Microsoft Exchange targeted for IcedID reply-chain hijacking attacks
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Credentials - T1589.001 Email Account - T1087.003 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Regsvr32 - T1218.010 Vulnerabilities - T1588.006 Connection Proxy - T1090 Regsvr32 - T1117
Show in Graph
Common Information
Type Value
UUID e539d1db-6e4c-4efd-b852-77709303b745
Fingerprint 27540a912077f69d
Analysis status DONE
Considered CTI value 0
Text language
Published March 28, 2022, midnight
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Microsoft Exchange targeted for IcedID reply-chain hijacking attacks
Title Microsoft Exchange targeted for IcedID reply-chain hijacking attacks
Detected Hints/Tags/Attributes 36/2/2
Source URLs
Redirection Url
Details Source https://www.bleepingcomputer.com/news/security/microsoft-exchange-targeted-for-icedid-reply-chain-hijacking-attacks/
URL Provider
Details Provider Source level domain
Details bleepingcomputer.com www.bleepingcomputer.com
Attributes
Details Type #Events CTI Value
Details Domain 4 
yourgroceries.top
Details File 459 
regsvr32.exe