{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/canisterworm-wiper-weaponizes-trivy-supply-chain-to-target-iran/",
    "fang": "live",
    "exported_at": "2026-07-15T22:30:35Z",
    "total": 23,
    "categories": 2
  },
  "iocs": {
    "Domains": [
      "championships-peoples-point-cassette.trycloudflare.com",
      "dl.k8s.io",
      "icp0.io",
      "investigation-launches-hearings-copying.trycloudflare.com",
      "souls-entire-defined-routes.trycloudflare.com",
      "tdtqy-oyaaa-aaaae-af2dq-cai.raw.icp0.io",
      "trycloudflare.com",
      "www.aikido.dev"
    ],
    "URLs": [
      "https://championships-peoples-point-cassette.trycloudflare.com",
      "https://championships-peoples-point-cassette.trycloudflare.com/prop.py",
      "https://dl.k8s.io/release/$(curl",
      "https://dl.k8s.io/release/stable.txt)/bin/linux/${ARCH}/kubectl&quot",
      "https://investigation-launches-hearings-copying.trycloudflare.com/",
      "https://souls-entire-defined-routes.trycloudflare.com/",
      "https://souls-entire-defined-routes.trycloudflare.com/kamikaze.sh",
      "https://souls-entire-defined-routes.trycloudflare.com/kube.py&quot",
      "https://www.aikido.dev/blog/teampcp-stage-payload-canisterworm-iran",
      "icp0.io",
      "tdtqy-oyaaa-aaaae-af2dq-cai.raw.icp0.io",
      "trycloudflare.com",
      "trycloudflare.com/",
      "trycloudflare.com/kube.py&quot",
      "trycloudflare.com/prop.py"
    ]
  }
}