Hey there ,

i would like to know , how u scanned the CNC servers?
do you have a Tool for it? would be nice .....:-)
or are they just from an internal scan ?

Would like to make a scan server searching for those CNC´s

I own the domain go350.com. It's not compromised or malicious in any way. Would you please remove it from this list? I have full control of the domain, its DNS, etc.

The pwobot IOC directory mentioned in this report is missing.
Maybe committed but not pushed?

http://researchcenter.paloaltonetworks.com/2016/04/unit42-python-based-pwobot-targets-european-organizations/

My name is chương. I'm working at the company AMERITECJSC in the VIỆT NAM. A few days ago, my computer was infected with Phobos ransomware. But I can't remove them. I try so many hints on google. But I can't remove them. Plz, help let me know how I can remove them. Thanks

Execuse me, are the IOCs only from Unit 42 'APT' Public Reports or from all kinds of Public Reports?
Thank you so much!

I am interested in working with the GoLang malware (to do classification), I found here only hashes. Could you please share source files od GoLang malware ? That would be very helpful..
Thanks.

Many RFC5735 CIDR blocks in the list "The Curious Case of Notepad and Chthonic". Could you review it? Thank you.