Uncovering Other DarkTortilla Threat Vectors
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Whois - T1596.002 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 9ed3430c-1bed-4b33-bb9a-29fbf568fcc1
Fingerprint 60000fdb8bb2e7cd
Analysis status DONE
Considered CTI value 0
Text language
Published Jan. 13, 2023, midnight
Added to db Jan. 13, 2023, 10:43 p.m.
Last updated Nov. 17, 2024, 11:36 p.m.
Headline UNKNOWN
Title Uncovering Other DarkTortilla Threat Vectors
Detected Hints/Tags/Attributes 32/2/22
Source URLs
Redirection Url
Details Source https://circleid.com/posts/20230113-uncovering-other-darktortilla-threat-vectors
URL Provider
Details Provider Source level domain
Details circleid.com circleid.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
cicsom.com
Details Domain 2 
gnammarly.com
Details Domain 2 
atomm.com.br
Details Domain 1 
bridgesconstructionservicesinc.com
Details Domain 1 
cl7q5s.cyou
Details Domain 1 
cisco.work
Details Domain 1 
cisco.asia
Details Domain 1 
cisco.pics
Details Domain 1 
ciscopro.ru
Details Domain 1 
shopcisco.eu
Details Domain 1 
ciscoav.com
Details Domain 1 
grammarly.pics
Details Domain 1 
grammarlyget.com
Details Domain 1 
appgrammarly.info
Details Domain 1 
mygrammarly.co
Details Domain 54 
godaddy.com
Details Domain 164 
cisco.com
Details Domain 2 
grammarly.com
Details Domain 45 
byipv4.global
Details IPv4 1 
104.21.15.248
Details IPv4 1 
172.67.165.88
Details Url 2 
https://atomm.com.br/.well-known/acme-challenge/ol/fjawtld.png