Are the Notorious Cyber Criminals Evil Corp actually Russian Spies? - Truesec
Tags
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Domain Fronting - T1090.004 Domains - T1583.001 Domains - T1584.001 Drive-By Compromise - T1456 Ip Addresses - T1590.005 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Msbuild - T1127.001 Powershell - T1059.001 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Connection Proxy - T1090 Domain Fronting - T1172 Drive-By Compromise - T1189 Powershell - T1086 Scripting - T1064 Drive-By Compromise Scripting
Show in Graph
Common Information
Type Value
UUID f3758476-2fff-4c66-badb-3cbbd2013574
Fingerprint 62504998e0f95a0
Analysis status DONE
Considered CTI value 0
Text language
Published May 5, 2021, midnight
Added to db Sept. 11, 2022, 12:42 p.m.
Last updated Nov. 17, 2024, 10:40 p.m.
Headline Are Evil Corp Actually Russian Spies?
Title Are the Notorious Cyber Criminals Evil Corp actually Russian Spies? - Truesec
Detected Hints/Tags/Attributes 96/3/12
Source URLs
Redirection Url
Details Source https://blog.truesec.com/2021/05/05/are-the-notorious-cyber-criminals-evil-corp-actually-russian-spies/
URL Provider
Details Provider Source level domain
Details truesec.com blog.truesec.com
Attributes
Details Type #Events CTI Value
Details Domain 52 
msn.com
Details Domain 11 
lastpass.com
Details Domain 57 
adobe.com
Details Domain 2 
roofingspecialists.info
Details Domain 2 
twimg-us.azureedge.net
Details Domain 2 
cdn.auditor.adobe.com
Details Domain 1 
images.adsyndication.msn.com
Details Domain 1 
lp-cdn.lastpass.com
Details File 149 
msbuild.exe
Details IPv4 2 
185.82.127.86
Details IPv4 1 
66.58.201.137
Details Url 1 
http://roofingspecialists.info/file.