Cloud Credentials Phishing | Malicious Google Ads Target AWS Logins
Tags
country: Brazil Portugal
maec-delivery-vectors: Watering Hole
attack-pattern: Direct Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Web Services - T1583.006 Web Services - T1584.006 Whois - T1596.002 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 504a1e75-073f-4c80-8247-f26d5fdc0953
Fingerprint 80008d91a9023305
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 9, 2023, midnight
Added to db June 1, 2023, 10:43 a.m.
Last updated Sept. 4, 2024, 5:08 p.m.
Headline Cloud Credentials Phishing | Malicious Google Ads Target AWS Logins
Title Cloud Credentials Phishing | Malicious Google Ads Target AWS Logins
Detected Hints/Tags/Attributes 45/3/10
Source URLs
Redirection Url
Details Source https://www.sentinelone.com/blog/cloud-credentials-phishing-malicious-google-ads-target-aws-logins/
URL Provider
Details Provider Source level domain
Details sentinelone.com www.sentinelone.com
Attributes
Details Type #Events CTI Value
Details Domain 22 
blogspot.com
Details Domain 1 
us1-eat-a-w-s.blogspot.com
Details Domain 1 
aws1-console-login.us
Details Domain 2 
aws1-us-west.info
Details Domain 1 
aws1-ec2-console.com
Details Domain 1 
aws2-console-login.xyz
Details File 1 
zconfig01.php
Details IPv4 1 
172.67.159.93
Details IPv4 1 
54.214.158.248
Details IPv4 1 
35.167.172.179