AWS Seizes Domains Used by Russian Threat Group APT29
Tags
country: Germany Russia Ukraine United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Web Services - T1583.006 Web Services - T1584.006 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID 86741efb-97cb-48e7-861b-95183fd06b80
Fingerprint a3988dd227a5a7cd
Analysis status DONE
Considered CTI value 1
Text language
Published Oct. 25, 2024, 12:04 p.m.
Added to db Oct. 25, 2024, 6:34 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline AWS Seizes Domains Used by Russian Threat Group APT29
Title AWS Seizes Domains Used by Russian Threat Group APT29
Detected Hints/Tags/Attributes 55/3/2
Source URLs
Redirection Url
Details Source https://securityboulevard.com/2024/10/aws-seizes-domains-used-by-russian-threat-group-apt29/
URL Provider
Details Provider Source level domain
Details securityboulevard.com securityboulevard.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 226 ✔ Security Boulevard https://securityboulevard.com/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Microsoft Threat Actor Naming Taxonomy (Groups in development) 115 
Storm-0558
Details Threat Actor Identifier - APT 665 
APT29