{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/showboat-jfmbackdoor-telecom-intrusion-defense/",
    "fang": "live",
    "exported_at": "2026-07-15T22:57:05Z",
    "total": 35,
    "categories": 4
  },
  "iocs": {
    "IPv4": [
      "101.36.105.222",
      "116.169.244.208",
      "139.84.227.139",
      "192.9.141.111",
      "194.135.25.132",
      "23.27.201.160",
      "64.176.43.209"
    ],
    "Domains": [
      "assets.lumen.com",
      "kaztelecom.shop",
      "singtelcom.site",
      "telecom.webredirect.org",
      "webredirect.org",
      "www.lumen.com"
    ],
    "URLs": [
      "https://assets.lumen.com/is/content/Lumen/Black_Lotus_Labs_Video-6341053041112",
      "https://assets.lumen.com/is/image/Lumen/author-black-lotus-labs-logo-image-300x300?Creativeid=b08a9660-2840-4cf8-b2b4-aa45b9585632",
      "https://assets.lumen.com/is/image/Lumen/img-blog-bll-malware-fig1?$PNG$&Creativeid=baae57fe-30cb-446d-9373-b5835ed6d74a",
      "https://assets.lumen.com/is/image/Lumen/img-blog-bll-malware-fig2?$PNG$&Creativeid=679e321b-7df3-45e4-9292-c1c02c13732c",
      "https://assets.lumen.com/is/image/Lumen/img-blog-bll-malware-fig3?$PNG$&Creativeid=c742db12-86dc-4216-b182-07991ebadce5",
      "https://assets.lumen.com/is/image/Lumen/img-blog-bll-malware-fig4?$PNG$&Creativeid=f104f1c6-3a1f-460b-b597-813b63e43e0d",
      "https://assets.lumen.com/is/image/Lumen/img-blog-bll-malware-fig5?$PNG$&Creativeid=9f6a7f84-711d-4f83-b1b4-38b6129e1d23",
      "https://assets.lumen.com/is/image/Lumen/img-blog-bll-malware-fig6?$PNG$&Creativeid=a9148deb-22b8-43c8-bb11-dc6feceb9714",
      "https://assets.lumen.com/is/image/Lumen/img-blog-bll-malware-fig8?$PNG$&Creativeid=bdd1dcd8-5848-4020-b2e8-448ad48d9e98",
      "https://assets.lumen.com/is/image/Lumen/img-blog-bll-malware-showboat-table?$JPG$&Creativeid=416e9156-1fd8-4382-b2a3-107f5062946a",
      "https://assets.lumen.com/is/image/Lumen/img-blog-bll-newmalware-figure7?$PNG$&Creativeid=adbfea9c-c17b-4cbe-bb9d-c800b6b23a84",
      "https://assets.lumen.com/is/image/Lumen/img-blog-featured-resource-card-bll?Creativeid=844b527d-b24a-4d66-928e-9d6964fc2220",
      "https://assets.lumen.com/is/image/Lumen/img-blog-header-bll-malware-848x566?$PNG$&Creativeid=7832e142-117a-4b22-9ce4-cf575ba34f02",
      "https://www.lumen.com/en-us/security/black-lotus-labs.html",
      "kaztelecom.shop",
      "singtelcom.site",
      "telecom.webredirect.org",
      "webredirect.org"
    ],
    "sha256": [
      "2229e7f3cabbce4d67cd79c89fd5a100b20e8a99f4a2bf9aac77a978f49eb520",
      "27df475626aafce2ea1548a9f35efb9ad951298c8b11a6adb3ccdfcd5170c677",
      "A72427af3c046fd90999a6505b2372dc4ffde122227f30ed21621ecd4f2d3e8b",
      "E28a96f983b8605decd2ac1db16ebad5fa741a6aa4e585a38ade0e5ad7d6cec0"
    ]
  }
}