2021 THREAT REPORT
Common Information
| Type | Value |
|---|---|
| UUID | bf14462e-b1b7-4c97-8aa3-70efd57ce49c |
| Fingerprint | 90717ab2a68e166e4e524b7a6ab2a64e08979875c1de5d588359917c10e7a6c6 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | March 11, 2021, 2:33 p.m. |
| Added to db | April 14, 2024, 12:59 a.m. |
| Last updated | Aug. 31, 2024, 6:16 a.m. |
| Headline | 2021 THREAT REPORT |
| Title | 2021 THREAT REPORT |
| Detected Hints/Tags/Attributes | 405/4/262 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 138 | www.darkreading.com |
|
| Details | Domain | 13 | cointelegraph.com |
|
| Details | Domain | 133 | www.infosecurity-magazine.com |
|
| Details | Domain | 2 | www.geoedge.com |
|
| Details | Domain | 84 | www.zscaler.com |
|
| Details | Domain | 145 | threatpost.com |
|
| Details | Domain | 35 | resources.infosecinstitute.com |
|
| Details | Domain | 23 | www.cobaltstrike.com |
|
| Details | Domain | 13 | www.joeware.net |
|
| Details | Domain | 7 | www.advanced-intel.com |
|
| Details | Domain | 5 | mcpmag.com |
|
| Details | Domain | 2 | www.andreafortuna.org |
|
| Details | Domain | 6 | stealthbits.com |
|
| Details | Domain | 98 | www.ncsc.gov.uk |
|
| Details | Domain | 88 | securityintelligence.com |
|
| Details | Domain | 123 | www.reuters.com |
|
| Details | Domain | 30 | objective-see.com |
|
| Details | Domain | 11 | www.amnesty.org |
|
| Details | Domain | 52 | whois.arin.net |
|
| Details | Domain | 202 | krebsonsecurity.com |
|
| Details | Domain | 105 | web.archive.org |
|
| Details | Domain | 2 | hub.dyn.com |
|
| Details | Domain | 96 | malpedia.caad.fkie.fraunhofer.de |
|
| Details | Domain | 17 | www.anomali.com |
|
| Details | Domain | 23 | www.intezer.com |
|
| Details | Domain | 19 | www.pwc.co.uk |
|
| Details | Domain | 6 | www.guardicore.com |
|
| Details | Domain | 22 | www.cbsnews.com |
|
| Details | Domain | 111 | www.justice.gov |
|
| Details | Domain | 83 | www.theguardian.com |
|
| Details | Domain | 4 | www.fastcompany.com |
|
| Details | Domain | 10 | dmarc.org |
|
| Details | Domain | 24 | www.businesswire.com |
|
| Details | Domain | 1 | www.parascript.com |
|
| Details | Domain | 84 | www.forbes.com |
|
| Details | Domain | 360 | attack.mitre.org |
|
| Details | Domain | 1 | www.silicon.co.uk |
|
| Details | Domain | 280 | thehackernews.com |
|
| Details | Domain | 21 | cyware.com |
|
| Details | Domain | 45 | www.bankinfosecurity.com |
|
| Details | Domain | 5 | blog.barracuda.com |
|
| Details | Domain | 4 | crn.com |
|
| Details | Domain | 154 | us-cert.cisa.gov |
|
| Details | Domain | 59 | www.cybereason.com |
|
| Details | Domain | 1 | iotnowtransport.com |
|
| Details | Domain | 3 | dzone.com |
|
| Details | Domain | 1 | blog.guardknox.com |
|
| Details | Domain | 2 | www.strategyanalytics.com |
|
| Details | Domain | 167 | www.ic3.gov |
|
| Details | Domain | 5 | www.ibtimes.com |
|
| Details | Domain | 30 | www.sciencedirect.com |
|
| Details | Domain | 1 | www.wmcactionnews5.com |
|
| Details | Domain | 1 | www.edmunds.com |
|
| Details | Domain | 89 | arstechnica.com |
|
| Details | Domain | 2 | argus-sec.com |
|
| Details | Domain | 2 | unece.org |
|
| Details | Domain | 5 | www2.deloitte.com |
|
| Details | Domain | 7 | docs.apwg.org |
|
| Details | Domain | 18 | apwg.org |
