Attacker Distributes DarkGate Using MS Teams Vishing Technique
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Rundll32 - T1218.011 Seo Poisoning - T1608.006 Server - T1583.004 Server - T1584.004 Powershell - T1086 Remote Access Tools - T1219 Rundll32 - T1085
Show in Graph
Common Information
Type Value
UUID 78adf529-b872-4c00-9707-9c0059a0aeba
Fingerprint 84283911449fab61
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 18, 2024, 12:15 p.m.
Added to db Dec. 18, 2024, 2:14 p.m.
Last updated Dec. 20, 2024, 2:57 p.m.
Headline Attacker Distributes DarkGate Using MS Teams Vishing Technique
Title Attacker Distributes DarkGate Using MS Teams Vishing Technique
Detected Hints/Tags/Attributes 42/2/9
Source URLs
Redirection Url
Details Source https://www.infosecurity-magazine.com/news/attacker-darkgate-teams-vishing/
URL Provider
Details Provider Source level domain
Details infosecurity-magazine.com www.infosecurity-magazine.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 135 ✔ — https://infosecurity-magazine.com/rss/news/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 272 
shutterstock.com
Details File 1 
c:\users\\downloads\anydesk.exe
Details File 2314 
cmd.exe
Details File 1100 
rundll32.exe
Details File 6 
safestore.dll
Details File 43 
anydesk.exe
Details File 3 
systemcert.exe
Details File 38 
autoit3.exe
Details File 5 
microsoftedgeupdatecore.exe