New Malware Campaign Exposes Gaps in Manufacturing Cybersecurity Defenses
Tags
cmtmf-attack-pattern: Code Injection Process Injection
maec-delivery-vectors: Watering Hole
attack-pattern: Data Code Injection - T1540 Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Mshta - T1218.005 Msiexec - T1218.007 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Process Injection - T1631 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Tool - T1588.002 Mshta - T1170 Powershell - T1086 Process Injection - T1055 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID 7c28dd17-5be2-4f14-80fd-bb4961a37770
Fingerprint a4e8c9988a3b9f03
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 6, 2024, 6:43 a.m.
Added to db Dec. 6, 2024, 8:16 a.m.
Last updated Dec. 24, 2024, 8:53 a.m.
Headline New Malware Campaign Exposes Gaps in Manufacturing Cybersecurity Defenses
Title New Malware Campaign Exposes Gaps in Manufacturing Cybersecurity Defenses
Detected Hints/Tags/Attributes 49/3/7
Source URLs
Redirection Url
Details Source https://thecyberexpress.com/lumma-stealer-amadey-bot-target-manufacturing/
URL Provider
Details Provider Source level domain
Details thecyberexpress.com thecyberexpress.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 248 ✔ The Cyber Express https://thecyberexpress.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4 
download-695-18112-001-webdav-logicaldoc.cdn-serveri4732-ns.shop
Details File 42 
ssh.exe
Details File 545 
mshta.exe
Details File 1357 
powershell.exe
Details File 6 
syncagentsrv.exe
Details File 306 
msiexec.exe
Details Url 1 
http://download-695-18112-001-webdav-logicaldoc.cdn-serveri4732-ns.shop