CALISTO continues its credential harvesting campaign
Tags
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Malicious Link - T1204.001 Phishing - T1660 Phishing - T1566 Tool - T1588.002 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID c68930ee-2248-4749-81d1-0703dd97cae0
Fingerprint b6b385d919f1c3c1
Analysis status DONE
Considered CTI value 0
Text language
Published June 22, 2022, 3:21 p.m.
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Nov. 19, 2024, 9:02 a.m.
Headline CALISTO continues its credential harvesting campaign
Title CALISTO continues its credential harvesting campaign
Detected Hints/Tags/Attributes 44/3/25
Source URLs
Redirection Url
Details Source https://blog.sekoia.io/calisto-continues-its-credential-harvesting-campaign
Details Source https://blog.sekoia.io/calisto-continues-its-credential-harvesting-campaign/
URL Provider
Details Provider Source level domain
Details sekoia.io blog.sekoia.io
Attributes
Details Type #Events CTI Value
Details Domain 119 
sekoia.io
Details Domain 3 
file-milgov.systems
Details Domain 2 
documents-cloud.com
Details Domain 2 
cache-docs.com
Details Domain 3 
protect-link.online
Details Domain 3 
docs-shared.com
Details Domain 2 
documents-cloud.online
Details Domain 3 
drive-share.live
Details Domain 3 
hypertextteches.com
Details Domain 3 
proton-docs.com
Details Domain 2 
docs-drive.online
Details Domain 2 
cloud-docs.com
Details Domain 2 
drive-docs.com
Details Domain 3 
cache-dns.com
Details Domain 2 
office-protection.online
Details Domain 2 
proton-view.online
Details Domain 2 
pdf-shared.online
Details Domain 4 
proton-viewer.com
Details Domain 2 
protectionmail.online
Details Domain 2 
pdf-docs.online
Details Domain 2 
documents-pdf.online
Details Domain 2 
docs-cache.com
Details Domain 2 
pdf-cloud.online
Details Domain 2 
docs-info.com
Details Domain 3 
protection-office.live