Threat actors caught using MSIX packages to distribute Ghostpulse malware loader
Tags
cmtmf-attack-pattern: Masquerading
maec-delivery-vectors: Watering Hole
attack-pattern: Code Signing Certificates - T1587.002 Code Signing Certificates - T1588.003 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Powershell - T1059.001 Process Doppelgänging - T1055.013 Process Hollowing - T1055.012 Masquerading - T1036 Powershell - T1086 Process Doppelgänging - T1186 Process Hollowing - T1093 Masquerading
Show in Graph
Common Information
Type Value
UUID 48b83638-8799-4905-878d-f737fe22fb94
Fingerprint ac503b2321bc0f63
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 30, 2023, midnight
Added to db Oct. 30, 2023, 2:57 p.m.
Last updated Sept. 3, 2024, 7:05 a.m.
Headline UNKNOWN
Title Threat actors caught using MSIX packages to distribute Ghostpulse malware loader
Detected Hints/Tags/Attributes 27/3/0
Source URLs
Redirection Url
Details Source https://www.cybersecurity-help.cz/blog/3588.html
URL Provider
Details Provider Source level domain
Details cybersecurity-help.cz www.cybersecurity-help.cz
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08