New Python NodeStealer Attacking Facebook Business To Steal Login Credentials
Tags
cmtmf-attack-pattern: Masquerading
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Javascript - T1059.007 Malicious Link - T1204.001 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006 Masquerading - T1036 Powershell - T1086 Masquerading
Show in Graph
Common Information
Type Value
UUID 245d9f28-4176-490b-8777-e57a196616b4
Fingerprint 84ae2d198f7fef43
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 23, 2024, 10:51 a.m.
Added to db Dec. 23, 2024, 12:08 p.m.
Last updated Dec. 23, 2024, 1:14 p.m.
Headline New Python NodeStealer Attacking Facebook Business To Steal Login Credentials
Title New Python NodeStealer Attacking Facebook Business To Steal Login Credentials
Detected Hints/Tags/Attributes 39/3/10
Source URLs
Redirection Url
Details Source https://gbhackers.com/python-nodestealer-attack/
URL Provider
Details Provider Source level domain
Details gbhackers.com gbhackers.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 125 ✔ GBHackers Security | #1 Globally Trusted Cyber Security News Platform https://gbhackers.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
052881.zip
Details Domain 1170 
any.run
Details File 2 
052881.zip
Details File 2 
ghelper.dll
Details File 3 
oledlg.dll
Details File 2 
052881.exe
Details File 2 
hpreaderfprefs.dat
Details File 2 
active-license.bat
Details File 2 
license-key.exe
Details File 2 
license.rar