Threat Hunting for Business Email Compromise Through User Agents
Tags
country: Belgium China Indonesia
attack-pattern: Data Cloud Accounts - T1078.004 Cloud Accounts - T1585.003 Cloud Accounts - T1586.003 Conditional Access Policies - T1556.009 Email Account - T1087.003 Email Accounts - T1585.002 Email Accounts - T1586.002 Multi-Factor Authentication - T1556.006 Python - T1059.006 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID a7892f3d-02cf-4cc4-974c-44e394bb89c2
Fingerprint b6518bd179dcda9f
Analysis status DONE
Considered CTI value 0
Text language
Published June 7, 2023, midnight
Added to db Oct. 24, 2023, 1:18 p.m.
Last updated Nov. 16, 2024, 8:07 p.m.
Headline Threat Hunting for Business Email Compromise Through User Agents
Title Threat Hunting for Business Email Compromise Through User Agents
Detected Hints/Tags/Attributes 51/2/5
Source URLs
Redirection Url
Details Source https://www.huntress.com/blog/threat-hunting-for-business-email-compromise-through-user-agents
URL Provider
Details Provider Source level domain
Details huntress.com www.huntress.com
Attributes
Details Type #Events CTI Value
Details IPv4 1 
213.154.80.21
Details IPv4 1 
203.251.62.51
Details IPv4 1 
91.158.221.9
Details IPv4 1 
118.98.90.2
Details MITRE ATT&CK Techniques 34 
T1078.004