Rockstar 2FA: A Driving Force in Phishing-as-a-Service (PaaS)
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Adversary-In-The-Middle - T1638 Adversary-In-The-Middle - T1557 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID 60786cd5-ab6a-4a9d-83f9-80808b5366b5
Fingerprint b02588523994fcdd
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 26, 2024, 4:31 p.m.
Added to db Nov. 26, 2024, 6:06 p.m.
Last updated Dec. 4, 2024, 9:45 p.m.
Headline Rockstar 2FA: A Driving Force in Phishing-as-a-Service (PaaS)
Title Rockstar 2FA: A Driving Force in Phishing-as-a-Service (PaaS)
Detected Hints/Tags/Attributes 54/2/76
Source URLs
Redirection Url
Details Source https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/rockstar-2fa-a-driving-force-in-phishing-as-a-service-paas/
URL Provider
Details Provider Source level domain
Details trustwave.com www.trustwave.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 387 ✔ SpiderLabs Blog https://www.trustwave.com/en-us/rss/spiderlabs-blog/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 160 
urlscan.io
Details Domain 252 
mail.ru
Details Domain 2 
googlesecurityforums.moscow
Details Domain 2 
callcenter838685d0747612ac193e85fcb5ae45287b09e8a0mailvoice.s3.us-east-2.amazonaws.com
Details Domain 2 
payment-confirmation-to-your-bank-account-s-dabringhaus-licatec.packinqsystems.de
Details Domain 2 
pub-fe581134d7ae4857a97443270a27e0fa.r2.dev
Details Domain 2 
docsecureatt-docdrive-filedoc.pages.dev
Details Domain 2 
www.curiosolucky.com
Details Domain 2 
magenta-melodious-garnet.glitch.me
Details Domain 2 
sendibm3.com
Details Domain 2 
docsend.com
Details Domain 2 
cloudflare-kol.github.io
Details Domain 34 
shorturl.at
Details Domain 2 
ctrk.klclick3.com
Details Domain 2 
googlevoicesecrets.com
Details Domain 10 
www.google.com.au
Details Domain 4 
www.google.co.nz
Details Domain 2 
synthchromal.ru
Details Domain 2 
involucrases.sa.com
Details Domain 2 
bluntchiefei.za.com
Details Domain 2 
botolaasprop.sa.com
Details Domain 2 
erfolgstipss.com.de
Details Domain 2 
digitalgadgetbuzz.sa.com
Details Domain 2 
bitesizeusaei.za.com
Details Domain 2 
enterbuzztechscener.pl
Details Domain 2 
pfremiumshirts.store
Details Domain 2 
lifestylesyncteche.pro
Details Domain 2 
bytequestixo.pro
Details Domain 2 
cybernexillumo.za.com
Details Domain 2 
novatechies.cbg.ru
Details Domain 2 
cyberdynalumeo.ru
Details Domain 2 
entertainmentcircuitss.ru
Details Domain 2 
fruechtebox-expresszsnu.ru
Details Domain 2 
recambioselecue.ru
Details Domain 2 
entertaingadgetop.ru
Details Domain 2 
ponnet.msk.su
Details Domain 2 
mieten.com.ru
Details Domain 2 
albumilustrado.msk.ru
Details File 2 
0nedrive.html
Details md5 2 
fe581134d7ae4857a97443270a27e0fa
Details sha1 2 
c1191c405e82c32c645acb82f875fdd8fad29209
Details Microsoft Threat Actor Naming Taxonomy (Groups in development) 9 
