Salt Typhoon Targets Telecommunications With GhostSpider Malware
Tags
attack-pattern: Credentials - T1589.001 Dll Search Order Hijacking - T1574.001 Malware - T1587.001 Malware - T1588.001 Regsvr32 - T1218.010 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006 Dll Search Order Hijacking - T1038 Regsvr32 - T1117 Rootkit - T1014 Rootkit
Show in Graph
Common Information
Type Value
UUID 201c38e9-05b8-48e8-af37-93475859c88c
Fingerprint 7008a514c39e7c0
Analysis status DONE
Considered CTI value 1
Text language
Published Nov. 27, 2024, 4:49 a.m.
Added to db Nov. 27, 2024, 12:45 p.m.
Last updated Dec. 4, 2024, 5:49 p.m.
Headline Salt Typhoon Targets Telecommunications With GhostSpider Malware
Title Salt Typhoon Targets Telecommunications With GhostSpider Malware
Detected Hints/Tags/Attributes 43/1/2
Source URLs
Redirection Url
Details Source https://www.pcrisk.com/internet-threat-news/31617-salt-typhoon-targets-telecommunications-with-ghostspider-malware
URL Provider
Details Provider Source level domain
Details pcrisk.com www.pcrisk.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 350 ✔ Internet threat news https://www.pcrisk.com/internet-threat-news?format=feed&type=rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 472 
regsvr32.exe
Details Mandiant Uncategorized Groups 24 
UNC2286