Phishing Attacks Impersonating Famous Korean Banking Apps - ASEC BLOG
Tags
| country: | Japan Singapore |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 |
Common Information
| Type | Value |
|---|---|
| UUID | fce267ff-1cff-48e1-936e-ce74c4deb43e |
| Fingerprint | a0610f5b497aefeb |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 22, 2022, 10:46 a.m. |
| Added to db | Dec. 22, 2022, 10:52 a.m. |
| Last updated | Sept. 22, 2024, 3:11 p.m. |
| Headline | Phishing Attacks Impersonating Famous Korean Banking Apps |
| Title | Phishing Attacks Impersonating Famous Korean Banking Apps - ASEC BLOG |
| Detected Hints/Tags/Attributes | 33/3/59 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://asec.ahnlab.com/en/44680/ |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 17 | ✔ | ASEC | https://asec.ahnlab.com/en/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 4 | n-e.kr |
|
| Details | Domain | 5 | p-e.kr |
|
| Details | Domain | 6 | r-e.kr |
|
| Details | Domain | 5 | o-r.kr |
|
| Details | Domain | 7 | kro.kr |
|
| Details | Domain | 2 | conf.simpleedit.n-e.kr |
|
| Details | Domain | 2 | foward.viewpropile.p-e.kr |
|
| Details | Domain | 2 | dashboard.quikveoriy.o-r.kr |
|
| Details | Domain | 2 | www1.quickedit.o-r.kr |
|
| Details | Domain | 2 | www2.configment.p-e.kr |
|
| Details | Domain | 2 | wvw3.secure-edit.n-e.kr |
|
| Details | Domain | 2 | wwv3.supports.o-r.kr |
|
| Details | Domain | 2 | wvw1.user2list.kro.kr |
|
| Details | Domain | 2 | shinhanbank.kro.kr |
|
| Details | Domain | 2 | smartshinhan.kro.kr |
|
| Details | Domain | 2 | tos.p-e.kr |
|
| Details | Domain | 2 | kbank.o-r.kr |
|
| Details | Domain | 2 | k-bank1.kro.kr |
|
| Details | Domain | 2 | kamco.kbloan.r-e.kr |
|
| Details | Domain | 2 | kakaosaving.kro.kr |
|
| Details | Domain | 2 | naver.o-r.kr |
|
| Details | Domain | 2 | naver.kro.kr |
|
| Details | Domain | 2 | naver65.n-e.kr |
|
| Details | Domain | 2 | digital.pepperbank.kro.kr |
|
| Details | Domain | 2 | inglife.kro.kr |
|
| Details | Domain | 2 | nhlife.kro.kr |
|
| Details | Domain | 2 | kamco.kbloan.kro.kr |
|
| Details | Domain | 2 | kamco.webs.kro.kr |
|
| Details | Domain | 2 | k-bank.o-r.kr |
|
| Details | Domain | 2 | heungkukfire.p-e.kr |
|
| Details | File | 2 | www2.config |
|
| Details | IPv4 | 2 | 210.16.120.212 |
|
| Details | IPv4 | 2 | 139.99.89.153 |
|
| Details | IPv4 | 2 | 172.104.112.214 |
|
| Details | Url | 1 | http://conf.simpleedit.n-e.kr |
|
| Details | Url | 1 | http://foward.viewpropile.p-e.kr |
|
| Details | Url | 1 | http://dashboard.quikveoriy.o-r.kr |
|
| Details | Url | 1 | http://www1.quickedit.o-r.kr |
|
| Details | Url | 1 | http://www2.configment.p-e.kr |
|
| Details | Url | 1 | http://wvw3.secure-edit.n-e.kr |
|
| Details | Url | 1 | http://wwv3.supports.o-r.kr |
|
| Details | Url | 1 | http://wvw1.user2list.kro.kr |
|
| Details | Url | 2 | http://shinhanbank.kro.kr |
|
| Details | Url | 2 | http://smartshinhan.kro.kr |
|
| Details | Url | 2 | http://tos.p-e.kr |
|
| Details | Url | 2 | http://kbank.o-r.kr |
|
| Details | Url | 2 | http://k-bank1.kro.kr |
|
| Details | Url | 2 | http://kamco.kbloan.r-e.kr |
|
| Details | Url | 2 | http://kakaosaving.kro.kr |
|
| Details | Url | 2 | http://naver.o-r.kr |
|
| Details | Url | 2 | http://naver.kro.kr |
|
| Details | Url | 2 | http://naver65.n-e.kr |
|
| Details | Url | 2 | http://digital.pepperbank.kro.kr |
|
| Details | Url | 2 | http://inglife.kro.kr |
|
| Details | Url | 2 | http://nhlife.kro.kr |
|
| Details | Url | 2 | http://kamco.kbloan.kro.kr |
|
| Details | Url | 2 | http://kamco.webs.kro.kr |
|
| Details | Url | 2 | http://k-bank.o-r.kr |
|
| Details | Url | 2 | http://heungkukfire.p-e.kr |