## Dark Basin Indicators of Compromise

This list of IOCs is being jointly released by Citizen Lab and NortonLifeLock, further to reports released on June 9, 2020.

Citizen Lab Report: [Dark Basin: Uncovering a Massive Hack-For-Hire Operation](https://citizenlab.ca/2020/06/dark-basin-uncovering-a-massive-hack-for-hire-operation/)

NortonLifeLock Report: [Mercenary.Amanda](https://www.nortonlifelock.com/blogs/security-response/mercenary-amanda-professional-hackers-hire)

Note: _NortonLifeLock tracks Dark Basin as Mercenary.Amanda_

Files included in this directory:
* openioc.ioc : IOCs in OpenIOC format
* stix.xml : IOCs in STIX XML format
* iocs.csv : IOCs in csv format
* misp.json : IOCs in MISP format
* snort.rules: IOCs as a Snort ruleset.