Malicious DNS in the News - DNS Early Detection - Lumma C2 | Infoblox
Tags
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Keychain - T1634.001 Keychain - T1555.001 Keychain - T1579 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Whois - T1596.002 Browser Extensions - T1176 Keychain - T1142
Show in Graph
Common Information
Type Value
UUID 12f6b5e7-f1d2-44f3-abba-51a0e05ab45c
Fingerprint a0d805d14e1ebf48
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 6, 2023, 1 p.m.
Added to db Nov. 19, 2023, 6 a.m.
Last updated Nov. 16, 2024, 11:13 a.m.
Headline Malicious DNS in the News
Title Malicious DNS in the News - DNS Early Detection - Lumma C2 | Infoblox
Detected Hints/Tags/Attributes 49/3/8
Source URLs
Redirection Url
Details Source https://blogs.infoblox.com/cyber-threat-intelligence/malicious-dns-in-the-news/
URL Provider
Details Provider Source level domain
Details infoblox.com blogs.infoblox.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 61 ✔ Infoblox Blog https://blogs.infoblox.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 14 
www.infoblox.com
Details Domain 36 
media.defense.gov
Details File 384 
www.inf
Details File 4 
dns_uoo117652-21.pdf
Details Url 1 
https://www.infoblox.com/cyber-threat-intelligence
Details Url 3 
https://www.infoblox.com/products/bloxone-threat-defense
Details Url 1 
https://www.infoblox.com/products/advanced-dns-protection
Details Url 4 
https://media.defense.gov/2021/mar/03/2002593055/-1/-1/0/csi_protective