a69 4592e6173a643699dc526778aa0a30330d16fe08 4727582023cd8071a6f388ea3ba2feaa 5a17cfaea0cc3a82242fdd11b53140c0b56256d769b07c33757d61e0a0a6ec02 7bbb530eb77c6416f02813cd2764e49bd084465c 7c396677848776f9824ebe408bbba943 859c4b85ed85e6cc4eadb1a037a61e16 95e59536455a089ced64f5af2539a449 9f4672c1374034ac4556264f0d4bf96ee242c0b5a9edaa4715b5e61fe8d55cc8 a876f648991711e44a8dcf888a271880c6c930e5138f284cd6ca6128eca56ba1 a944a09783023a2c6c62d3601cbd5392a03d808a6a51728e07a3270861c2a8ee b2ba51b4491da8604ff9410d6e004971e3cd9a321390d0258e294ac42010b546 bb23545380fde9f48ad070f88fe0afd695da5fcae8c5274814858c5a681d8c4e c1b272067491258ea4a2b1d2789d82d157aaf90a c4799d17a4343bd353e0edb0a4de248b99295d4d c8c84bf33c05fb3a69bc5e2d6377b73649b93dce c91183175ce77360006f964841eb4048cf37cb82103f2573e262927be4c7607f cea7e9323d79054f92634f4032c26d30c1cedd7e CVE-2026-21509 d47261e52335b516a777da368208ee91 D577c4a264fee27084ddf717441eb89f714972a5 d788d85335e20bb1f173d4d0494629d36083dddc da1c3e92f69e6ca0e4f4823525905cb6969a44ad e4a5c4b205e1b80dc20d9a2fb4126d06 e52a9f004f4359ea0f8f9c6eb91731ed78e5c4d3 ea6615942f2c23dba7810a6f7d69e2da ee0b44346db028a621d1dec99f429823 f05d0b13c633ad889334781cf4091d3e f3b869a8d5ad243e35963ba6d7f89855 fd3f13db41cd5b442fa26ba8bc0e9703ed243b3516374e3ef89be71cbf07436b freefoodaid[.]comfreefoodaid[.]com/documents/2_2[.]dfreefoodaid[.]com/documents/2_2[.]lNkfreefoodaid[.]com/tables/tables[.]d
Browse all indicators → Machine-readable feeds → Extract IOCs from text →