In Real Life (IRL) Com, also known as In Real Life Com, is a subset of the primarily English-speaking international criminal ecosystem known as The Com. It originated in SIM-swapping circles and encompasses splinter groups that market violence-as-a-service. These groups advertise and price contracts for real-world violence through social-media platforms, including swatting-for-hire, shootings, kidnappings, armed robbery, stabbings, physical assault, and “bricking.” IRL Com activity has been associated with online disputes escalating into organized, paid physical violence. Law-enforcement authorities have warned that the group presents a growing risk to young people and operates within a broader ecosystem that recruits minors into criminal activity.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A named primary subset of The Com; the content does not attribute specific operations or malware to it.
A subset of The Com associated with swat-for-hire and violence-as-a-service activity, including recruitment of children and teens for real-world violent crimes.
Subset of The Com highlighted by the FBI as an increasing threat to youth; associated with cybercrime ecosystems that can extend into real-world harm/violence recruitment dynamics (as referenced in the broader article context).
IRL Com is an online collective offering violence-as-a-service, swatting, DDoS, ransomware, and extortion, recruiting minors for a range of criminal activities.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.