Resumen APTTrail
APTTrail mantiene indicadores publicos asociados a arid gopher. Aliases observados: arid gopher, arid viper, spyc23. Conteo por tipo: domain: 80, ipv4: 6, url: 2.
Indicadores de Compromiso (IOCs)
| Tipo | Valor | Contexto |
|---|---|---|
| Domain | accountforuser.website | APTTrail |
| Domain | acs-group.net | APTTrail |
| Domain | almoshell.website | APTTrail |
| Domain | alwaysgoodidea.com | APTTrail |
| Domain | analyticsandroid.com | APTTrail |
| Domain | angela-bishop.com | APTTrail |
| Domain | anime-con.net | APTTrail |
| Domain | baldwin-gonzalez.live | APTTrail |
| Domain | benyallen.club | APTTrail |
| Domain | chad-jessie.info | APTTrail |
| Domain | chloe-boreman.com | APTTrail |
| Domain | cooperron.me | APTTrail |
| Domain | crashstoreplayer.website | APTTrail |
| Domain | cricket-live.net | APTTrail |
| Domain | criston-cole.com | APTTrail |
| Domain | dabliardogame.com | APTTrail |
| Domain | deangelomcnay.news | APTTrail |
| Domain | delooyp.com | APTTrail |
| Domain | dslam.net | APTTrail |
| Domain | earlahenry.com | APTTrail |
| Domain | elsilvercloud.com | APTTrail |
| Domain | escanor.live | APTTrail |
| Domain | gameservicesplay.com | APTTrail |
| Domain | gmesc.com | APTTrail |
| Domain | godeutalk.com | APTTrail |
| Domain | grace-fraser.site | APTTrail |
| Domain | gsstar.net | APTTrail |
| Domain | haroldramsey.icu | APTTrail |
| Domain | im-inter.net | APTTrail |
| Domain | it-franch-result.info | APTTrail |
Referencias
- http://blog.talosintelligence.com/2022/02/arid-viper-targets-palestine.html
- https://blog.talosintelligence.com/arid-viper-mobile-spyware/
- https://docs.google.com/document/d/1oYX3uN6KxIX_StzTH0s0yFNNoHDnV8VgmVqU5WoeErc (2017-11-14: Arid Viper and VIRTUALNOTE)
- https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/mantis-palestinian-attacks
- https://threatfox.abuse.ch/browse/tag/AridViper/
- https://twitter.com/ClearskySec/status/946364079630897152
- https://twitter.com/ClearskySec/status/965985346222723072
- https://twitter.com/Jup1a/status/1579751269828562945
- https://twitter.com/RedDrip7/status/1592040235340541953
- https://twitter.com/ShadowChasing1/status/1537698377714253825
- https://twitter.com/cyberintproject/status/950930433595924480
- https://twitter.com/eyalsela/status/883243599705645056