[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdpvL9uSFe5QoYohc2WnLyHWYorKXtZivVk7M8ISO6lw":3},{"article":4,"iocs":36},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":21,"category":22,"article_tags":25},"5da74287-37f6-456a-80e4-1b1eda84d694","‼️ MORTAR Ransomware support portal:\n\nDark Web: http:\u002F\u002Fhpo7htcpddfanilknttsymttzfr4usxwjycjpazkle...","mortar-ransomware-support-portal-dark-web-http-hpo7htcpddfanilknttsymttzfr4usxwj-ac8af8","‼️ MORTAR Ransomware support portal:\n\nDark Web: http:\u002F\u002Fhpo7htcpddfanilknttsymttzfr4usxwjycjpazkleggnvry5bngszyd[.]onion\n\n\u002Flogin\n\u002Fadmin → \u002Flogin\n\u002Fclient → \u002Flogin\n\u002Flogout → \u002Flogin\n\u002Fupload → 405 https:\u002F\u002Ft.co\u002FSPWNDzkKzh","A dark web portal for the MORTAR ransomware operation has been identified and mapped. The portal includes login, admin, client, and upload endpoints, with reconnaissance details including HTTP response codes and error pages. This represents active infrastructure for the ransomware-as-a-service operation.","MORTAR ransomware support portal identified on dark web with onion domain.",null,"https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2062684479395619308","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHKAe9JUWgAAWLqr.jpg","2026-06-04T23:54:37+00:00","2026-06-05T00:00:12.828551+00:00",7,[18],{"name":19,"type":20},"MORTAR","threat_actor","7d8b5ab8-ea0b-4ced-ae97-ec251b86993a",{"id":21,"icon":11,"name":23,"slug":24},"Ransomware","ransomware",[26,31],{"category":27},{"id":28,"icon":11,"name":29,"slug":30},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":32},{"id":33,"icon":11,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[37,41],{"type":38,"value":39,"context":40},"domain","hpo7htcpddfanilknttsymttzfr4usxwjycjpazkleggnvry5bngszyd.onion","MORTAR ransomware support portal on Tor dark web",{"type":30,"value":19,"context":42},"Ransomware operation with active support infrastructure"]