Snowblind: The Invisible Hand of Secret Blizzard - Lumen Blog
Tags
country: Afghanistan India Pakistan Russia United States Of America
attack-pattern: Data Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Hardware - T1592.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Social Media - T1593.001 Tool - T1588.002 Connection Proxy - T1090 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID 01de6744-de86-4532-8d16-54b89598ae18
Fingerprint 26649391b831d7e9
Analysis status DONE
Considered CTI value 1
Text language
Published Dec. 4, 2024, 4:55 p.m.
Added to db Dec. 4, 2024, 6:45 p.m.
Last updated Dec. 17, 2024, 1:34 p.m.
Headline Snowblind: The Invisible Hand of Secret Blizzard
Title Snowblind: The Invisible Hand of Secret Blizzard - Lumen Blog
Detected Hints/Tags/Attributes 77/2/40
Source URLs
Redirection Url
Details Source https://blog.centurylink.com/snowblind-the-invisible-hand-of-secret-blizzard/?utm_source=rss&utm_medium=rss&utm_campaign=snowblind-the-invisible-hand-of-secret-blizzard
Details Source https://blog.lumen.com/snowblind-the-invisible-hand-of-secret-blizzard/?utm_source=rss&utm_medium=rss&utm_campaign=snowblind-the-invisible-hand-of-secret-blizzard
Details Source https://blog.lumen.com/snowblind-the-invisible-hand-of-secret-blizzard/
URL Provider
Details Provider Source level domain
Details centurylink.com blog.centurylink.com
Details lumen.com blog.lumen.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 25 ✔ Lumen https://blog.centurylink.com/feed/ 2024-08-30 22:08
Details 39 ✔ Lumen https://blog.lumen.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details IPv4 2 
185.217.125.195
Details IPv4 4 
209.126.6.227
Details IPv4 6 
209.126.81.42
Details IPv4 6 
146.70.158.90
Details IPv4 6 
162.213.195.129
Details IPv4 3 
146.70.81.81
Details IPv4 6 
154.53.42.194
Details IPv4 6 
66.219.22.252
Details IPv4 3 
66.219.22.102
Details IPv4 4 
144.126.152.205
Details IPv4 8 
185.229.119.60
Details IPv4 8 
164.68.108.153
Details IPv4 3 
209.126.7.8
Details IPv4 3 
154.38.160.218
Details IPv4 4 
144.126.154.84
Details IPv4 3 
162.213.195.192
Details IPv4 6 
173.212.252.2
Details IPv4 3 
185.213.27.94
Details IPv4 3 
167.86.113.241
Details IPv4 6 
109.123.244.46
Details IPv4 3 
23.88.26.187
Details IPv4 3 
173.249.7.111
Details IPv4 3 
62.171.153.221
Details IPv4 3 
149.102.140.36
Details IPv4 2 
167.88.183.238
Details IPv4 5 
143.198.73.108
Details IPv4 2 
182.188.171.52
Details IPv4 3 
38.242.219.13
Details IPv4 6 
5.189.183.63
Details IPv4 3 
38.242.211.87
Details IPv4 6 
45.14.194.253
Details IPv4 4 
173.212.206.227
Details IPv4 3 
209.145.52.172
Details IPv4 6 
130.185.119.198
Details IPv4 4 
173.249.18.251
Details IPv4 6 
176.57.184.97
Details IPv4 6 
209.126.11.251
Details IPv4 13 
144.91.72.17
Details IPv4 3 
84.247.181.64
Details Microsoft Threat Actor Naming Taxonomy (Groups in development) 28 
Storm-0156