ctrlINT What the industry said about every indicator, with the quote

77.90.153[.]30IP address

Reported by 1 independent source · first reported by The DFIR Report · last reported

Last reported 10 months ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “On day eight of the intrusion, the threat actor returned to the beachhead host via RDP from a second IP address 77.90.153[.]30 and immediately executed Netscan, as well as the following discovery commands:”

    The DFIR ReportVendor
    Cat’s Got Your Files: Lynx Ransomware

Indicators reported together

named in the same reports
Copy these 11 indicators · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with 77.90.153[.]30 here?
No account needed. We do not store your IP address.