Iranian Hackers Spotted Using a new DNS Hijacking Malware in Recent Attacks
Tags
country: Iran Slovakia
attack-pattern: Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID 2d9a53e1-2662-4a50-9fbe-55c0a039f289
Fingerprint 5bc1d09a3338417
Analysis status DONE
Considered CTI value 1
Text language
Published June 13, 2022, 9:09 a.m.
Added to db Jan. 18, 2023, 10:37 p.m.
Last updated Nov. 13, 2024, 7:21 p.m.
Headline Iranian Hackers Spotted Using a new DNS Hijacking Malware in Recent Attacks
Title Iranian Hackers Spotted Using a new DNS Hijacking Malware in Recent Attacks
Detected Hints/Tags/Attributes 33/2/4
Source URLs
Redirection Url
Details Source https://thehackernews.com/2022/06/iranian-hackers-spotted-using-new-dns.html
URL Provider
Details Provider Source level domain
Details thehackernews.com thehackernews.com
Attributes
Details Type #Events CTI Value
Details Domain 4 
dig.net
Details Domain 4 
news-spot.live
Details Domain 4 
cyberclub.one
Details Threat Actor Identifier - APT 258 
APT34