|
| Details | Domain | 397 | www.microsoft.com |
|
| Details | Domain | 5 | info.phishlabs.com |
|
| Details | Domain | 37 | cofense.com |
|
| Details | Domain | 370 | www.proofpoint.com |
|
| Details | Domain | 151 | www.bbc.com |
|
| Details | Domain | 1 | cpb-us-e1.wpmucdn.com |
|
| Details | Domain | 1 | sites.uw.edu |
|
| Details | Domain | 2 | www.brusselstimes.com |
|
| Details | Domain | 17 | www.nbcnews.com |
|
| Details | Domain | 14 | www.cbc.ca |
|
| Details | Domain | 1 | priv.gc.ca |
|
| Details | Domain | 1 | parl.ca |
|
| Details | Domain | 1 | www.justice.gc.ca |
|
| Details | Domain | 8 | www.publicsafety.gc.ca |
|
| Details | Domain | 29 | www.cnet.com |
|
| Details | Domain | 3 | vpnpro.com |
|
| Details | Domain | 1 | www.facilitiesnet.com |
|
| Details | Domain | 27 | apnews.com |
|
| Details | Domain | 37 | www.cnbc.com |
|
| Details | Domain | 2 | www.issa.org |
|
| Details | Domain | 7 | www.mirror.co.uk |
|
| Details | Domain | 6 | www.seattletimes.com |
|
| Details | Domain | 13 | www.who.int |
|
| Details | Domain | 1 | globalworkplaceanalytics.com |
|
| Details | File | 2 | y.ps |
|
| Details | File | 13 | extexport.exe |
|
| Details | File | 1260 | explorer.exe |
|
| Details | File | 252 | www.cs |
|
| Details | File | 1 | prevent-detect-and-recover-from-it.html |
|
| Details | File | 384 | www.inf |
|
| Details | File | 29 | www.geo |
|
| Details | File | 36 | resources.inf |
|
| Details | File | 1 | domain-admin.aspx |
|
| Details | File | 2 | blog_0x25.html |
|
| Details | File | 1 | blog_0x51.html |
|
| Details | File | 3 | blog_0x59.html |
|
| Details | File | 1 | blog_0x49.html |
|
| Details | File | 1 | blog_0x57.html |
|
| Details | File | 1 | up-after-wellmess.html |
|
| Details | File | 1 | advisory-apt29-targets-covid-19-vaccine-development.pdf |
|
| Details | File | 1 | anyrun-emotet-malware-analysis.html |
|
| Details | File | 1 | bbcylance_lc_q319_threat_report.pdf |
|
| Details | File | 1 | emotet-botnet-malware.html |
|
| Details | File | 1 | car-technology-and-privacy.html |
|
| Details | File | 1 | ece-trans-wp29-1073r27e.pdf |
|
| Details | File | 1 | new-cybersecurity-regulations-challenge-automobile-manufacturers.html |
|
| Details | File | 1 | apwg_trends_report_q1_2020.pdf |
|
| Details | File | 1 | cip_deepfakes_report_extended.pdf |
|
| Details | File | 1 | modern.html |
|
| Details | File | 30 | www.pub |
|
| Details | File | 1 | srtg-crtcl-nfrstrctr-eng.pdf |
|
| Details | File | 4 | what-is-zero-trust-a-model-for-more-effective-security.html |
|
| Details | File | 1 | bitcoin-btc-rally-extends-price-hits-record-high-above-37700.html |
|
| Details | Github username | 9 | xmrig |
|
| Details | Github username | 10 | bloodhoundad |
|
| Details | Github username | 11 | alessandroz |
|
| Details | Github username | 1 | skelsec |
|
| Details | Github username | 8 | jgamblin |
|
| Details | md5 | 1 | ab1c039a01d925ae481774f412396f5e |
|
| Details | md5 | 1 | 6b27c895df0abd532a4fb000c9d5d517 |
|
| Details | sha1 | 1 | 3273043e1ef9c0bb41bd9fcdc5317f7b797a2a94 |
|
| Details | IPv4 | 5 | 56.0.0.0 |
|
| Details | Threat Actor Identifier - APT | 132 | APT32 |
|
| Details | Threat Actor Identifier - APT | 297 | APT27 |
|
| Details | Threat Actor Identifier - APT | 665 | APT29 |
