The Feed 2025–01–09
Tags
cmtmf-attack-pattern: Masquerading
country: North Korea
maec-delivery-vectors: Watering Hole
attack-pattern: Data Cloud Api - T1059.009 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Javascript - T1059.007 Keychain - T1634.001 Keychain - T1555.001 Keychain - T1579 Malicious Link - T1204.001 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Phishing - T1660 Phishing - T1566 Python - T1059.006 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Web Shell - T1505.003 Tool - T1588.002 Vulnerabilities - T1588.006 Keychain - T1142 Masquerading - T1036 Scripting - T1064 Web Shell - T1100 Masquerading Scripting
Show in Graph
Common Information
Type Value
UUID 13fc45ac-eb53-4879-8271-1076761b74b3
Fingerprint 94a411d1890bb7c5
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 9, 2025, 9:59 a.m.
Added to db Jan. 9, 2025, 11:22 a.m.
Last updated Jan. 17, 2025, 5:03 p.m.
Headline The Feed 2025–01–09
Title The Feed 2025–01–09
Detected Hints/Tags/Attributes 113/4/38
Source URLs
Redirection Url
Details Source https://medium.com/@lovable_chestnut_chinchilla_54/the-feed-2025-01-09-2157f5c3c871?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 13 
cve-2024-52875
Details CVE 55 
cve-2024-49113
Details CVE 66 
cve-2025-0282
Details CVE 49 
cve-2025-0283
Details Domain 5 
verify-trezor.io
Details Domain 2 
17505-apple.com
Details Domain 2 
commandandcontrolserver.com
Details Domain 2 
thebackendserver.com
Details Domain 3 
lookoutsucks.com
Details Domain 39 
domaintools.com
Details Domain 222 
krebsonsecurity.com
Details Domain 2 
karmainsecurity.com
Details Domain 7 
dsupgrade.pm
Details Domain 3 
dsauth.pm
Details Domain 14 
duosecurity.com
Details Domain 79 
cloud.google.com
Details Domain 2 
chromeupdatealert.app
Details Domain 2 
api.camera-drive.cloud
Details Domain 2 
api.nvidia-cloud.online
Details Domain 26 
gbhackers.com
Details File 3 
addcertexception.cs
Details File 3 
guestconfirm.cs
Details File 3 
expiration.cs
Details File 2 
2615.jar
Details File 1 
3191.jar
Details File 1 
3221.jar
Details File 2 
3431.jar
Details md5 2 
e7d24813535f74187db31d4114f607a1
Details md5 2 
d18e5425ecd9608ecb992606b974e15d
Details md5 1 
61bb586dc4e047ab081ef6ca65684e48
Details sha256 2 
60ec2dbe8cfacdff1d4eb093032b0307e52cc68feb1f67487d9f401017c3edd7
Details sha256 2 
b72653bf747b962c67a5999afbc1d9156e1758e4ad959412ed7385abaedb21b6
Details IPv4 2 
216.74.123.191
Details Url 1 
https://krebsonsecurity.com/2025/01/a-day-in-the-life-of-a-prolific-voice-phishing-crew
Details Url 1 
https://karmainsecurity.com/hacking-kerio-control-via-cve-2024-52875
Details Url 5 
https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day
Details Url 1 
https://gbhackers.com/north-korean-hackers-wipe-cryptocurrency-wallets-via-fake-job-interviews
Details Url 1 
https://www.welivesecurity.com/en/business-security/state-aligned-apt-groups-increasingly-deploying-ransomware