[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fk1wWts09xG2_Mu_LOQyO4VSacsywhxoAeJ979D0YHQ0":3},{"article":4,"iocs":41,"watch_terms":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":23,"category":24,"article_tags":28},"6b475d14-c9d4-497b-b64a-996ee0831518","ThreatFox - Tofsee","threatfox-tofsee-ce60d2","Indicators of compromise (IOCs) associated with Tofsee (aka Gheg)","ThreatFox has cataloged 766 indicators of compromise (IOCs) associated with the Tofsee malware family, also known as Gheg. The malware was first observed on March 27, 2021, with the most recent activity recorded on April 14, 2026. The IOCs and additional details are available through the ThreatFox API and Malpedia.","ThreatFox database publishes 766 IOCs for Tofsee\u002FGheg malware family.","ThreatFox Database Indicators of Compromise (IOCs) on ThreatFox are associated with a certain malware fas. A malware sample can be associated with only one malware family. The page below gives you an overview on indicators of compromise associated with win.tofsee. You can also get this data through the ThreatFox API. Database Entry Malware: Tofsee Malware alias:Gheg First seen:2021-03-27 20:00:45 UTC Last seen:2026-04-14 19:16:14 UTC Number of IOCs:766 Malpedia: https:\u002F\u002Fmalpedia.caad.fkie.fraunhofer.de\u002Fdetails\u002Fwin.tofsee Indicators Of Compromise The table below shows all indicators of compromise (IOCs) that are associated with this particulare malware family (max 1000). Date (UTC)IOCMalwareTagsReporter","https:\u002F\u002Fthreatfox.abuse.ch\u002Fbrowse\u002Fmalware\u002Fwin.tofsee\u002F","https:\u002F\u002Fthreatfox.abuse.ch\u002Fimages\u002Fabusech_twitter.png","2026-04-14T19:19:10+00:00","2026-04-14T20:00:11.628+00:00",7,[18,21],{"name":19,"type":20},"ThreatFox","product",{"name":22,"type":20},"Malpedia","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":23,"icon":25,"name":26,"slug":27},null,"Malware","malware",[29,34,36],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42,45],{"type":27,"value":43,"context":44},"Tofsee","Malware family also known as Gheg; 766 IOCs published in ThreatFox database",{"type":27,"value":46,"context":47},"Gheg","Alias for Tofsee malware family",[19,22]]