Simple Mail Transfer Pirates: How threat actors are abusing third-party infrastructure to send spam
Tags
cmtmf-attack-pattern: Masquerading
maec-delivery-vectors: Watering Hole
attack-pattern: Credential Stuffing - T1110.004 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Email Account - T1087.003 Email Accounts - T1585.002 Email Accounts - T1586.002 Ip Addresses - T1590.005 Masquerading - T1655 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Masquerading - T1036 Scripting - T1064 Masquerading Scripting
Show in Graph
Common Information
Type Value
UUID 2f5c5bab-b7b3-4269-96fe-d4918cffcf5d
Fingerprint af930d9a8d20344f
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 26, 2024, 9 a.m.
Added to db Sept. 26, 2024, 3:18 p.m.
Last updated Nov. 17, 2024, 5:56 p.m.
Headline Cisco Talos Blog
Title Simple Mail Transfer Pirates: How threat actors are abusing third-party infrastructure to send spam
Detected Hints/Tags/Attributes 46/3/4
Source URLs
Redirection Url
Details Source https://blog.talosintelligence.com/simple-mail-transfer-pirates/
URL Provider
Details Provider Source level domain
Details talosintelligence.com blog.talosintelligence.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 68 ✔ Cisco Talos Blog https://blog.talosintelligence.com/rss/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
mx.example.com
Details Domain 831 
example.com
Details Email 1 
mx.example.com|2525|nywepaq@example.com
Details IPv4 4 
127.0.0.255