Meet the JS-Sniffers 4: CoffeMokko Family
Tags
attack-pattern: Data Direct Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID 1ecdb0af-4734-4ad9-aeba-9b4559d1a239
Fingerprint be903dd38155e686
Analysis status DONE
Considered CTI value 0
Text language
Published April 26, 2019, midnight
Added to db Aug. 30, 2024, 11:31 p.m.
Last updated Nov. 19, 2024, 8:52 p.m.
Headline UNKNOWN
Title Meet the JS-Sniffers 4: CoffeMokko Family
Detected Hints/Tags/Attributes 38/1/14
Source URLs
Redirection Url
Details Source https://blog.group-ib.com/coffemokko
URL Provider
Details Provider Source level domain
Details group-ib.com blog.group-ib.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 36 ✔ Blog Group-IB https://blog.group-ib.com/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
slickjs.org
Details Domain 2 
sagecdn.org
Details Domain 10 
www.riskiq.com
Details Domain 1 
js-cdn.link
Details Domain 1 
link-js.link
Details Domain 1 
info-js.link
Details Domain 1 
track-js.link
Details Domain 1 
map-js.link
Details Domain 1 
smart-js.link
Details File 1212 
index.php
Details File 1 
slick.js
Details File 3 
mage.js
Details File 1 
mag.php
Details Url 1 
https://www.riskiq.com/blog/labs/magecart-keylogger-injection