|
| Details | Threat Actor Identifier - APT | 144 | APT38 |
|
| Details | Threat Actor Identifier - FIN | 73 | FIN6 |
|
| Details | Url | 1 | https://blog.checkpoint.com/2020/03/05/update-coronavirus-themed-domains- |
|
| Details | Url | 4 | https://www.zdnet.com/article |
|
| Details | Url | 1 | https://www.domaintools.com/resources/blog |
|
| Details | Url | 1 | https://www.fcc.gov/how-identify-and-avoid-package-delivery-scams |
|
| Details | Url | 1 | https://cisomag.eccouncil.org/ransomware-attacks-rise-q1-2020 |
|
| Details | Url | 1 | https://blogs.blackberry.com/en/2020/05 |
|
| Details | Url | 1 | https://www.coveware.com/blog/q1-2020-ransomware-marketplace-report |
|
| Details | Url | 1 | https://www.investopedia.com/tech/how-does-bitcoin-mining-work |
|
| Details | Url | 1 | https://www.csoonline.com/article/3253572/what-is-cryptojacking-how-to- |
|
| Details | Url | 5 | https://github.com/xmrig/xmrig |
|
| Details | Url | 1 | https://www.darkreading.com/vulnerabilities---threats |
|
| Details | Url | 1 | https://cointelegraph.com/news |
|
| Details | Url | 1 | https://www.infosecurity-magazine.com/news |
|
| Details | Url | 1 | https://www.geoedge.com/exploit-kits-publisher-protection |
|
| Details | Url | 1 | https://www.zscaler.com/blogs/security-research |
|
| Details | Url | 1 | https://threatpost.com/microsoft-exploits-purple-fox-ek/157157 |
|
| Details | Url | 1 | https://resources.infosecinstitute.com/topic |
|
| Details | Url | 6 | https://www.cobaltstrike.com |
|
| Details | Url | 2 | https://www.darkreading.com/threat-intelligence |
|
| Details | Url | 1 | https://www.zdnet.com/google-amp/article |
|
| Details | Url | 5 | http://www.joeware.net/freetools/tools/adfind |
|
| Details | Url | 1 | https://www.darkreading.com/application-security/ransomware |
|
| Details | Url | 1 | https://www.advanced-intel.com/post |
|
| Details | Url | 6 | https://github.com/bloodhoundad/bloodhound |
|
| Details | Url | 1 | https://github.com/bloodhoundad/sharphound3 |
|
| Details | Url | 1 | https://mcpmag.com/articles/2019/11/13/bloodhound-active-directory- |
|
| Details | Url | 1 | https://www.andreafortuna.org/2020/09/17 |
|
| Details | Url | 1 | https://stealthbits.com/blog/zerologon-from-zero-to-hero-part-2 |
|
| Details | Url | 7 | https://github.com/alessandroz/lazagne |
|
| Details | Url | 1 | https://github.com/skelsec/pypykatz |
|
| Details | Url | 1 | https://www.ncsc.gov.uk/news |
|
| Details | Url | 1 | https://securityintelligence.com/posts |
|
| Details | Url | 1 | https://www.reuters.com/article/healthcare-coronavirus-astrazeneca-north |
|
| Details | Url | 2 | https://objective-see.com/blog/blog_0x25.html |
|
| Details | Url | 1 | https://objective-see.com/blog/blog_0x51.html |
|
| Details | Url | 1 | https://www.amnesty.org/en/latest/research/2020/09 |
|
| Details | Url | 3 | https://objective-see.com/blog/blog_0x59.html |
|
| Details | Url | 1 | https://objective-see.com/blog/blog_0x49.html |
|
| Details | Url | 1 | https://objective-see.com/blog/blog_0x57.html |
|
| Details | Url | 5 | https://github.com/jgamblin/mirai-source-code |
|
| Details | Url | 1 | https://whois.arin.net/rest/net/net-56-0-0-0-1/pft |
|
| Details | Url | 1 | https://krebsonsecurity.com/2016/09 |
|
