Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Anti-bot services used by PhaaS - Part 2
Malware Families
Excerpt
Anti-bot services used by PhaaS - Part 2 | Malware Analysis Malware Analysis Anti-bot services used by PhaaS - Part 2 Dec 26, 2024 Randy McEoin Continuing from part 1 on anti-bot services used by Phishing-as-a-Service (PhaaS) kits, I will describe how a second anti-bot service provider called BlackTDS is used. As a recap from part 1, the purpose of an anti-bot service is to help protect a malicious website from inspection and detection by security services. The anti-bot…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://activecode.work/codework.php | High | Score 58/100 | First seen |
| Domain | blacktds.codes | High | Score 58/100 | First seen |
| URL | https://zmia.alnucresc.com/g2PK/ | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…