Running in Circles: Uncovering the Clients of Cyberespionage Firm Circles - The Citizen Lab
Tags
country: Australia United Arab Emirates Bahrain Belgium Botswana Bulgaria Malaysia Canada Chile Denmark Ecuador El Salvador Equatorial Guinea Estonia Germany Nigeria Guatemala Jordan Honduras Indonesia Israel Kenya Morocco Saudi Arabia Thailand Laos Mauritius Mexico Peru Serbia Yemen Zambia Zimbabwe Vietnam United States Of America
attack-pattern: Data Direct Model Credentials - T1589.001 Email Addresses - T1589.002 Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Malicious Link - T1204.001 Server - T1583.004 Server - T1584.004 Sms Messages - T1636.004 Vulnerabilities - T1588.006 Whois - T1596.002
Show in Graph
Common Information
Type Value
UUID ca75befc-07ab-4315-9617-584ca9e16c00
Fingerprint ad89919b35a187cf
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 1, 2020, midnight
Added to db Sept. 26, 2022, 9:32 a.m.
Last updated Sept. 3, 2024, 2:23 a.m.
Headline Running in Circles Uncovering the Clients of Cyberespionage Firm Circles
Title Running in Circles: Uncovering the Clients of Cyberespionage Firm Circles - The Citizen Lab
Detected Hints/Tags/Attributes 183/2/82
Source URLs
Redirection Url
Details Source https://citizenlab.ca/2020/12/running-in-circles-uncovering-the-clients-of-cyberespionage-firm-circles/
URL Provider
Details Provider Source level domain
Details citizenlab.ca citizenlab.ca
Attributes
Details Type #Events CTI Value
Details Autonomous System Number 1 
AS200068
Details Autonomous System Number 1 
AS60097
Details Autonomous System Number 1 
AS37258
Details Domain 1 
tracksystem.info
Details Domain 1 
sid.org.bw
Details Domain 1 
semar.gob.mx
Details Domain 1 
durango.gob.mx
Details Domain 1 
companies.rafeeg.ae
Details Domain 1 
dahlan.ps
Details Domain 1 
cp.slp.mx
Details Domain 1 
smart.gov.ae
Details Domain 1 
wsg.dubaipolice.net
Details File 1 
tracksystem.inf
Details File 1 
dahlan.ps
Details IPv4 1 
129.205.243.1
Details IPv4 1 
129.205.243.60
Details IPv4 1 
41.79.138.17
Details IPv4 1 
168.167.45.100
Details IPv4 1 
186.103.207.10
Details IPv4 1 
190.111.27.165
Details IPv4 1 
105.145.40.27
Details IPv4 1 
41.242.50.50
Details IPv4 1 
196.1.133.7
Details IPv4 1 
41.242.50.42
Details IPv4 1 
110.164.191.212
Details IPv4 1 
122.154.71.180
Details IPv4 1 
110.164.72.2
Details IPv4 1 
203.149.46.164
Details IPv4 1 
94.206.102.68
Details IPv4 1 
213.42.167.106
Details IPv4 1 
91.72.225.2
Details IPv4 1 
151.253.54.210
Details IPv4 1 
91.75.44.84
Details IPv4 1 
165.56.2.13
Details IPv4 1 
220.101.113.194
Details IPv4 1 
27.33.222.130
Details IPv4 1 
220.245.33.62
Details IPv4 1 
103.230.142.4
Details IPv4 1 
81.246.73.98
Details IPv4 1 
84.199.16.226
Details IPv4 1 
80.63.69.243
Details IPv4 1 
181.113.61.242
Details IPv4 1 
181.211.37.50
Details IPv4 1 
181.39.50.66
Details IPv4 1 
201.247.172.155
Details IPv4 1 
193.40.226.194
Details IPv4 1 
193.40.226.66
Details IPv4 1 
193.251.153.1
Details IPv4 1 
181.210.19.211
Details IPv4 1 
190.4.27.122
Details IPv4 2 
203.142.69.82
Details IPv4 2 
117.102.125.50
Details IPv4 1 
82.166.142.26
Details IPv4 1 
41.72.215.226
Details IPv4 1 
60.54.119.242
Details IPv4 1 
189.240.115.18
Details IPv4 1 
187.217.170.233
Details IPv4 1 
189.240.245.141
Details IPv4 1 
189.240.254.193
Details IPv4 1 
189.240.254.202
Details IPv4 1 
189.240.254.209
Details IPv4 1 
189.240.254.217
Details IPv4 1 
201.147.171.225
Details IPv4 1 
201.147.171.233
Details IPv4 1 
187.174.194.23
Details IPv4 1 
201.157.58.162
Details IPv4 1 
187.217.188.220
Details IPv4 1 
187.217.80.162
Details IPv4 1 
187.217.108.81
Details IPv4 1 
201.116.62.192
Details IPv4 1 
187.141.19.195
Details IPv4 1 
201.139.227.74
Details IPv4 1 
201.148.31.122
Details IPv4 1 
187.141.246.178
Details IPv4 1 
168.121.46.82
Details IPv4 1 
181.177.233.20
Details IPv4 1 
195.178.51.242
Details IPv4 1 
195.178.51.252
Details IPv4 1 
113.161.106.74
Details IPv4 1 
196.27.103.36
Details IPv4 1 
197.155.229.194
Details IPv4 1 
41.79.56.33