IT threat evolution Q2 2019
Tags
country: Afghanistan Argentina Azerbaijan Bahrain Bangladesh Brazil North Korea Germany Jordan Hong Kong India Iran Iraq Pakistan Israel Japan South Korea Kazakhstan Saudi Arabia Kyrgyzstan Laos Lebanon Mozambique Myanmar Tajikistan Russia Vietnam Syria Tanzania Turkmenistan
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Contact List - T1636.003 Credentials - T1589.001 Digital Certificates - T1596.003 Digital Certificates - T1587.003 Digital Certificates - T1588.004 Dns - T1071.004 Dns - T1590.002 Email Accounts - T1585.002 Email Accounts - T1586.002 Exploits - T1587.004 Exploits - T1588.005 Impersonation - T1656 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Sms Messages - T1636.004 Social Media - T1593.001 Software - T1592.002 Steganography - T1001.002 Steganography - T1406.001 Steganography - T1027.003 Tool - T1588.002 Vulnerabilities - T1588.006 Connection Proxy - T1090 Powershell - T1086 Windows Management Instrumentation - T1047
Show in Graph
Common Information
Type Value
UUID b81194cc-2ad3-41bc-90b0-d40d44dac472
Fingerprint ae0499518f77a581
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 19, 2019, 10 a.m.
Added to db Feb. 17, 2023, 9:27 p.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline IT threat evolution Q2 2019
Title IT threat evolution Q2 2019
Detected Hints/Tags/Attributes 218/3/9
Source URLs
Redirection Url
Details Source https://securelist.com/it-threat-evolution-q2-2019/91994/
URL Provider
Details Provider Source level domain
Details securelist.com securelist.com
Attributes
Details Type #Events CTI Value
Details CVE 32 
cve-2018-8120
Details CVE 19 
cve-2019-0859
Details Domain 2 
s-japan.zip
Details Domain 338 
kaspersky.com
Details Email 147 
intelreports@kaspersky.com
Details File 5 
sagawa.apk
Details File 2 
s-japan.zip
Details File 115 
win32k.sys
Details Threat Actor Identifier - FIN 377 
FIN7