Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts
Tags
country: Brazil Spain Mexico Peru Portugal
attack-pattern: Data Email Accounts - T1585.002 Email Accounts - T1586.002 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Visual Basic - T1059.005 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID c1c7d24a-d3a7-4e28-9b4d-6ab9d6f56bd9
Fingerprint 95258919afb2f6c8
Analysis status DONE
Considered CTI value 0
Text language
Published June 5, 2023, 10:18 a.m.
Added to db June 5, 2023, 10:43 a.m.
Last updated Sept. 4, 2024, 4:20 a.m.
Headline Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts
Title Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts
Detected Hints/Tags/Attributes 38/2/0
Source URLs
Redirection Url
Details Source https://thehackernews.com/2023/06/brazilian-cybercriminals-using-lolbas.html
Details Source https://thehackernews.com/2023/06/brazilian-cybercriminals-using-lolbas.html?&web_view=true
URL Provider
Details Provider Source level domain
Details thehackernews.com thehackernews.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 99 ✔ Cyware News - Latest Cyber News https://cyware.com/allnews/feed 2024-08-30 22:08
Details 118 ✔ The Hacker News https://feeds.feedburner.com/TheHackersNews 2024-08-30 22:08