Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Adult Spam PDFs on Official EU Infrastructure: Trusted Domain, Dirty Search Results
Excerpt
by Robin Dost Sometimes security research starts with malware, logs, infrastructure pivots or some annoying broken sample. And sometimes it starts with a Google search result that simply should not exist. Every now and then I check search engines for strange entries related to public EU infrastructure. Not by scanning systems or by touching anything private, but by looking at what is already publicly indexed: odd PDFs, weird titles, abused upload paths, spam snippets,…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Attack Flow5 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://xvidey.cam | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…