How adversaries use politics for compromise
Tags
country: China North Korea Russia
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Dynamic Data Exchange - T1559.002 Malware - T1587.001 Malware - T1588.001 Network Security Appliances - T1590.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Dynamic Data Exchange - T1173
Show in Graph
Common Information
Type Value
UUID 1652de3b-f316-458e-9e53-7f52acec2a14
Fingerprint af6a99098c7f83c3
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 5, 2019, 9 a.m.
Added to db Oct. 9, 2022, 4:10 p.m.
Last updated Nov. 14, 2024, 2:04 p.m.
Headline Vulnerability Information
Title How adversaries use politics for compromise
Detected Hints/Tags/Attributes 90/2/18
Source URLs
Redirection Url
Details Source https://blog.talosintelligence.com/2019/11/political-malware.html
URL Provider
Details Provider Source level domain
Details talosintelligence.com blog.talosintelligence.com
Attributes
Details Type #Events CTI Value
Details Domain 904 
snort.org
Details File 2 
trump.exe
Details File 1 
papa-putin.exe
Details File 3 
korea.doc
Details File 1 
trump_administration_economic_indicators_on_china_investments.xls
Details sha256 1 
6a60cd318d1bbae691afa685e1b21799fa62c2581231309bc4d6d2a88270fbeb
Details sha256 1 
057635f414ae4f9febeca5e6325c9d0e3c3b2e4119e6e6032ea13744e031df01
Details sha256 1 
47ffdd88735c5c9d20370b4a0b6b4aaabeaaa13b40ac488ecca788d5e7ee491f
Details sha256 1 
2bb693e06f54026a74b07fec0aa7c61bbfeb31124be2e5642f6afd83922f28f2
Details sha256 1 
c12da1253c554b1b952eb3fa45818e267c2ccccf2147981ac3c31bbcb5d84c23
Details sha256 1 
b01718fd2c768e9564fb087ab560f91b85cfd46eab25987ca15c6ba01848e09f
Details sha256 1 
545a0756449ee6ef221b397308ceca8c81e63d4eb914406a525c9ef7f009cce8
Details sha256 1 
60fff84d43d1a18494d44b9bdb9776a71f6cc30373c8fbb663877ab7e28a7581
Details sha256 2 
4cea9dbc941756f7298521104001bc20cb73cfdda06a60a9e90760188661f5e4
Details sha256 1 
df2ea575168063c53454b5f07f2741d728276309049a5b8906948cbc653fea71
Details sha256 1 
d7ef08aabb432d58ddc6a5a6c286c3b729c9085a987e46a6a82652fff4461ef2
Details sha256 1 
1b7d1e76d23cc48e3d3546902ec46c77c891453ce997adebe9a353774cc94efd
Details sha256 1 
bf1a40987d0040ba0672cce074e583132b1a9f559692cd597e8319d94eebca81