RaqibCTI
URL

hxxps[://]securelist[.]com/tr/payload-ransomware-via-group-policy/121335/

Sourced from feed-extract
Type
url
Risk score
0 / 3
First seen
2026-09-23
Last seen
2026-09-23

Attribution

Attribution ≠ confirmation

Infrastructure pivots (this indicator asserted to indicate an actor) are not confirmed attribution — attribution is capped at Probable pending original-source reporting.

See the analysis →
No asserted actor linkage yet
This indicator has not been linked to a tracked threat actor in the corpus. Infrastructure pivots may appear here as enrichment completes.