| Details | Url | 1 | https://web.archive.org/web/20161022220033/http://hub.dyn.com/dyn-blog |
|
| Details | Url | 6 | https://threatpost.com |
|
| Details | Url | 1 | https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite |
|
| Details | Url | 1 | https://malpedia.caad.fkie.fraunhofer.de/details/elf.tsunami |
|
| Details | Url | 2 | https://www.anomali.com/blog |
|
| Details | Url | 1 | https://www.intezer.com/blog |
|
| Details | Url | 1 | https://www.pwc.co.uk/issues/cyber-security-services/insights/cleaning- |
|
| Details | Url | 1 | https://www.ncsc.gov.uk/files |
|
| Details | Url | 1 | https://www.guardicore.com/2020/08 |
|
| Details | Url | 1 | https://www.cbsnews.com/news |
|
| Details | Url | 2 | https://www.justice.gov/opa/press-release/file/1328521/download |
|
| Details | Url | 1 | https://www.theguardian.com/us-news/2020/sep/04 |
|
| Details | Url | 1 | https://www.fastcompany.com/90372829 |
|
| Details | Url | 1 | https://dmarc.org/wiki |
|
| Details | Url | 1 | https://www.businesswire.com/news/home/20201022005020/en |
|
| Details | Url | 1 | https://www.parascript.com/blog |
|
| Details | Url | 7 | https://www.forbes.com/sites |
|
| Details | Url | 2 | https://www.blackberry.com/us/en/forms/enterprise/bahamut-report |
|
| Details | Url | 2 | https://attack.mitre.org/software/s0367 |
|
| Details | Url | 1 | https://www.silicon.co.uk/security/cyberwar |
|
| Details | Url | 1 | https://thehackernews.com/2020/11/anyrun-emotet-malware-analysis.html |
|
| Details | Url | 3 | https://cyware.com/news |
|
| Details | Url | 2 | https://www.bankinfosecurity.com |
|
| Details | Url | 1 | https://blog.barracuda.com/2020/06/19 |
|
| Details | Url | 1 | https://i.crn.com/sites/default/files/ckfinderimages/userfiles/images |
|
| Details | Url | 1 | https://us-cert.cisa.gov/ncas/alerts/ta18-201a |
|
| Details | Url | 1 | https://www.cybereason.com/blog |
|
| Details | Url | 1 | https://thehackernews.com/2020/08/emotet-botnet-malware.html |
|
| Details | Url | 1 | https://iotnowtransport.com/2019/04/09 |
|
| Details | Url | 1 | https://dzone.com/articles |
|
| Details | Url | 1 | https://blog.guardknox.com |
|
| Details | Url | 1 | https://www.strategyanalytics.com/strategy-analytics/blogs/automotive |
|
| Details | Url | 1 | https://www.ic3.gov/media/y2016/psa160317 |
|
| Details | Url | 1 | https://www.ibtimes.com |
|
| Details | Url | 1 | https://www.sciencedirect.com/science/article/pii/s221420961930261x |
|
| Details | Url | 1 | https://www.wmcactionnews5.com/story/39022826 |
|
| Details | Url | 1 | https://www.edmunds.com/car-technology/car-technology-and-privacy.html |
|
| Details | Url | 1 | https://arstechnica.com/information-technology/2019/10 |
|
| Details | Url | 1 | https://www.theguardian.com/technology/2020/feb/18 |
|
| Details | Url | 1 | https://argus-sec.com/unece-wp29-approved |
|
| Details | Url | 1 | https://unece.org/dam/trans/doc/2020/wp29/ece-trans-wp29-1073r27e.pdf |
|
| Details | Url | 1 | https://unece.org/press/un-regulations-cybersecurity-and-software- |
|
| Details | Url | 1 | https://www2.deloitte.com/global/en/blog/responsible-business-blog/2020 |
|
| Details | Url | 1 | https://docs.apwg.org/reports/apwg_trends_report_q1_2020.pdf |
|
| Details | Url | 4 | https://apwg.org/trendsreports |
|
| Details | Url | 1 | https://www.microsoft.com/security/blog/2020/07/08 |
