Hackers Flood the Web with 100,000 Malicious Pages, Promising…
Tags
attack-pattern: Data Models Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Software - T1592.002 Brute Force - T1110 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID d5fb6ff9-1b3a-4b98-9ad5-f5fa886400a5
Fingerprint 1040adfbabb4afa8
Analysis status DONE
Considered CTI value 0
Text language
Published April 14, 2021, midnight
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline Hackers Flood the Web with 100,000 Malicious Pages, Promising Professionals Free Business Forms, But Delivering Malware, Reports eSentire
Title Hackers Flood the Web with 100,000 Malicious Pages, Promising…
Detected Hints/Tags/Attributes 94/1/18
Source URLs
Redirection Url
Details Source https://www.esentire.com/security-advisories/hackers-flood-the-web-with-100-000-malicious-pages-promising-professionals-free-business-forms-but-are-delivering-malware-reports-esentire
URL Provider
Details Provider Source level domain
Details esentire.com www.esentire.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
passiondiamond.site
Details Domain 1373 
twitter.com
Details Domain 172 
www.crowdstrike.com
Details Domain 1 
security5magics.blogspot.com
Details Domain 58 
redcanary.com
Details Domain 31 
blog.morphisec.com
Details Domain 43 
sites.google.com
Details Domain 31 
www.esentire.com
Details File 2 
docx2rtf.exe
Details File 2 
photodesigner7_x86-64.exe
Details File 2 
expert_pdf.exe
Details File 1 
tracking-jupyter-malware.html
Details Url 1 
https://twitter.com/jameswt_mht
Details Url 3 
https://www.crowdstrike.com/blog/solarmarker-backdoor-technical-analysis
Details Url 1 
http://security5magics.blogspot.com/2020/12/tracking-jupyter-malware.html
Details Url 3 
https://redcanary.com/blog/yellow-cockatoo
Details Url 4 
https://blog.morphisec.com/jupyter-infostealer-backdoor-introduction
Details Url 1 
https://www.esentire.com/get-started