Malvertising via Dynamic Search Ads delivers malware bonanza
Tags
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | d9b06e7f-4f3c-4253-987b-27cd5dc95c57 |
| Fingerprint | 91601ad0893706e9 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Oct. 29, 2023, 5:33 a.m. |
| Added to db | Nov. 6, 2023, 5:41 p.m. |
| Last updated | Oct. 9, 2024, 8:11 a.m. |
| Headline | Malvertising via Dynamic Search Ads delivers malware bonanza |
| Title | Malvertising via Dynamic Search Ads delivers malware bonanza |
| Detected Hints/Tags/Attributes | 23/2/27 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 40 | ✔ | Malwarebytes | https://blog.malwarebytes.org/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 3 | eplangocview.com |
|
| Details | Domain | 3 | roberthamilton.top |
|
| Details | Domain | 6 | experiment.pw |
|
| Details | Domain | 3 | medfioytrkdkcodlskeej.net |
|
| Details | Domain | 3 | lakuiksong.known.co.ke |
|
| Details | Domain | 3 | stim.graspalace.com |
|
| Details | Domain | 3 | neuralshit.net |
|
| Details | Domain | 3 | pic.himanfast.com |
|
| Details | Domain | 4 | galandskiyher5.com |
|
| Details | Domain | 3 | gobr1on.top |
|
| Details | Domain | 3 | flyawayaero.net |
|
| Details | Domain | 2 | 632432.space |
|
| Details | Domain | 12 | yip.su |
|
| Details | Domain | 3 | potatogoose.com |
|
| Details | Domain | 5 | walkinglate.com |
|
| Details | File | 4 | file.7z |
|
| Details | md5 | 3 | 1298d7c8d865df39937f1b0eb46c0e3f |
|
| Details | md5 | 3 | 7725eaa6592c80f8124e769b4e8a07f7 |
|
| Details | md5 | 3 | baf14778c246e15550645e30ba78ce1c |
|
| Details | IPv4 | 6 | 109.107.182.2 |
|
| Details | IPv4 | 6 | 171.22.28.226 |
|
| Details | IPv4 | 3 | 185.172.128.69 |
|
| Details | IPv4 | 3 | 194.169.175.233 |
|
| Details | IPv4 | 3 | 171.22.28.221 |
|
| Details | IPv4 | 3 | 171.22.28.213 |
|
| Details | IPv4 | 3 | 85.217.144.143 |
|
| Details | IPv4 | 3 | 185.216.71.26 |