Detecting Scatter Swine: Insights into a Relentless Phishing Campaign
Tags
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Data Credentials - T1589.001 Phishing - T1660 Phishing - T1566 Sms Messages - T1636.004 Connection Proxy - T1090 |
Common Information
| Type | Value |
|---|---|
| UUID | f38b3cab-cf10-4a22-b5b0-a9887606b4e6 |
| Fingerprint | 243c3e93090ad52d |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Aug. 25, 2022, midnight |
| Added to db | Jan. 16, 2023, 3:56 p.m. |
| Last updated | Nov. 7, 2024, 6:48 p.m. |
| Headline | Detecting Scatter Swine: Insights into a Relentless Phishing Campaign |
| Title | Detecting Scatter Swine: Insights into a Relentless Phishing Campaign |
| Detected Hints/Tags/Attributes | 37/2/18 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://sec.okta.com/scatterswine |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | corp.net |
|
| Details | Domain | 2 | help.com |
|
| Details | Domain | 1 | help.net |
|
| Details | Domain | 2 | helpdesk.com |
|
| Details | Domain | 1 | login.co |
|
| Details | Domain | 1 | mfa.com |
|
| Details | Domain | 1 | okta.co |
|
| Details | Domain | 12 | okta.com |
|
| Details | Domain | 1 | okta.net |
|
| Details | Domain | 1 | okta.org |
|
| Details | Domain | 1 | okta.us |
|
| Details | Domain | 1 | onelogin.com |
|
| Details | Domain | 4 | sso.com |
|
| Details | Domain | 1 | sso.net |
|
| Details | Domain | 2 | vpn.com |
|
| Details | Domain | 1 | vpn.net |
|
| Details | Domain | 1 | vpn.org |
|
| Details | File | 1 | debugdata.log |