Attackers using fake Cloudflare DDoS protection popups to distribute malware
Tags
country: Netherlands
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Social Media - T1593.001 Software - T1592.002 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID c89ff72d-83d0-43fc-94d9-356a70e8cc51
Fingerprint c52219a9a927fac8
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 22, 2022, 6:37 p.m.
Added to db Sept. 11, 2022, 12:37 p.m.
Last updated Nov. 17, 2024, 12:58 p.m.
Headline Attackers using fake Cloudflare DDoS protection popups to distribute malware
Title Attackers using fake Cloudflare DDoS protection popups to distribute malware
Detected Hints/Tags/Attributes 45/2/4
Source URLs
Redirection Url
Details Source https://www.hackread.com/fake-cloudflare-ddos-protection-popups-malware/
URL Provider
Details Provider Source level domain
Details hackread.com www.hackread.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4 
voip.ms
Details File 2 
security_install.iso
Details File 2 
security_install.exe
Details File 17 
debug.txt