MoustachedBouncer hackers use AiTM attacks to spy on diplomats - RedPacket Security
Tags
country: Belarus Belgium
attack-pattern: Direct Adversary-In-The-Middle - T1638 Adversary-In-The-Middle - T1557 Dns - T1071.004 Dns - T1590.002 Javascript - T1059.007 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Connection Proxy - T1090 Powershell - T1086 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID f7b7b827-bd5d-492a-84a3-df180408a63a
Fingerprint 9d279b59ade3aec2
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 11, 2023, 5:02 a.m.
Added to db Aug. 11, 2023, 8:28 a.m.
Last updated Nov. 12, 2024, 11:48 a.m.
Headline MoustachedBouncer hackers use AiTM attacks to spy on diplomats
Title MoustachedBouncer hackers use AiTM attacks to spy on diplomats - RedPacket Security
Detected Hints/Tags/Attributes 54/2/2
Source URLs
Redirection Url
Details Source https://www.redpacketsecurity.com/moustachedbouncer-hackers-use-aitm-attacks-to-spy-on-diplomats/
URL Provider
Details Provider Source level domain
Details redpacketsecurity.com www.redpacketsecurity.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 361 ✔ RedPacket Security https://www.redpacketsecurity.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 45 
cve-2021-1732
Details Domain 5 
updates.microsoft.com