Operation Ghost Click: DNSChanger Malware Ring Dismantled
Tags
country: Netherlands Estonia Ethiopia Georgia Jersey Russia Ukraine United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID 424167bc-bf31-4fc6-9960-20a6ee0d6e66
Fingerprint f1ec4361a1f193c9
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 9, 2011, 2:04 p.m.
Added to db Jan. 18, 2023, 7:49 p.m.
Last updated Nov. 17, 2024, 6:45 p.m.
Headline CyberCrime & Doing Time
Title Operation Ghost Click: DNSChanger Malware Ring Dismantled
Detected Hints/Tags/Attributes 75/3/23
Source URLs
Redirection Url
Details Source http://garwarner.blogspot.com/2011/11/operation-ghost-click-dnschanger.html
URL Provider
Details Provider Source level domain
Details blogspot.com garwarner.blogspot.com
Attributes
Details Type #Events CTI Value
Details Domain 128 
www.fbi.gov
Details Domain 111 
www.apple.com
Details Domain 77 
apple.com
Details Domain 1 
www.idownload-store-music.com
Details Domain 11 
www.irs.gov
Details Domain 23 
irs.gov
Details Domain 335 
www.facebook.com
Details Domain 1 
gathi.com
Details Domain 1 
uttersearch.com
Details Domain 1 
crossnets.com
Details IPv4 1 
205.128.73.105
Details IPv4 1 
85.255.112.0
Details IPv4 1 
85.255.127.255
Details IPv4 1 
67.210.0.0
Details IPv4 1 
67.210.15.255
Details IPv4 1 
93.188.160.0
Details IPv4 1 
93.188.167.255
Details IPv4 1 
77.67.83.0
Details IPv4 1 
77.67.83.255
Details IPv4 1 
213.109.64.0
Details IPv4 1 
213.109.79.255
Details IPv4 1 
64.28.176.0
Details IPv4 1 
64.28.191.255