Sea Turtle keeps on swimming, finds new victims, DNS hijacking techniques
Tags
country: Greece Syria United Kingdom
attack-pattern: Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Impersonation - T1656 Ip Addresses - T1590.005 Multi-Factor Authentication - T1556.006 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 64ec1451-20ac-4d71-8836-f9e3d5406dae
Fingerprint c4b04541180687cd
Analysis status DONE
Considered CTI value 0
Text language
Published July 9, 2019, 10:55 a.m.
Added to db Sept. 26, 2022, 9:33 a.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline Vulnerability Information
Title Sea Turtle keeps on swimming, finds new victims, DNS hijacking techniques
Detected Hints/Tags/Attributes 48/2/16
Source URLs
Redirection Url
Details Source https://blog.talosintelligence.com/2019/07/sea-turtle-keeps-on-swimming.html
URL Provider
Details Provider Source level domain
Details talosintelligence.com blog.talosintelligence.com
Attributes
Details Type #Events CTI Value
Details Domain 3 
ns1.intersecdns.com
Details Domain 261 
blog.talosintelligence.com
Details Domain 53 
ncsc.gov.uk
Details Domain 2 
rootdnservers.com
Details Domain 2 
ns1.rootdnservers.com
Details Domain 2 
ns2.rootdnservers.com
Details Domain 3 
ns2.intersecdns.com
Details IPv4 1 
45.32.100.62
Details IPv4 2 
95.179.150.101
Details IPv4 1 
95.179.131.225
Details IPv4 1 
140.82.58.253
Details IPv4 1 
95.179.156.61
Details IPv4 1 
185.64.105.100
Details IPv4 1 
178.17.167.51
Details IPv4 1 
196.29.187.100
Details IPv4 1 
188.226.192.35