Attacker combines phone, email lures into believable, complex attack chain
Tags
country: Switzerland China Germany France
maec-delivery-vectors: Watering Hole
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malicious Link - T1204.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Scheduled Task - T1053.005 Software - T1592.002 Web Service - T1481 Tool - T1588.002 Powershell - T1086 Scheduled Task - T1053 Scripting - T1064 Web Service - T1102 Scripting
Show in Graph
Common Information
Type Value
UUID 74688382-f6e9-4145-9206-60d42fcdce33
Fingerprint 3d47291b8933e6c8
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 10, 2023, 10 a.m.
Added to db Aug. 12, 2023, 2:17 a.m.
Last updated Nov. 6, 2024, 11:07 a.m.
Headline Attacker combines phone, email lures into believable, complex attack chain
Title Attacker combines phone, email lures into believable, complex attack chain
Detected Hints/Tags/Attributes 77/3/12
Source URLs
Redirection Url
Details Source https://news.sophos.com/en-us/2023/08/10/image-spam-attack/
URL Provider
Details Provider Source level domain
Details sophos.com news.sophos.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 183 ✔ Sophos News https://news.sophos.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
safedelivery-company.com
Details Domain 1 
aircourier-company.com
Details Domain 1 
carpoollk.com
Details File 86 
service.exe
Details File 1 
libpurl.dll
Details File 26 
gup.exe
Details File 1 
gupp.exe
Details File 1 
ms.ps1
Details File 1 
c:\programfiles\matches.txt
Details File 1 
matches.txt
Details File 1 
delivery_n03041_07042022.exe
Details File 1 
envoi_n01670_24022022.exe