{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/facebook-malvertising-campaign-uses-fake-windows-11-pages-to-deploy-credential-stealing-malware/",
    "fang": "live",
    "exported_at": "2026-07-15T22:31:14Z",
    "total": 9,
    "categories": 3
  },
  "iocs": {
    "Domains": [
      "ms-25h2-download.pro",
      "ms-25h2-update.pro",
      "ms25h2-download.pro",
      "ms25h2-update.pro"
    ],
    "URLs": [
      "ms-25h2-download.pro",
      "ms-25h2-update.pro",
      "ms25h2-download.pro",
      "ms25h2-update.pro"
    ],
    "sha256": [
      "c634838f255e0a691f8be3eab45f2015f7f3572fba2124142cf9fe1d227416aa"
    ]
  }
}