Polyfill supply chain attack hits 100K+ sites
Tags
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 Vulnerabilities - T1588.006 |
Common Information
| Type | Value |
|---|---|
| UUID | d64c1211-66e6-4c1e-95d5-6095bd890221 |
| Fingerprint | 9890b0989d5b3602 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | June 25, 2024, midnight |
| Added to db | Aug. 31, 2024, 8:09 a.m. |
| Last updated | Nov. 17, 2024, 12:54 p.m. |
| Headline | Polyfill supply chain attack hits 100K+ sites |
| Title | Polyfill supply chain attack hits 100K+ sites |
| Detected Hints/Tags/Attributes | 22/1/39 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://sansec.io/research/polyfill-supply-chain-attack |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 221 | ✔ | Sansec - experts in eCommerce security | https://sansec.io/atom.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 3 | bootcdn.net |
|
| Details | Domain | 4 | bootcss.com |
|
| Details | Domain | 3 | staticfile.net |
|
| Details | Domain | 3 | staticfile.org |
|
| Details | Domain | 1 | unionadjs.com |
|
| Details | Domain | 1 | xhsbpza.com |
|
| Details | Domain | 1 | union.macoms.la |
|
| Details | Domain | 1 | newcrbpc.com |
|
| Details | Domain | 8 | cdn.polyfill.io |
|
| Details | Domain | 3 | www.googie-anaiytics.com |
|
| Details | Domain | 18 | polyfill.io |
|
| Details | Domain | 4 | window.location.host |
|
| Details | Domain | 3 | kuurza.com |
|
| Details | Domain | 1 | www.dxtv1.com |
|
| Details | Domain | 1 | www.ys752.com |
|
| Details | Domain | 1 | shuanshu.com.com |
|
| Details | Domain | 6 | hm.baidu.com |
|
| Details | Domain | 5 | cnzz.com |
|
| Details | Domain | 1 | 51.la |
|
| Details | Domain | 1 | matomo.org |
|
| Details | Domain | 15 | google-analytics.com |
|
| Details | Domain | 7 | googletagmanager.com |
|
| Details | Domain | 1 | plausible.io |
|
| Details | Domain | 14 | statcounter.com |
|
| Details | Domain | 4 | cdn.bootcss.com |
|
| Details | File | 5 | polyfill.js |
|
| Details | File | 8 | navigator.pl |
|
| Details | File | 1 | checkcachehw.js |
|
| Details | File | 35 | document.doc |
|
| Details | File | 18 | ga.js |
|
| Details | File | 3 | highlight.js |
|
| Details | File | 218 | min.js |
|
| Details | File | 8 | 2.js |
|
| Details | Url | 1 | https://www.googie-anaiytics.com/html/checkcachehw.js |
|
| Details | Url | 1 | https://kuurza.com/redirect?from=bitget |
|
| Details | Url | 1 | https://www.googie-anaiytics.com/ga.js |
|
| Details | Url | 1 | https://cdn.bootcss.com/highlight.js/9.7.0/highlight.min.js |
|
| Details | Url | 1 | https://union.macoms.la/jquery.min-4.0.2.js |
|
| Details | Url | 1 | https://newcrbpc.com/redirect?from=bscbc |