Fbot is now riding the traffic and transportation smart devices
Tags
country: United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Firmware - T1592.003 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID bcd2271c-5013-4237-a1b7-1800a43a8590
Fingerprint 2eb952110c72b388
Analysis status DONE
Considered CTI value 2
Text language
Published March 3, 2021, midnight
Added to db Sept. 11, 2022, 12:48 p.m.
Last updated Nov. 17, 2024, 5:54 p.m.
Headline Fbot is now riding the traffic and transportation smart devices
Title Fbot is now riding the traffic and transportation smart devices
Detected Hints/Tags/Attributes 46/3/11
Source URLs
Redirection Url
Details Source https://blog.netlab.360.com/fbot-is-now-riding-the-traffic-and-transportation-smart-devices-en/
URL Provider
Details Provider Source level domain
Details 360.com blog.netlab.360.com
Attributes
Details Type #Events CTI Value
Details CVE 1 
cve-2020-9020
Details Domain 38 
blog.netlab.360.com
Details Domain 1 
timeconfig.py
Details File 1 
timeconfig.py
Details md5 1 
deaee7ada44bf1c6af826d2d170c8698
Details md5 1 
9b49507d1876c3a550f7b7a6e4ec696d
Details IPv4 1 
198.23.238.203
Details IPv4 1 
103.95.221.188
Details Url 1 
https://blog.netlab.360.com/threat-alert-a-new-worm-fbot-cleaning-adbminer-is-using-a-blockchain-based-dns-en
Details Url 1 
https://blog.netlab.360.com/the-new-developments-of-the-fbot-en
Details Url 1 
http://198.23.238.203/arm7