[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2dEi4E0p8XajfzQ1K5SMaYKEa5qMDmyJ6-wf_34Zf7c":3},{"article":4,"iocs":42},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":29},"6f2ef0ef-c4c8-4d8d-b152-1c4eaba5328e","Update: We identified two new UNC1549 \u002F Nimbus Manticore phishing domains hosting the same fake E...","update-we-identified-two-new-unc1549-nimbus-manticore-phishing-domains-hosting-t-e3acd6","Update: We identified two new UNC1549 \u002F Nimbus Manticore phishing domains hosting the same fake Ebix recruitment portal from our previous reporting:\n\nhxxps:\u002F\u002Febix[.]portal-career[.]com\nhxxps:\u002F\u002Febix-exam[.]com\n\nIOCs and rules are available in THOR Lite and THOR Cloud Lite. https:\u002F\u002Ft.co\u002FykGQYWGdgk","The UNC1549, also known as Nimbus Manticore, threat actor has deployed two new phishing domains. These domains are hosting a fake Ebix recruitment portal, similar to previously reported campaigns. Indicators of Compromise (IOCs) are available for detection.","UNC1549\u002FNimbus Manticore threat actor uses new phishing domains for fake Ebix recruitment portal.",null,"https:\u002F\u002Fx.com\u002Fnextronresearch\u002Fstatus\u002F2064672318446538864","2026-06-10T11:33:35+00:00","2026-06-10T12:00:11.57332+00:00",8,[17,20,22],{"name":18,"type":19},"UNC1549","threat_actor",{"name":21,"type":19},"Nimbus Manticore",{"name":23,"type":24},"Ebix","product","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":25,"icon":11,"name":27,"slug":28},"Threat Intelligence","threat-intelligence",[30,35,40],{"category":31},{"id":32,"icon":11,"name":33,"slug":34},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":36},{"id":37,"icon":11,"name":38,"slug":39},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":41},{"id":25,"icon":11,"name":27,"slug":28},[43,47],{"type":44,"value":45,"context":46},"domain","ebix[.]portal-career[.]com","Phishing domain hosting fake Ebix recruitment portal",{"type":44,"value":48,"context":46},"ebix-exam[.]com"]