About CyberCroatia

CyberCroatia is a community that allows anyone — from business users to technical teams, legal entities and individuals — to take part in cybersecurity. Share fresh indicators of compromise (IOC) and indicators of activity (IOA). Together, we build faster and stronger defense.

Our Mission

Based on the analysis of various cyber threats, it became clear that foreign-domain threat intelligence feeds are often not fully relevant to the Croatian threat landscape. Although highly useful, foreign threat intelligence may provide limited value when it comes to preventing the spread of malicious activity that specifically targets Croatian organizations. This is why our mission is to create a trusted platform where anyone can participate. The goal is to accelerate the exchange of verifiable threats and make it easier for people and organizations to share suspicious domains, IP addresses, hash values or malicious URLs — without unnecessary complexity or delay.

How It Works

Step 1

Submit indicators

Upload IOC/IOA indicators individually or in bulk format (CSV/JSON/TXT).

Step 2

Automatic processing

The system validates and stores submissions in a shared repository. Personal data is not collected.

Step 3

Shared visibility

Current indicators are visible on the Browse page and ready to support defense and detection.

What You Can Submit

IOC

  • IP addresses and domains
  • URLs
  • Hash values (MD5/SHA1/SHA256)
  • Email senders or reply-to addresses, without personal data

IOA

  • Behavioral patterns, TTPs and MITRE references
  • Attack artifacts, such as command lines and processes
  • Phishing campaign indicators, templates and lure themes
  • Descriptions of suspicious activity, summarized and without PII

Community Principles

Openness

Threat data is useful when it is accessible — that is why we make it visible and reusable.

Security & Privacy

We do not collect PII. Please do not share sensitive internal information.

Quality

We prefer clear, verifiable indicators. If you are unsure, mark the submission as suspicious in the description.

Submit Current Indicators

Your contribution may help someone prevent an attack.

← Back to Homepage