Leafminer: New Espionage Campaigns Targeting Middle Eastern Regions
Tags
country: Afghanistan Egypt United Arab Emirates Bahrain Kuwait Iran Israel Saudi Arabia Qatar
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Process Doppelgänging - T1055.013 Python - T1059.006 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Web Shell - T1505.003 Windows Service - T1543.003 Tool - T1588.002 Vulnerabilities - T1588.006 Powershell - T1086 Process Doppelgänging - T1186 Remote Desktop Protocol - T1076 Web Shell - T1100
Show in Graph
Common Information
Type Value
UUID b8c06ec2-5215-4d86-8f18-e82624debe05
Fingerprint bd00b98102e38681
Analysis status DONE
Considered CTI value 1
Text language
Published July 25, 2018, midnight
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 17, 2024, 12:58 p.m.
Headline Leafminer: New Espionage Campaigns Targeting Middle Eastern Regions
Title Leafminer: New Espionage Campaigns Targeting Middle Eastern Regions
Detected Hints/Tags/Attributes 110/3/6
Source URLs
Redirection Url
Details Source https://symantec-blogs.broadcom.com/blogs/threat-intelligence/leafminer-espionage-middle-east
Details Source https://www.symantec.com/blogs/threat-intelligence/leafminer-espionage-middle-east
URL Provider
Details Provider Source level domain
Details broadcom.com symantec-blogs.broadcom.com
Details symantec.com www.symantec.com
Attributes
Details Type #Events CTI Value
Details CVE 90 
cve-2014-0160
Details Domain 1 
e-qht.az
Details Domain 1 
magiccoder.ir
Details Domain 6 
security.cloud
Details File 1 
guester.exe
Details File 1 
orange64.exe