Credit card skimmer masquerades as favicon | Malwarebytes Labs
Tags
country: Portugal
attack-pattern: Data Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Steganography - T1001.002 Steganography - T1406.001 Steganography - T1027.003
Show in Graph
Common Information
Type Value
UUID 8fe8ef53-2a02-4dbc-9d70-e47254c18a45
Fingerprint b04f91991093e44c
Analysis status DONE
Considered CTI value 0
Text language
Published May 6, 2020, midnight
Added to db Jan. 18, 2023, 8:36 p.m.
Last updated Oct. 16, 2024, 2:38 a.m.
Headline Credit card skimmer masquerades as favicon
Title Credit card skimmer masquerades as favicon | Malwarebytes Labs
Detected Hints/Tags/Attributes 39/2/10
Source URLs
Redirection Url
Details Source https://blog.malwarebytes.com/threat-analysis/2020/05/credit-card-skimmer-masquerades-as-favicon/
URL Provider
Details Provider Source level domain
Details malwarebytes.com blog.malwarebytes.com
Attributes
Details Type #Events CTI Value
Details Domain 3 
myicons.net
Details Domain 1 
iconarchive.com
Details Domain 1 
www.iconarchive.com
Details Domain 2 
psas.pw
Details File 7 
www.ico
Details File 7 
favicon.png
Details sha256 1 
825886fc00bef43b3b7552338617697c4e0bab666812c333afdce36536be3b8e
Details IPv4 3 
83.166.244.76
Details IPv4 2 
83.166.242.105
Details Url 1 
http://www.iconarchive.com