{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/clop-south-staffs-water-soc-coverage-defense/",
    "fang": "live",
    "exported_at": "2026-07-15T22:30:48Z",
    "total": 18,
    "categories": 3
  },
  "iocs": {
    "Domains": [
      "Booking.com",
      "decoded.avast.io",
      "ico.org",
      "ico.org.uk",
      "malpedia.caad.fkie.fraunhofer.de",
      "redcanary.com",
      "securityintelligence.com",
      "www.ransomware.live"
    ],
    "URLs": [
      "https://decoded.avast.io/janvojtesek/raspberry-robins-roshtyak-a-little-lesson-in-trickery/",
      "https://ico.org.uk/media2/xdrfahsw/south-staffordshire-plc-and-south-staffordshire-water-plc-monetary-penalty-notice.pdf",
      "https://malpedia.caad.fkie.fraunhofer.de/details/win.clop",
      "https://malpedia.caad.fkie.fraunhofer.de/details/win.get2",
      "https://malpedia.caad.fkie.fraunhofer.de/details/win.sdbbot",
      "https://redcanary.com/blog/raspberry-robin",
      "https://securityintelligence.com/posts/raspberry-robin-worm-dridex-malware/",
      "https://www.ransomware.live/group/clop"
    ],
    "CVEs": [
      "CVE-2020-1472",
      "CVE-2022-30190"
    ]
  }
}