data.debugbear.com

Domain

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 29, 2026

Last Seen

October 29, 2026

API

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Legitimate service used for C2 and data exfiltration; not attacker-owned

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (2)

Polymarket Hack: $2.7 Million Drained via DebugBear Script

3h ago·13 sources

Polymarket Exploit: $700K Drained from Internal Wallet

3h ago·1 sources

Related Entities

Data Exfiltration Malware Supply Chain Attack Polymarket 0x3F99139F1C5854bb628c2e576Aaf638e99dFfc18 T1041 - Exfiltration Over C2 Channel T1195 - Supply Chain Compromise T1071 - Application Layer Protocol DebugBear