“Keeper” Magecart Group Infects 570 Sites
Tags
country: Netherlands India Indonesia Pakistan South Africa United Kingdom United States Of America
attack-pattern: Data Control Panel - T1218.002 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Server - T1583.004 Server - T1584.004 Software - T1592.002 Steganography - T1001.002 Steganography - T1406.001 Steganography - T1027.003
Show in Graph
Common Information
Type Value
UUID ac20a431-8fe2-42ee-b181-1596f5b852ec
Fingerprint f891b9d309b237a5
Analysis status DONE
Considered CTI value 0
Text language
Published July 7, 2020, 10:03 a.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 7, 2024, 9:47 p.m.
Headline “Keeper” Magecart Group Infects 570 Sites
Title “Keeper” Magecart Group Infects 570 Sites
Detected Hints/Tags/Attributes 50/2/21
Source URLs
Redirection Url
Details Source https://geminiadvisory.io/keeper-magecart-group-infects-570-sites/
URL Provider
Details Provider Source level domain
Details geminiadvisory.io geminiadvisory.io
Attributes
Details Type #Events CTI Value
Details Domain 3 
fileskeeper.org
Details Domain 2 
closetlondon.org
Details Domain 2 
closetlondon.com
Details Domain 1 
dressedinwhite.com
Details Domain 1 
js-storage.click
Details Domain 1 
milkywayshop.it
Details Domain 1 
dobell.su
Details Domain 1 
casterdepot.com
Details Domain 3 
swappastore.com
Details Domain 1 
nomin.net
Details Domain 2 
scriptvault.org
Details Domain 1 
fiushafashion.com
Details Domain 3 
assetstorage.net
Details Domain 1 
alkaramstudio.com
Details Domain 1 
arb.co.za
Details Domain 1 
cwspirits.com
Details Domain 1 
ejohri.com
Details Domain 1 
hirschs.co.za
Details Domain 1 
ibox.co.id
Details Domain 1 
discountmugs.com
Details File 91 
access.log