Cloned CapCut websites push information stealing malware - RedPacket Security
Tags
country: India Taiwan
attack-pattern: Data Direct Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Remote Access Software - T1663 Social Media - T1593.001 Software - T1592.002 Tool - T1588.002 Powershell - T1086 Remote Access Tools - T1219
Show in Graph
Common Information
Type Value
UUID 497f93fc-bced-43dd-bed0-6d70a788cac1
Fingerprint a5ae2ed0913e46a8
Analysis status DONE
Considered CTI value 0
Text language
Published May 21, 2023, 5:02 a.m.
Added to db May 21, 2023, 6:18 a.m.
Last updated Sept. 4, 2024, 7:21 p.m.
Headline RedPacket Security
Title Cloned CapCut websites push information stealing malware - RedPacket Security
Detected Hints/Tags/Attributes 32/2/7
Source URLs
Redirection Url
Details Source https://www.redpacketsecurity.com/cloned-capcut-websites-push-information-stealing-malware/
URL Provider
Details Provider Source level domain
Details redpacketsecurity.com www.redpacketsecurity.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 361 ✔ RedPacket Security https://www.redpacketsecurity.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 3 
capcut-freedownload.com
Details Domain 2 
capcutfreedownload.com
Details Domain 3 
capcut-editor-video.com
Details Domain 3 
capcutdownload.com
Details Domain 2 
capcutpc-download.com
Details Domain 1 
capcut.com
Details File 4 
capcut_pro_edit_video.rar