Phishy Basic Authentication prompts
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 117e3e4c-b842-4eea-9a37-674ac1c99fe6
Fingerprint ba0be39a8bfd33d1
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 6, 2017, 5:21 p.m.
Added to db Feb. 17, 2023, 11:13 p.m.
Last updated Nov. 17, 2024, 6:30 p.m.
Headline Phishy Basic Authentication prompts
Title Phishy Basic Authentication prompts
Detected Hints/Tags/Attributes 44/2/22
Source URLs
Redirection Url
Details Source https://securitycafe.ro/2017/09/06/phishy-basic-authentication-prompts/
URL Provider
Details Provider Source level domain
Details securitycafe.ro securitycafe.ro
Attributes
Details Type #Events CTI Value
Details Domain 3 
targetdomain.com
Details Domain 1 
targetdomain.co
Details Domain 1 
target-domain.com
Details Domain 1 
targetdomain-oauth.com
Details Domain 1 
targetdomain-cdn.com
Details Domain 1 
targetdomain-images.com
Details Domain 1 
login-targetdomain.com
Details Domain 1 
kpmgsecurity.files.wordpress.com
Details Domain 707 
google.com
Details Domain 4 
google.es
Details Domain 330 
facebook.com
Details Domain 3 
fbcdn.net
Details Domain 1373 
twitter.com
Details File 1 
image.html
Details File 1 
basicauth.php
Details File 7 
cat.jpg
Details File 3 
link.html
Details File 5 
newtab.html
Details File 2 
landingpage.html
Details Url 1 
http://target-domain.com/basicauth.php
Details Url 1 
https://kpmgsecurity.files.wordpress.com/2017/06/cat.jpg
Details Url 1 
http://target-domain.com/landingpage.html