Google Doc CloudPhishing Worm Attack Technical Analysis
Tags
cmtmf-attack-pattern: Masquerading
maec-delivery-vectors: Watering Hole
attack-pattern: Data Cloud Services - T1021.007 Domains - T1583.001 Domains - T1584.001 Email Account - T1087.003 Email Accounts - T1585.002 Email Accounts - T1586.002 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Phishing - T1660 Phishing - T1566 Software - T1592.002 Masquerading - T1036 Masquerading
Show in Graph
Common Information
Type Value
UUID 2c1138ad-a2e2-4829-94ed-c2b1ef6c9dbf
Fingerprint 2d208fda853e28c9
Analysis status DONE
Considered CTI value 0
Text language
Published May 4, 2017, 3:34 p.m.
Added to db Jan. 18, 2023, 11:31 p.m.
Last updated Nov. 19, 2024, 5:08 a.m.
Headline Google Doc CloudPhishing Worm Attack Technical Analysis
Title Google Doc CloudPhishing Worm Attack Technical Analysis
Detected Hints/Tags/Attributes 43/3/11
Source URLs
Redirection Url
Details Source https://www.netskope.com/blog/google-doc-cloudphishing-worm-attack-technical-analysis/
URL Provider
Details Provider Source level domain
Details netskope.com www.netskope.com
Attributes
Details Type #Events CTI Value
Details Domain 2 
docscloud.download
Details Domain 3 
docscloud.info
Details Domain 2 
docscloud.win
Details Domain 2 
gdocs.download
Details Domain 2 
g-docs.pro
Details Domain 2 
gdocs.pro
Details Domain 2 
gdocs.win
Details Domain 2 
g-cloud.win
Details Domain 2 
g-cloud.pro
Details Domain 1179 
gmail.com
Details File 14 
g.php