Microsoft Reveals Chinese Threat Actors Use Quad7 Botnet to Steal Credentials
Tags
country: China
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Malware - T1587.001 Malware - T1588.001 Network Devices - T1584.008 Server - T1583.004 Server - T1584.004 Software - T1592.002 Connection Proxy - T1090 Credential Dumping - T1003
Show in Graph
Common Information
Type Value
UUID b6a1275b-af1f-44b5-9dce-89fca85da144
Fingerprint a5d42a1d8f9299d4
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 1, 2024, 3:54 p.m.
Added to db Nov. 1, 2024, 5:15 p.m.
Last updated Nov. 4, 2024, 5:08 p.m.
Headline Microsoft Reveals Chinese Threat Actors Use Quad7 Botnet to Steal Credentials
Title Microsoft Reveals Chinese Threat Actors Use Quad7 Botnet to Steal Credentials
Detected Hints/Tags/Attributes 39/2/1
Source URLs
Redirection Url
Details Source https://heimdalsecurity.com/blog/microsoft-chinese-threat-actors-botnet-credential-theft/
URL Provider
Details Provider Source level domain
Details heimdalsecurity.com heimdalsecurity.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 132 ✔ Heimdal Security Blog https://heimdalsecurity.com/blog/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Microsoft Threat Actor Naming Taxonomy (Groups in development) 17 
Storm-0940