Phony Bitwarden password manager sites hosting ZenRAT malware
Tags
country: Belarus Kazakhstan Kyrgyzstan Moldova Ukraine
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Password Managers - T1555.005 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID 120dee4d-047c-4c49-90ff-aa5c67f46033
Fingerprint 31a4393d0f1a24ad
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 29, 2023, 1:41 p.m.
Added to db Oct. 16, 2024, 3:05 a.m.
Last updated Oct. 16, 2024, 3:06 a.m.
Headline Phony Bitwarden password manager sites hosting ZenRAT malware
Title Phony Bitwarden password manager sites hosting ZenRAT malware
Detected Hints/Tags/Attributes 24/3/2
Source URLs
Redirection Url
Details Source https://fieldeffect.com/blog/phony-bitwarden-password-manager-sites-hosting-zenrat-malware
URL Provider
Details Provider Source level domain
Details fieldeffect.com fieldeffect.com
Attributes
Details Type #Events CTI Value
Details Domain 6 
bitwariden.com
Details Domain 5 
crazygameis.com