Resumen APTTrail
APTTrail mantiene indicadores publicos asociados a cobalt dickens. Aliases observados: cobalt dickens, mabna institute, silent librarian, ta407. Conteo por tipo: domain: 836.
Indicadores de Compromiso (IOCs)
| Tipo | Valor | Contexto |
|---|---|---|
| Domain | 12st.me | APTTrail |
| Domain | 12xb.me | APTTrail |
| Domain | 1edu.in | APTTrail |
| Domain | 1ezpro.xyz | APTTrail |
| Domain | 1r3o.me | APTTrail |
| Domain | 28ag.me | APTTrail |
| Domain | 32ex.me | APTTrail |
| Domain | 33qa.me | APTTrail |
| Domain | 67vr.me | APTTrail |
| Domain | 67yt.me | APTTrail |
| Domain | ac.uk.libte.me | APTTrail |
| Domain | aclib.me | APTTrail |
| Domain | acuk.me | APTTrail |
| Domain | adfs.goucher.adui.me | APTTrail |
| Domain | adfs.goucher.elru.me | APTTrail |
| Domain | adfs.goucher.pdlu.me | APTTrail |
| Domain | adfs.goucher.unde.me | APTTrail |
| Domain | adfs.lincoln.ac.uk.itlib.me | APTTrail |
| Domain | adui.me | APTTrail |
| Domain | aill.cf | APTTrail |
| Domain | aill.nl | APTTrail |
| Domain | allib.me | APTTrail |
| Domain | anvc.me | APTTrail |
| Domain | aroe.me | APTTrail |
| Domain | asoec.me | APTTrail |
| Domain | atll.tk | APTTrail |
| Domain | atna.cf | APTTrail |
| Domain | atti.cf | APTTrail |
| Domain | auth.bath.ac.uk.ctit.cf | APTTrail |
| Domain | auth.bath.ac.uk.ctit.tk | APTTrail |
Referencias
- https://blog.malwarebytes.com/malwarebytes-news/2020/10/silent-librarian-apt-phishing-attack/
- https://otx.alienvault.com/pulse/5d78eaf37b37c503fb07d45a
- https://otx.alienvault.com/pulse/5da4a7ab756627fcce84efcc
- https://twitter.com/ShadowChasing1/status/1315855394506330113
- https://twitter.com/TeamDreier/status/1318072706068320256
- https://twitter.com/TeamDreier/status/1318073179621986311
- https://twitter.com/TeamDreier/status/1318073712621608960
- https://twitter.com/TeamDreier/status/1319219638966849536
- https://twitter.com/TeamDreier/status/1319219638966849536
- https://twitter.com/TeamDreier/status/1319284609612312576
- https://twitter.com/TeamDreier/status/1319501314079031297
- https://twitter.com/TeamDreier/status/1320068459934482438