One-stop-shop: Server steals data then offers it for sale
Tags
country: Australia India Japan Spain Thailand Portugal Ukraine
attack-pattern: Data Credentials - T1589.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID fd9c1032-0de9-48a1-85a5-d054626600a9
Fingerprint f4f981c388312547
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 29, 2016, 9:01 a.m.
Added to db Feb. 18, 2023, 1:37 a.m.
Last updated Sept. 1, 2024, 6:45 p.m.
Headline One-stop-shop: Server steals data then offers it for sale
Title One-stop-shop: Server steals data then offers it for sale
Detected Hints/Tags/Attributes 41/2/2
Source URLs
Redirection Url
Details Redirection https://securelist.com/research/76986/one-stop-shop-server-steals-data-then-offers-it-for-sale/
Details Source https://securelist.com/blog/research/76986/one-stop-shop-server-steals-data-then-offers-it-for-sale/
Details Source https://securelist.com/one-stop-shop-server-steals-data-then-offers-it-for-sale/76986/
Details Redirection https://securelist.com/research/76986/one-stop-shop-server-steals-data-then-offers-it-for-sale
URL Provider
Details Provider Source level domain
Details securelist.com securelist.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
op.biz
Details Url 1 
http://www.p******op.biz