Storm-1575
Details Url 1 
http://cc.naver.com/cc?a=pst.link&m=1&nsc=mblog.post&u=hxxps://www.curiosolucky.com/dos
Details Url 2 
https://www.curiosolucky.com/dos
Details Url 2 
https://magenta-melodious-garnet.glitch.me/public/rc.htm
Details Url 2 
http://track.senderbulk.com/9164124/c?p=pdvu1ioazgouig9hosgcppbxfmtx2_vwwjfaiqbzucia8v9mjc3ztsyoneyxrkljpnguzpa11tugi1ai2aliylof1nhcpbop4yzuvvemyhtwy1nrlztpcqooc6s6kswunnagiavnfapcvcgf1cojsxtedvh_twc1vldh7fdqa0vzbthorodc9jbunuhh0dmh7zq9mo6omyljnapzvq3kvw==
Details Url 2 
https://edlyj.r.ag.d.sendibm3.com/mk/cl/f/sh/oyczvhufo1eqsnbcjj9r9gq4/lf5jdugppyqv
Details Url 2 
https://link.trustpilot.com/ls/click?upn=u001.u9
Details Url 2 
https://u1427642.ct.sendgrid.net/ss/c/u001.d04lnc885iiw-jdl08zraosxfe9hwa-skwlpgnzdbzzgikoizzyrlhao4m6r2vm6/4a0/vg0rnj9ptvczcnn5rs7a6q/h0/h001.3pgdtvyfoomavg2ihlxshdsg0cle6scklthbmumhqi0
Details Url 2 
https://docsend.com/view/q6f7ukbdeviagha2
Details Url 2 
https://cloudflare-kol.github.io/out/red.html?url=ahr0chm6ly9zag9ydhvybc5hdc80slznbg==
Details Url 2 
https://shorturl.at/4jvgn
Details Url 2 
https://system23cfb9.link.bmesend.com/api/linkhandler/getaction2?redirectparam2=k09weu5vmdbkwxfuk0zpdkw4azdkwhk5qljszknxwxllmuximhdxqu1yk3ffzgfszg9zq2zqnudhd3erzeplegpyeve1u1hmu2xosy9wemjysvezqytgajzbvwe4em5jaepurhhea05xotzocwxqrvdun1g2s2vir3yvzjn1k2djzk9rqtrvajzmmd0=
Details Url 2 
https://r.g.bing.com/bam/ac?
Details Url 2 
https://ctrk.klclick3.com/l/01j5v2nhdc0kb0p8b51z9pcpzs_0
Details Url 2 
https://googlevoicesecrets.com/ehkslw5/auth/?_kx=lkin48b6fueu_oyp2pjpxw.sdgjsn
Details Url 2 
https://www.google.com.au/url?q=//www.google.co.nz/amp/s/synthchromal.ru/vc51
Details Url 2 
https://semi-zcmp.maillist-manage.com/click/1122f15d012c0933f/1122f15d012c08f77?utm_source=aynures-newsletter.beehiiv.com
Details Url 2 
https://involucrases.sa.com
Details Url 2 
https://callcenter838685d0747612ac193e85fcb5ae45287b09e8a0mailvoice.s3.us-east-2.amazonaws.com
Details Url 2 
https://payment-confirmation-to-your-bank-account-s-dabringhaus-licatec.packinqsystems.de
Details Url 2 
https://pub-fe581134d7ae4857a97443270a27e0fa.r2.dev/0nedrive.html
Details Url 2 
https://docsecureatt-docdrive-filedoc.pages.dev
Details Url 2 
https://bluntchiefei.za.com/xtcfx
Details Url 2 
https://botolaasprop.sa.com/n26vu
Details Url 2 
https://erfolgstipss.com.de/gnq8
Details Url 2 
https://digitalgadgetbuzz.sa.com/wyan
Details Url 2 
https://bitesizeusaei.za.com/ol6bu
Details Url 2 
https://enterbuzztechscener.pl/pbtmx
Details Url 2 
https://pfremiumshirts.store/d91p
Details Url 2 
https://lifestylesyncteche.pro/ykiy
Details Url 2 
https://bytequestixo.pro/wwge
Details Url 2 
https://cybernexillumo.za.com/tvnpr
Details Url 2 
https://novatechies.cbg.ru/bueej
Details Url 2 
https://synthchromal.ru/vc51
Details Url 2 
https://cyberdynalumeo.ru/1rb3y