Anomali Cyber Watch: Caller-ID Spoofing Actors Arrested, Fast-Moving Qakbot Infection Deploys Black Basta Ransomware, New YARA Rules to Detect Cobalt Strike, and More
Tags
cmtmf-attack-pattern: Application Layer Protocol Command And Scripting Interpreter Obfuscated Files Or Information
country: Australia Canada Netherlands Germany France Ireland Lithuania Russia Ukraine United Kingdom
maec-delivery-vectors: Watering Hole
attack-pattern: Data Application Layer Protocol - T1437 Command And Scripting Interpreter - T1623 Credentials - T1589.001 Credentials From Password Stores - T1555 Data Encrypted For Impact - T1471 Data Encrypted For Impact - T1486 Dns - T1071.004 Dns - T1590.002 Impair Defenses - T1562 Impair Defenses - T1629 Ingress Tool Transfer - T1544 Inhibit System Recovery - T1490 Malware - T1587.001 Malware - T1588.001 Obfuscated Files Or Information - T1406 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Service Stop - T1489 Standard Application Layer Protocol - T1071 Command-Line Interface - T1059 Deobfuscate/Decode Files Or Information - T1140 Remote File Copy - T1105 Obfuscated Files Or Information - T1027 Powershell - T1086 Service Stop
Show in Graph
Common Information
Type Value
UUID a73c74a7-2638-425d-99e7-89406ad7b287
Fingerprint 8b4f38bbb7170e16
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 29, 2022, midnight
Added to db Nov. 29, 2022, 5:41 p.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline Anomali Cyber Watch: Caller-ID Spoofing Actors Arrested, Fast-Moving Qakbot Infection Deploys Black Basta Ransomware, New YARA Rules to Detect Cobalt Strike, and More
Title Anomali Cyber Watch: Caller-ID Spoofing Actors Arrested, Fast-Moving Qakbot Infection Deploys Black Basta Ransomware, New YARA Rules to Detect Cobalt Strike, and More
Detected Hints/Tags/Attributes 107/4/11
Source URLs
Redirection Url
Details Source https://www.anomali.com/blog/anomali-cyber-watch-caller-id-spoofing-actors-arrested-fast-moving-qakbot-infection-deploys-black-basta-ransomware-new-yara-rules-to-detect-cobalt-strike-and-more
URL Provider
Details Provider Source level domain
Details anomali.com www.anomali.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 270 ✔ — https://www.anomali.com/site/blog-rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details IBM X-Force - Unattributed Threat Actor 5 
Hive0091
Details MITRE ATT&CK Techniques 695 
T1059
Details MITRE ATT&CK Techniques 472 
T1486
Details MITRE ATT&CK Techniques 627 
T1027
Details MITRE ATT&CK Techniques 492 
T1105
Details MITRE ATT&CK Techniques 444 
T1071
Details MITRE ATT&CK Techniques 197 
T1489
Details MITRE ATT&CK Techniques 276 
T1490
Details MITRE ATT&CK Techniques 235 
T1562
Details MITRE ATT&CK Techniques 172 
T1555
Details MITRE ATT&CK Techniques 504 
T1140