Kawa4096
| active
None
Victims
17
First Discovered
victim2025-06-27
Last Discovered
victim2025-07-29
Inactive Since
in day(s)17
Avg Delay
between attack and claim8.3 days
Infostealer
for victim with domain11.1%
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Kawa4096 | Yes | 2025-08-15 10:31:18 | nginx 1.18.0 | kawasa2qo7345dt7ogxmx7qmn6z2hnwaoi3h5aeosupozkddqwp6lqqd.onion |
Target (Available)
Top 5 Activity Sectors
- Financial Services 2
- Healthcare 2
- Public Sector 1
Top 5 Countries
-
United States
11
-
Japan
3
-
Germany
2
Heatmap (Available)
Ransom Notes (0)
No ransom notes available.
Tools Used (Not Available)
No tools used available.
Vulnerabilities Exploited (0)
No vulnerabilities exploited available.
TTPs Matrix (0)
No TTPs available.
Negotiation Chats (0)
No negotiation chats available.
YARA Rules (0)
No YARA rules available.
Indicators of Compromise (IoCs) (2)
EMAIL
1
TOX
1
| Type | IOC |
|---|---|
email
|
kawa4096@onionmail.org
|
tox
|
6A340207246B47E37F6D094D2236E5C6242B6E4461EEF8021FED2C9855240C3E11AEE886FAAF
|
Victims (17)
carestlhealth.org
Kawa4096
Discovery Date: 2025-07-22
Estimated Attack Date: 2025-06-28
Estimated Attack Date: 2025-06-28
carestlhealth.org...
gatewaycsb.org
Kawa4096
Discovery Date: 2025-07-07
Estimated Attack Date: 2025-06-25
Estimated Attack Date: 2025-06-25
gatewaycsb.org...
heimhaus.de
Kawa4096
Discovery Date: 2025-07-07
Estimated Attack Date: 2025-06-22
Estimated Attack Date: 2025-06-22
www.heimhaus.de...
tokiomarine-nichido.co.jp
Kawa4096
Discovery Date: 2025-07-01
Estimated Attack Date: 2025-06-26
Estimated Attack Date: 2025-06-26
tokiomarine-nichido.co.jp...
www.ogr-jp.com
Kawa4096
Discovery Date: 2025-07-01
Estimated Attack Date: 2025-06-28
Estimated Attack Date: 2025-06-28
www.ogr-jp.com...
www.malonebailey.com
Kawa4096
Discovery Date: 2025-06-30
Estimated Attack Date: 2025-06-24
Estimated Attack Date: 2025-06-24
www.malonebailey.com...
**********-*******.co.jp
Kawa4096
Discovery Date: 2025-06-30
Estimated Attack Date: 2025-06-26
Estimated Attack Date: 2025-06-26
**********-*******.co.jp...
*************.org
Kawa4096
Discovery Date: 2025-06-30
Estimated Attack Date: 2025-06-28
Estimated Attack Date: 2025-06-28
*************.org...
Morningsideservices
Kawa4096
Discovery Date: 2025-06-27
Estimated Attack Date: 2025-06-20
Estimated Attack Date: 2025-06-20
www.morningsideservices.com...