Nile Phish: Large-Scale Phishing Campaign Targeting Egyptian Civil Society - The Citizen Lab
Tags
cmtmf-attack-pattern: Masquerading
country: Egypt Argentina Bolivia Jordan
maec-delivery-vectors: Watering Hole
attack-pattern: Data Cloud Services - T1021.007 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Dynamic Dns - T1311 Dynamic Dns - T1333 Email Accounts - T1585.002 Email Accounts - T1586.002 Email Addresses - T1589.002 Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Sms Messages - T1636.004 Tool - T1588.002 Vulnerabilities - T1588.006 Masquerading - T1036 Masquerading
Show in Graph
Common Information
Type Value
UUID e2114cd3-2d33-4964-82b2-32183425f208
Fingerprint 75100cd92018abcc
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 2, 2017, midnight
Added to db Feb. 17, 2023, 11:02 p.m.
Last updated Nov. 18, 2024, 4:35 a.m.
Headline Nile Phish Large-Scale Phishing Campaign Targeting Egyptian Civil Society
Title Nile Phish: Large-Scale Phishing Campaign Targeting Egyptian Civil Society - The Citizen Lab
Detected Hints/Tags/Attributes 112/4/32
Source URLs
Redirection Url
Details Redirection https://citizenlab.ca/2017/02/nilephish-report
Details Source https://citizenlab.ca/2017/02/nilephish-report/
Details Source https://citizenlab.org/2017/02/nilephish-report/
URL Provider
Details Provider Source level domain
Details citizenlab.ca citizenlab.ca
Details citizenlab.org citizenlab.org
Attributes
Details Type #Events CTI Value
Details Domain 1 
dropboxsupport.servehttp.com
Details Domain 1 
dropbox-service.serveftp.com
Details Domain 1 
googledriver-sign.ddns.net
Details Domain 1 
mailgooglesign.servehttp.com
Details Domain 1 
dropbox-sign.servehttp.com
Details Domain 1176 
gmail.com
Details Domain 1 
googleverify-signin.servehttp.com
Details Domain 1 
googlesignin.servehttp.com
Details Domain 1 
security-myaccount.servehttp.com
Details Domain 1 
fedex-sign.servehttp.com
Details Domain 1 
googledrive-sign.servehttp.com
Details Domain 1 
google-maps.servehttp.com
Details Domain 1 
account-google.serveftp.com
Details Domain 1 
googlesecure-serv.servehttp.com
Details Domain 1 
activate-google.servehttp.com
Details Domain 1 
googlemaps.servehttp.com
Details Domain 1 
verification-acc.servehttp.com
Details Domain 1 
secure-team.servehttp.com
Details Domain 1 
myaccount.servehttp.com
Details Domain 1 
device-activation.servehttp.com
Details Domain 1 
fedex-shipping.servehttp.com
Details Domain 1 
fedex-mail.servehttp.com
Details Domain 1 
aramex-shipping.servehttp.com
Details Email 1 
customerserviceonlineteam@gmail.com
Details Email 1 
dropbox.notfication@gmail.com
Details Email 1 
dropbox.notifications.mails@gmail.com
Details Email 1 
dropbox.noreplay@gmail.com
Details Email 1 
drive.noreply.mail@gmail.com
Details Email 1 
secure.policy.check@gmail.com
Details IPv4 1 
108.61.176.96
Details IPv4 1 
104.238.191.204
Details IPv4 1 
176.123.26.42