GrelosGTM group abuses Google Tag Manager to attack e-commerce websites
Tags
country: Belgium Italy United Kingdom United States Of America
attack-pattern: Direct Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID c98fcbb5-1ff1-4ca7-985c-13644483f780
Fingerprint 8aa08ce099b2ade6
Analysis status DONE
Considered CTI value 0
Text language
Published June 5, 2021, midnight
Added to db Aug. 31, 2024, 12:15 a.m.
Last updated Nov. 8, 2024, 3:30 p.m.
Headline UNKNOWN
Title GrelosGTM group abuses Google Tag Manager to attack e-commerce websites
Detected Hints/Tags/Attributes 30/2/10
Source URLs
Redirection Url
Details Source https://blog.group-ib.com/grelosgtm
URL Provider
Details Provider Source level domain
Details group-ib.com blog.group-ib.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 36 ✔ Blog Group-IB https://blog.group-ib.com/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 7 
googletagmanager.com
Details Domain 2 
webfaset.com
Details Domain 1 
fountm.online
Details Domain 1 
jqwereid.online
Details Domain 1 
bulder.online
Details Domain 1 
gstatcs.com
Details Domain 16 
www.googletagmanager.com
Details File 1 
str.css
Details File 47 
min.css
Details File 8 
gtm.js