vniir-avia.space

Domain

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

July 7, 2026

Last Seen

July 7, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Freshly registered spoof domain used for phishing, identified as attacker-controlled

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (1)

Aerospace Phishing Campaign Uses AnyDesk for Remote Access and Data Exfiltration

Jul 7·4 sources

Related Articles (2)

Attackers Exfiltrate AnyDesk Configuration Data via Blat SMTP in Aerospace Phishing Campaign

Gbhackers·Jul 7

Attackers Exfiltrate AnyDesk Configuration Data via Blat SMTP in Aerospace Phishing Campaign

Gbhackers·Jul 7

Related Entities

Rare Werewolf Turla Kazuar Librarian Ghouls Phishing Malware Aerospace Phishing Campaign Vniir Belarus Kazakhstan Russia Energy