Skimmer acts as payment service provider via rogue iframe | Malwarebytes Labs
Tags
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Data Javascript - T1059.007 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 |
Common Information
| Type | Value |
|---|---|
| UUID | 572edc24-370d-44be-b57c-1bd4fc5e794f |
| Fingerprint | fc079b869962e4cd |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | May 21, 2019, midnight |
| Added to db | Sept. 11, 2022, 12:45 p.m. |
| Last updated | Nov. 17, 2024, 6:30 p.m. |
| Headline | Skimmer acts as payment service provider via rogue iframe |
| Title | Skimmer acts as payment service provider via rogue iframe | Malwarebytes Labs |
| Detected Hints/Tags/Attributes | 40/2/9 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 2 | thatispersonal.com |
|
| Details | Domain | 51 | reg.ru |
|
| Details | Domain | 154 | urlscan.io |
|
| Details | Domain | 1 | top5value.com |
|
| Details | Domain | 1 | voodoo4tactical.com |
|
| Details | File | 1 | _iframe.js |
|
| Details | IPv4 | 1 | 82.146.50.133 |
|
| Details | IPv4 | 1 | 212.109.222.250 |
|
| Details | IPv4 | 1 | 212.109.222.249 |