ToneShell Backdoor Targets IISS Defence Summit Attendees in Latest Espionage Campaign
Tags
country: Australia China Hong Kong U.S. Virgin Islands
maec-delivery-vectors: Watering Hole
attack-pattern: Data Malware - T1587.001 Malware - T1588.001 Remote Desktop Protocol - T1021.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Social Media - T1593.001 Remote Desktop Protocol - T1076 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 397364bc-1b3f-49f7-a222-7a230ac7beb5
Fingerprint bd2581292a7bcc53
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 9, 2024, 8:35 p.m.
Added to db Sept. 12, 2024, 11:05 a.m.
Last updated Nov. 14, 2024, 4:12 p.m.
Headline ToneShell Backdoor Targets IISS Defence Summit Attendees in Latest Espionage Campaign
Title ToneShell Backdoor Targets IISS Defence Summit Attendees in Latest Espionage Campaign
Detected Hints/Tags/Attributes 53/3/3
Source URLs
Redirection Url
Details Source https://securityonline.info/toneshell-backdoor-targets-iiss-defence-summit-attendees-in-latest-espionage-campaign/?&web_view=true
URL Provider
Details Provider Source level domain
Details securityonline.info securityonline.info
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 99 ✔ Cyware News - Latest Cyber News https://cyware.com/allnews/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 57 
hunt.io
Details File 2 
sffwallpapercore.exe
Details File 2 
libemb.dll