Unmasking Malware Through IP Tracking: How Attackers Exploit IP and Geo-Location Data to Target Your Network
Tags
| cmtmf-attack-pattern: | Location Tracking |
| attack-pattern: | Data Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Location Tracking - T1430 Malware - T1587.001 Malware - T1588.001 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 29eb048a-0ccb-48ce-92d0-50afdb65887d |
| Fingerprint | e7201b51b97326d1 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Sept. 23, 2024, 9:17 a.m. |
| Added to db | Sept. 24, 2024, 12:30 a.m. |
| Last updated | Nov. 17, 2024, 10:40 p.m. |
| Headline | Unmasking Malware Through IP Tracking: How Attackers Exploit IP and Geo-Location Data to Target Your Network |
| Title | Unmasking Malware Through IP Tracking: How Attackers Exploit IP and Geo-Location Data to Target Your Network |
| Detected Hints/Tags/Attributes | 34/2/17 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 226 | ✔ | Security Boulevard | https://securityboulevard.com/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 123 | ipinfo.io |
|
| Details | Domain | 33 | ipecho.net |
|
| Details | Domain | 129 | api.ipify.org |
|
| Details | Domain | 40 | checkip.amazonaws.com |
|
| Details | Domain | 38 | wtfismyip.com |
|
| Details | Domain | 62 | icanhazip.com |
|
| Details | Domain | 28 | wigle.net |
|
| Details | Domain | 47 | checkip.dyndns.org |
|
| Details | Domain | 39 | api.2ip.ua |
|
| Details | Domain | 1 | api.bigdatacloud.net |
|
| Details | Domain | 1 | db-ip.com |
|
| Details | Domain | 95 | ip-api.com |
|
| Details | Domain | 11 | freegeoip.app |
|
| Details | Domain | 7 | veriti.ai |
|
| Details | File | 2126 | cmd.exe |
|
| Details | File | 14 | veriti.ai |
|
| Details | Url | 1 | https://veriti.ai/blog/veriti-research/unmasking-malware-through-ip-tracking |