Google’s DoubleClick Abused to Deliver Miners
Tags
cmtmf-attack-pattern: Traffic Distribution
country: France Italy Japan Spain Taiwan
maec-delivery-vectors: Watering Hole
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 75dc9a2c-bd78-4c5f-80b9-b2a48a724045
Fingerprint 62a10b191433fee3
Analysis status DONE
Considered CTI value 0
Text language
Published Jan. 26, 2018, midnight
Added to db Oct. 15, 2024, 9:33 p.m.
Last updated Nov. 19, 2024, 4:54 p.m.
Headline Google’s DoubleClick Abused to Deliver Miners
Title Google’s DoubleClick Abused to Deliver Miners
Detected Hints/Tags/Attributes 28/4/12
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_in/research/18/a/malvertising-campaign-abuses-googles-doubleclick-to-deliver-cryptocurrency-miners.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details Domain 2 
ws.l33tsite.info
Details Domain 1 
doubleclick1.xyz
Details Domain 1 
doubleclick2.xyz
Details Domain 1 
doubleclick3.xyz
Details Domain 1 
doubleclick4.xyz
Details Domain 1 
doubleclick5.xyz
Details Domain 1 
doubleclick6.xyz
Details Domain 1 
api.l33tsite.info
Details File 220 
min.js
Details File 1 
mqoj_1.js
Details sha256 1 
e72737a8cf29eeae795a3918e56c07b4efa2e9ce241ec56053d6a95f878be231
Details sha256 1 
296d081b6b0a6d1a09b5c54c35392a4d2ea0bec9a0c99e6351374628b713d8ed