OSX/Dok Refuses to Go Away and It’s After Your Money - Check Point Software
Tags
country: Germany
maec-delivery-vectors: Watering Hole
attack-pattern: Direct Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Software - T1592.002 Connection Proxy - T1090 Sudo - T1169
Show in Graph
Common Information
Type Value
UUID cae4a40f-5029-41b7-a19c-c9f241945669
Fingerprint 9c65d9b99a23369c
Analysis status DONE
Considered CTI value 0
Text language
Published July 13, 2017, 4 p.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 18, 2024, 8:27 a.m.
Headline OSX/Dok Refuses to Go Away and It’s After Your Money
Title OSX/Dok Refuses to Go Away and It’s After Your Money - Check Point Software
Detected Hints/Tags/Attributes 60/3/22
Source URLs
Redirection Url
Details Source https://blog.checkpoint.com/2017/07/13/osxdok-refuses-go-away-money/
URL Provider
Details Provider Source level domain
Details checkpoint.com blog.checkpoint.com
Attributes
Details Type #Events CTI Value
Details Domain 2 
metrics.apple.com
Details Domain 2 
ocsp.apple.com
Details Domain 2 
su.itunes.apple.com
Details Domain 2 
ax.su.itunes.apple.com
Details Domain 2 
swscan.apple.com
Details Domain 2 
swcdn.apple.com
Details Domain 2 
swdist.apple.com
Details Domain 2 
a1.phobos.apple.com
Details Domain 2 
volume.apple.com
Details Domain 2 
war.apple.com
Details Domain 2 
www1.apple.com
Details Domain 2 
wwwtest.apple.com
Details Domain 2 
xml.apple.com
Details Domain 2 
xp.apple.com
Details Domain 2 
xp2.apple.com
Details Domain 97 
virustotal.com
Details Domain 268 
www.virustotal.com
Details Domain 1 
m665veffg3tqxoza.onion
Details Domain 2 
credit-suisse.com
Details IPv4 1442 
127.0.0.1
Details IPv4 59 
255.255.255.255
Details IPv6 72 
::1