TeamTNT’s Extended Credential Harvester Targets Cloud Services, Other Software
Tags
cmtmf-attack-pattern: Supply Chain Compromise
attack-pattern: Data Model Bash History - T1552.003 Cloud Services - T1021.007 Credentials - T1589.001 Malware - T1587.001 Malware - T1588.001 Private Keys - T1552.004 Server - T1583.004 Server - T1584.004 Serverless - T1583.007 Serverless - T1584.007 Software - T1592.002 Ssh - T1021.004 Supply Chain Compromise - T1474 Vulnerabilities - T1588.006 Bash History - T1139 Private Keys - T1145 Supply Chain Compromise - T1195 Default Credentials Supply Chain Compromise
Show in Graph
Common Information
Type Value
UUID d2d01a27-2bac-42e2-8b5b-fd11f3efb336
Fingerprint 9d60894a8ca3830d
Analysis status DONE
Considered CTI value 1
Text language
Published May 18, 2021, midnight
Added to db Sept. 26, 2022, 9:33 a.m.
Last updated Oct. 16, 2024, 2:47 a.m.
Headline TeamTNT’s Extended Credential Harvester Targets Cloud Services, Other Software
Title TeamTNT’s Extended Credential Harvester Targets Cloud Services, Other Software
Detected Hints/Tags/Attributes 53/2/2
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_us/research/21/e/teamtnt-extended-credential-harvester-targets-cloud-services-other-software.html
Details Source https://www.trendmicro.com/en_be/research/21/e/teamtnt-extended-credential-harvester-targets-cloud-services-other-software.html
Details Source https://www.trendmicro.com/en_ie/research/21/e/teamtnt-extended-credential-harvester-targets-cloud-services-other-software.html
Details Source https://www.trendmicro.com/en_ph/research/21/e/teamtnt-extended-credential-harvester-targets-cloud-services-other-software.html
Details Source https://www.trendmicro.com/en_se/research/21/e/teamtnt-extended-credential-harvester-targets-cloud-services-other-software.html
Details Source https://www.trendmicro.com/en_fi/research/21/e/teamtnt-extended-credential-harvester-targets-cloud-services-other-software.html
Details Source https://www.trendmicro.com/en_nl/research/21/e/teamtnt-extended-credential-harvester-targets-cloud-services-other-software.html
Details Source https://www.trendmicro.com/en_ae/research/21/e/teamtnt-extended-credential-harvester-targets-cloud-services-other-software.html
Details Source https://www.trendmicro.com/en_gb/research/21/e/teamtnt-extended-credential-harvester-targets-cloud-services-other-software.html
Details Source https://www.trendmicro.com/en_ca/research/21/e/teamtnt-extended-credential-harvester-targets-cloud-services-other-software.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details Domain 49 
trojan.sh
Details sha256 7 
ed40bce040778e2227c869dac59f54c320944e19f77543954f40019e2f2b0c35