“MasquerAds” — Google’s Ad-Words Massively Abused by Threat Actors, Targeting Organizations, GPUs…
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Gpu Hardware Code Repositories - T1213.003 Code Repositories - T1593.003 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID 17bd0eb9-8cd0-4645-be92-baf39b4ccf87
Fingerprint 960196aa8a607a9
Analysis status DONE
Considered CTI value 2
Text language
Published Dec. 28, 2022, 1:59 p.m.
Added to db Dec. 28, 2022, 3:14 p.m.
Last updated Nov. 15, 2024, 7:44 a.m.
Headline “MasquerAds” — Google’s Ad-Words Massively Abused by Threat Actors, Targeting Organizations, GPUs and Crypto Wallets
Title “MasquerAds” — Google’s Ad-Words Massively Abused by Threat Actors, Targeting Organizations, GPUs…
Detected Hints/Tags/Attributes 46/2/13
Source URLs
Redirection Url
Details Source https://labs.guard.io/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e
Details Source https://labs.guard.io/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e?gi=462cac06d2b5&source=rss------malvertising-5
Details Redirection https://labs.guard.io/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e?gi=5c0675dbe6d6&source=rss------malvertising-5
Details Redirection https://labs.guard.io/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e?gi=6b8ff71df113&source=rss------malvertising-5
Details Source https://labs.guard.io/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e?gi=88065a30b6ce&source=rss------malvertising-5
Details Source https://labs.guard.io/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e?gi=8f56904e6328&source=rss------malvertising-5
Details Source https://labs.guard.io/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e?gi=d65a72461e23&source=rss------malvertising-5
Details Redirection https://labs.guard.io/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e?gi=fae9aa16551d&source=rss------malvertising-5
Details Redirection https://labs.guard.io/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e?source=rss------malvertising-5
Details Source https://medium.com/@guardiosecurity/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e?source=rss------cybersecurity-5
Details Redirection https://medium.com/@guardiosecurity/masquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e?source=rss------malvertising-5
Details Source https://medium.com/m/global-identity-2?redirectUrl=https%3A%2F%2Flabs.guard.io%2Fmasquerads-googles-ad-words-massively-abused-by-threat-actors-targeting-organizations-gpus-42ae73ee8a1e%3Fsource%3Drss------malvertising-5
URL Provider
Details Provider Source level domain
Details guard.io labs.guard.io
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Details 170 ✔ Malvertising on Medium https://medium.com/feed/tag/Malvertising 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
grammalry.org
Details Domain 1 
gramm-arly.com
Details Domain 1 
gramnarly.com
Details Domain 1 
afterbern.live
Details Domain 219 
gist.github.com
Details File 1 
18.exe
Details Github username 1 
guardiolabs
Details md5 1 
2178c54367d20b0655b5cc5e9d297760
Details md5 1 
7f46d1adda8b0c08e76f23d9fab27fe9
Details sha256 1 
3baf692a1589355af206f4e3886a09fe8997f0b62c78c1403556285eaba40e94
Details Url 1 
https://www.virustotal.com/gui/file/3baf692a1589355af206f4e3886a09fe8997f0b62c78c1403556285eaba40e94/detection
Details Url 1 
https://gist.github.com/guardiolabs/2178c54367d20b0655b5cc5e9d297760
Details Url 1 
https://gist.github.com/guardiolabs/7f46d1adda8b0c08e76f23d9fab27fe9