Tech support scam uses fake Shoppers Stop site to lure thousands | Malwarebytes Labs
Tags
cmtmf-attack-pattern: Traffic Distribution
country: India
maec-delivery-vectors: Watering Hole
attack-pattern: Domains - T1583.001 Domains - T1584.001 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Whois - T1596.002
Show in Graph
Common Information
Type Value
UUID c2419abc-390a-4877-b9e8-88d0d33726e2
Fingerprint 96418dd1d1333be7
Analysis status DONE
Considered CTI value 0
Text language
Published May 8, 2018, midnight
Added to db Jan. 18, 2023, 8:35 p.m.
Last updated Sept. 4, 2024, 4:23 p.m.
Headline Tech support scam uses fake Shoppers Stop site to lure thousands
Title Tech support scam uses fake Shoppers Stop site to lure thousands | Malwarebytes Labs
Detected Hints/Tags/Attributes 55/4/22
Source URLs
Redirection Url
Details Source https://blog.malwarebytes.com/threat-analysis/2018/05/tech-scam-lures-thousands/
URL Provider
Details Provider Source level domain
Details malwarebytes.com blog.malwarebytes.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
smarttraffics.ml
Details Domain 2 
go.oclaserver.com
Details Domain 1 
go.mobtrks.com
Details Domain 1 
go.mobisla.com
Details Domain 1 
defpush.com
Details Domain 1 
dreams-al.com
Details Domain 1 
oclasrv.com
Details Domain 1 
deloton.com
Details Domain 1 
xml.adhunter.media
Details Domain 1 
updating23001.accountant
Details Domain 1 
techno59033.download
Details Domain 1 
goshopper.info
Details Domain 1 
e-storekart.com
Details Domain 1 
antivirustechies.us
Details Domain 1 
palmreader.website
Details File 1 
apu.php
Details File 1 
notice.php
Details File 1 
ntfc.php
Details IPv4 1 
107.180.28.42
Details IPv4 1 
107.180.54.176
Details Url 1 
https://updating23001.accountant/men-shop
Details Url 1 
https://techno59033.download/tollfree1-877-670-2749performing