Phishing Web Server Identified Through an Impostor National Tax Service Email - ASEC BLOG
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Email Account - T1087.003 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID 2d79936a-472e-4810-8832-7a16f55555eb
Fingerprint a616aedb0356a107
Analysis status DONE
Considered CTI value 0
Text language
Published Jan. 17, 2023, 9:29 a.m.
Added to db Oct. 24, 2023, 1:31 p.m.
Last updated Nov. 7, 2024, 6:03 a.m.
Headline Phishing Web Server Identified Through an Impostor National Tax Service Email
Title Phishing Web Server Identified Through an Impostor National Tax Service Email - ASEC BLOG
Detected Hints/Tags/Attributes 32/2/11
Source URLs
Redirection Url
Details Source https://asec.ahnlab.com/en/45669/
URL Provider
Details Provider Source level domain
Details ahnlab.com asec.ahnlab.com
Attributes
Details Type #Events CTI Value
Details Domain 3 
ud.com
Details File 4 
logsinfo.html
Details File 9 
gen.php
Details File 2 
mainnet.php
Details File 42 
login.html
Details File 8 
login.txt
Details File 2 
account_verify.txt
Details File 2 
credit_verify.txt
Details Url 1 
https://cloudflare-ipfs.com/ipfs/qmrgn9xhykcogyj39wqbwfyo7mz2dtjeh1h9rq5hcybqga?filename=logsinfo.html#[user
Details Url 3 
https://jy****ud.com/service2/online/dollar/sure/logs/gen.php
Details Url 2 
https://cloudflare-ipfs.com/ipfs/qmrgn9xhykcogyj39wqbwfyo7mz2dtjeh1h9rq5hcybqga?filename=logsinfo.html#