A Malvertising Campaign of Secrets and Lies - Check Point Research
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID ce126540-bc97-43dd-ace7-2e192556539e
Fingerprint aca5b939a0176de1
Analysis status DONE
Considered CTI value 2
Text language
Published July 30, 2018, 1 p.m.
Added to db Feb. 18, 2023, 12:40 a.m.
Last updated Oct. 1, 2024, 2:28 p.m.
Headline A Malvertising Campaign of Secrets and Lies
Title A Malvertising Campaign of Secrets and Lies - Check Point Research
Detected Hints/Tags/Attributes 57/2/19
Source URLs
Redirection Url
Details Source https://research.checkpoint.com/2018/malvertising-campaign-based-secrets-lies/
Details Source https://research.checkpoint.com/malvertising-campaign-based-secrets-lies/
URL Provider
Details Provider Source level domain
Details checkpoint.com research.checkpoint.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
hibids10.com
Details Domain 6 
onclkds.com
Details Domain 1 
www.cpm10.com
Details Domain 1 
www.cpm20.com
Details Domain 1 
www.hibids10.com
Details Domain 1 
www.sloi1.com
Details Domain 2 
exoclick.com
Details Domain 2 
bestadbid.com
Details Domain 3 
xml.pdn-1.com
Details Domain 1 
xml.pdn-2.com
Details Domain 1 
xml.pdn-3.com
Details Domain 1 
xml.pdn-4.com
Details Domain 1 
xml.pdn-5.com
Details File 40 
jquery.js
Details File 5 
afu.php
Details md5 1 
fe0a93971e993f059d7a78bf2fa5117a
Details md5 1 
f9363dcc22f7f5fc89d5d6dcccb1e580
Details md5 1 
789a4129e78c00008a47b36e23d65ea7
Details IPv4 4 
134.249.116.78