MoustachedBouncer hackers use AiTM attacks to spy on diplomats
Tags
country: Belarus Belgium
attack-pattern: Direct Adversary-In-The-Middle - T1638 Adversary-In-The-Middle - T1557 Dns - T1071.004 Dns - T1590.002 Javascript - T1059.007 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Connection Proxy - T1090 Powershell - T1086 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID ad226cc6-7d42-4783-b752-134b270825bc
Fingerprint 9d279908adf3aec2
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 10, 2023, midnight
Added to db Aug. 13, 2023, 2:08 a.m.
Last updated Nov. 12, 2024, 11:48 a.m.
Headline MoustachedBouncer hackers use AiTM attacks to spy on diplomats
Title MoustachedBouncer hackers use AiTM attacks to spy on diplomats
Detected Hints/Tags/Attributes 52/2/2
Source URLs
Redirection Url
Details Source https://www.bleepingcomputer.com/news/security/moustachedbouncer-hackers-use-aitm-attacks-to-spy-on-diplomats/
URL Provider
Details Provider Source level domain
Details bleepingcomputer.com www.bleepingcomputer.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 45 
cve-2021-1732
Details Domain 5 
updates.microsoft.com