Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
40 IOCs
$7 Million in Expired Domains Fuel a Streaming Empire with a Malware Secret
Threat Actors
Malware Families
Excerpt
Sable Squirrel spends millions on expired domains to deliver illegal gambling, streaming, RAT malware, and ransomware in a massive cybercriminal enterprise. Infoblox Threat Intel | Dropcatch series | Part 2 of 3 Executive Summary A decade-old news site, a failed startup’s domain, a former corporate campaign, and a football club website do not usually end up in the same threat cluster. In Sable Squirrel’s case, though, they do. This actor has spent years turning other people’s…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability(7)
Victim
Indicators of Compromise
Open the mindmap →40 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | meung.app | High | Score 58/100 | First seen |
| Domain | dropcatch.com | High | Score 58/100 | First seen |
| Domain | samefacts.com | High | Score 58/100 | First seen |
| Domain | api-score.com | High | Score 58/100 | First seen |
| Domain | 90phutyy.io | High | Score 58/100 | First seen |
| Domain | thesports.com | High | Score 58/100 | First seen |
| Domain | colascore.com | High | Score 58/100 | First seen |
| Domain | 255.com | High | Score 58/100 | First seen |
| Domain | refvsb.com | High | Score 58/100 | First seen |
| Domain | imgts.com | High | Score 58/100 | First seen |
| Domain | socoliveku.cc | High | Score 58/100 | First seen |
| Domain | gvapi.cc | High | Score 58/100 | First seen |
| Domain | ws-xyz.com | High | Score 58/100 | First seen |
| Domain | jurasudfoot.com | High | Score 58/100 | First seen |
| Domain | sadd.io | High | Score 58/100 | First seen |
| Domain | vsbet276.com | High | Score 58/100 | First seen |
| Domain | lfastcdn.com | High | Score 58/100 | First seen |
| Domain | koepgd.app | High | Score 58/100 | First seen |
| Domain | maxfactor-international.com | High | Score 58/100 | First seen |
| Domain | chatboxn.com | High | Score 58/100 | First seen |
| Domain | healthymagination.com | High | Score 58/100 | First seen |
| Domain | animalrampage3d.io | High | Score 58/100 | First seen |
| Domain | cel-robox.com | High | Score 58/100 | First seen |
| Domain | xoilacz.com | High | Score 58/100 | First seen |
| Domain | stope40.org | High | Score 58/100 | First seen |
| Domain | institutobancopalmas.org | High | Score 58/100 | First seen |
| Domain | snsystems.com | High | Score 58/100 | First seen |
| Domain | trackervsb.live | High | Score 58/100 | First seen |
| SHA256 | 0464caa1c45cb753db25a95a30ce0b6814650b6f839a07cf8c2afdc143de7216 | Medium | Score 53/100 | First seen |
| Domain | krogeralbertsons.com | High | Score 58/100 | First seen |
| Domain | msrktz.app | High | Score 58/100 | First seen |
| Domain | buffalomarket.com | High | Score 58/100 | First seen |
| Domain | gene-chips.com | High | Score 58/100 | First seen |
| Domain | xemlaibongda.net | High | Score 58/100 | First seen |
| Domain | xoilacxys.top | High | Score 58/100 | First seen |
| Domain | msdht.app | High | Score 58/100 | First seen |
| Domain | sportliveapiz.com | High | Score 58/100 | First seen |
| Domain | veinteractive.com | High | Score 58/100 | First seen |
| Domain | colatv88xb.cc | High | Score 58/100 | First seen |
| Domain | 6789x.site | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…