SHARPEXT RAT surreptitiously read and download emails and attachments from infected users' GMail and AOL accounts
Tags
country: North Korea South Korea
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Software - T1592.002 Vulnerabilities - T1588.006 Remote Access Tools - T1219
Show in Graph
Common Information
Type Value
UUID 6f4b1212-84fc-4947-b9bd-ccc043f79ab5
Fingerprint b4621b199d24b2af
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 29, 2022, 4:43 p.m.
Added to db Sept. 11, 2022, 12:39 p.m.
Last updated Sept. 3, 2024, 7:03 a.m.
Headline SHARPEXT RAT surreptitiously read and download emails and attachments from infected users’ GMail and AOL accounts
Title SHARPEXT RAT surreptitiously read and download emails and attachments from infected users' GMail and AOL accounts
Detected Hints/Tags/Attributes 60/3/2
Source URLs
Redirection Url
Details Source https://www.securitynewspaper.com/2022/08/29/sharpext-rat-surreptitiously-read-and-download-emails-and-attachments-from-infected-users-gmail-and-aol-accounts/
URL Provider
Details Provider Source level domain
Details securitynewspaper.com www.securitynewspaper.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 164 ✔ — https://media.cert.europa.eu/rss?type=category&id=SocialEngineering&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
document.in
Details Domain 4 
api.commondevice.com