SEO Poisoning Campaigns Target Browser Installers and Crypto Sites, Spreading Poseidon, GhostRAT & More
Tags
Common Information
Type | Value |
---|---|
UUID | 28ad0a3a-99ab-48c8-bd74-e80ab1f94a31 |
Fingerprint | a01c8959c93aa516 |
Analysis status | DONE |
Considered CTI value | 2 |
Text language | |
Published | Oct. 3, 2024, midnight |
Added to db | Oct. 9, 2024, 8:27 p.m. |
Last updated | Nov. 14, 2024, 4:12 p.m. |
Headline | SEO Poisoning Campaigns Target Browser Installers and Crypto Sites, Spreading Poseidon, GhostRAT & More |
Title | SEO Poisoning Campaigns Target Browser Installers and Crypto Sites, Spreading Poseidon, GhostRAT & More |
Detected Hints/Tags/Attributes | 51/4/16 |
Source URLs
URL Provider
Details | Provider | Source level domain |
---|---|---|
Details | hunt.io | hunt.io |
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 1 | tradingview.zip |
|
Details | Domain | 1 | aicoin.la |
|
Details | Domain | 57 | hunt.io |
|
Details | File | 1 | sleipnir_setup.dmg |
|
Details | File | 1 | tradingview.zip |
|
Details | File | 2 | tradingview.exe |
|
Details | File | 1 | aicoin.apk |
|
Details | File | 1 | aicoin.dmg |
|
Details | File | 1 | signalsetup.msi |
|
Details | sha1 | 1 | 7f9f68c91675e06745c7567d3baa563616fe8b7d |
|
Details | sha1 | 1 | b91d8478178eb80c1b490fe62fa534aaef47c154 |
|
Details | sha1 | 1 | 71b510fa5dc20fd55218c1decf3db65b0f4c9377 |
|
Details | sha1 | 1 | 7c73f1df9d1f9708bcf84617c52ef3c4fe9ce87c |
|
Details | sha1 | 1 | 91ddde751f30248348d70511de79ec394d5ed33f |
|
Details | sha1 | 1 | 3426ce901e21b195e4609153c509b595b71edeb2 |
|
Details | Url | 1 | http://79.137.192_4/p2p |