|
| Details | Url | 1 | https://info.phishlabs.com/blog |
|
| Details | Url | 1 | https://cofense.com/mfa-bypass-phish-caught-oauth2-grants- |
|
| Details | Url | 2 | https://www.proofpoint.com/us/blog/threat-insight |
|
| Details | Url | 1 | https://www.bbc.com/news/technology-48908736 |
|
| Details | Url | 1 | https://www.forbes.com/sites/daveywinder/2019/10/08 |
|
| Details | Url | 1 | https://cpb-us-e1.wpmucdn.com/sites.uw.edu/dist/6/4560/files/2020/10 |
|
| Details | Url | 1 | https://www.brusselstimes.com/news/belgium-all-news/politics/106320 |
|
| Details | Url | 1 | https://www.nbcnews.com/tech/tech-news/russian-internet-trolls-hired-u-s- |
|
| Details | Url | 1 | https://www.cbc.ca/news/canada/montreal |
|
| Details | Url | 1 | https://priv.gc.ca/en/opc-actions-and-decisions/investigations |
|
| Details | Url | 1 | https://parl.ca/documentviewer/en/43-2/bill/c-11 |
|
| Details | Url | 1 | https://www.justice.gc.ca/eng/csj-sjc/pa-lprp/modern.html |
|
| Details | Url | 1 | https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/srtg-crtcl-nfrstrctr |
|
| Details | Url | 3 | https://www.cnet.com |
|
| Details | Url | 1 | https://vpnpro.com/blog |
|
| Details | Url | 1 | https://www.csoonline.com/article/3247848 |
|
| Details | Url | 1 | https://www.blackberry.com/us/en/solutions/zero-trust |
|
| Details | Url | 1 | https://www.facilitiesnet.com/buildingautomation/tip |
|
| Details | Url | 2 | https://www.coveware.com/blog/q3-2020-ransomware-marketplace-report |
|
| Details | Url | 1 | https://krebsonsecurity.com/2020/11 |
|
| Details | Url | 1 | https://apnews.com/article/psychotherapy-cabinets-finland- |
|
| Details | Url | 1 | https://www.cnbc.com/2021/01/07 |
|
| Details | Url | 1 | https://www.issa.org |
|
| Details | Url | 2 | https://us-cert.cisa.gov/ncas/alerts/aa20-099a |
|
| Details | Url | 1 | https://www.mirror.co.uk/tech |
|
| Details | Url | 1 | https://www.cnet.com/health |
|
| Details | Url | 1 | https://www.seattletimes.com/seattle-news |
|
| Details | Url | 2 | https://www.cnet.com/news |
|
| Details | Url | 1 | https://www.cnet.com/news/man-charged-in-katrina-web-scam |
|
| Details | Url | 1 | https://threatpost.com/coronavirus-themed-cyberattacks-persists/153493 |
|
| Details | Url | 1 | https://www.who.int/about/communications/cyber-security |
|
| Details | Url | 1 | https://globalworkplaceanalytics.com |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ab1c039a01d925ae481774f412396f5e |
|
| Details | Windows Registry Key | 1 | HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion |
|
| Details | Windows Registry Key | 3 | HKEY_CURRENT_USER\SOFTWARE\Wacatac |
|
| Details | CVE | 217 | cve-2020-1472 |
|
| Details | Domain | 37 | www.blackberry.com |
|
| Details | Domain | 2 | myipaddress.com |
|
| Details | Domain | 79 | blog.checkpoint.com |
|
| Details | Domain | 175 | www.zdnet.com |
|
| Details | Domain | 16 | www.domaintools.com |
|
| Details | Domain | 10 | www.fcc.gov |
|
| Details | Domain | 4 | cisomag.eccouncil.org |
|
| Details | Domain | 53 | blogs.blackberry.com |
|
| Details | Domain | 16 | www.coveware.com |
|
| Details | Domain | 12 | www.investopedia.com |
|
| Details | Domain | 54 | www.csoonline.com |
|
| Details | Domain | 4127 | github.com |