SharpTongue Deploys Clever Mail-Stealing Browser Extension "SHARPEXT"
Tags
country: North Korea South Korea Sweden Russia United States Of America
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Email Addresses - T1589.002 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Browser Extensions - T1176 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 8da71e38-13e9-40af-92aa-64feddbb50ad
Fingerprint 9c0ebed02439a0cf
Analysis status DONE
Considered CTI value 0
Text language
Published July 28, 2022, 1:39 p.m.
Added to db Nov. 9, 2023, 12:59 a.m.
Last updated Sept. 30, 2024, 7:42 p.m.
Headline UNKNOWN
Title SharpTongue Deploys Clever Mail-Stealing Browser Extension "SHARPEXT"
Detected Hints/Tags/Attributes 63/2/5
Source URLs
Redirection Url
Details Source https://www.volexity.com/blog/2022/07/28/sharptongue-deploys-clever-mail-stealing-browser-extension-sharpext/
Details Source https://www.volexity.com/blog/2022/07/28/sharptongue-deploys-clever-mail-stealing-browser-extension-sharpext/?s=09
URL Provider
Details Provider Source level domain
Details volexity.com www.volexity.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 396 ✔ Blog | Threat Intelligence & Memory Forensics | Volexity https://www.volexity.com/blog/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 7 
pow.ps1
Details File 2 
dev.ps1
Details File 2 
dev.html
Details File 9 
dev.js
Details File 6 
bg.js