Trellix Global Defenders: Invasion of the Information Snatchers - Protecting against RedLine Infostealer
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Cloud Account - T1087.004 Cloud Account - T1136.003 Cloud Accounts - T1078.004 Cloud Accounts - T1585.003 Cloud Accounts - T1586.003 Credential Stuffing - T1110.004 Credentials - T1589.001 Credentials From Web Browsers - T1555.003 Credentials From Web Browsers - T1503 Email Account - T1087.003 Email Accounts - T1585.002 Email Accounts - T1586.002 Malware - T1587.001 Malware - T1588.001 Password Managers - T1555.005 Phishing - T1660 Phishing - T1566 Social Media - T1593.001 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID fe2492d4-4f46-45ff-9598-15fc677a925d
Fingerprint a48d1dca0f2ec1c9
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 7, 2022, midnight
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Sept. 3, 2024, 4:57 a.m.
Headline Trellix Global Defenders: Invasion of the Information Snatchers - Protecting against RedLine Infostealer
Title Trellix Global Defenders: Invasion of the Information Snatchers - Protecting against RedLine Infostealer
Detected Hints/Tags/Attributes 55/2/2
Source URLs
Redirection Url
Details Source https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/trellix-global-defenders-invaders-of-the-information-snatchers.html
URL Provider
Details Provider Source level domain
Details trellix.com www.trellix.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
redline.gg
Details Domain 1 
redlinestealer.mk