TryHackMe: Supply Chain Attack: Lottie
Tags
cmtmf-attack-pattern: Supply Chain Compromise
country: Brazil
maec-delivery-vectors: Watering Hole
attack-pattern: Data Cdns - T1596.004 Code Repositories - T1213.003 Code Repositories - T1593.003 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Impersonation - T1656 Javascript - T1059.007 Phishing - T1660 Phishing - T1566 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Supply Chain Compromise - T1474 Vulnerabilities - T1588.006 Supply Chain Compromise - T1195 Supply Chain Compromise
Show in Graph
Common Information
Type Value
UUID 823df5c2-5901-4632-abc0-541b7faeacbb
Fingerprint acab3e118b03a640
Analysis status DONE
Considered CTI value -2
Text language
Published Nov. 24, 2024, 4:42 p.m.
Added to db Nov. 24, 2024, 5:52 p.m.
Last updated Dec. 25, 2024, 4:36 a.m.
Headline TryHackMe: Supply Chain Attack: Lottie
Title TryHackMe: Supply Chain Attack: Lottie
Detected Hints/Tags/Attributes 72/4/17
Source URLs
Redirection Url
Details Source https://medium.com/@rosana.viaja/tryhackme-supply-chain-attack-lottie-ff9f05168738?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 5 
castleservices01.com
Details Domain 2 
formdata.email
Details File 2 
e.wallet
Details File 4 
www.wallet
Details File 2 
n.tar
Details File 239 
min.js
Details File 169 
package.json
Details File 187 
index.js
Details File 16 
object.key
Details File 400 
console.log
Details File 2 
pushtocdn.php
Details File 12 
bundle.js
Details IPv4 1 
10.10.70.96
Details Url 2 
https://keys.coinbase.com/connect",e.walletlink_url="https://www.walletlink.org",e.cbw_mobile_deeplink_url="https://go.cb-w.com/walletlink
Details Url 2 
http://npm.thm:4873/-/web/detail/form-validator
Details Url 1 
http://10.10.70.96:9090/collect?
Details Url 2 
http://npm.thm:4873