Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
15 IOCs
Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America
Threat Actors
Malware Families
Excerpt
Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America Menu Tools ATOMs Security Consulting About Us Under Attack? English English Spanish (LATAM) Portuguese Threat Research Center Threat Research Malware Malware Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America 8 min read Related Products Advanced DNS Security Advanced URL Filtering Advanced WildFire Cloud-Delivered Security Services Cortex Cortex XDR Cortex XSIAM Unit 42…
Read the original report →Diamond Model
Adversary(2)
Infrastructure(6)
Capability(3)
Victim
Indicators of Compromise
Open the mindmap →15 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | m-doxa-sre.duckdns.org | High | Score 58/100 | First seen |
| Domain | m-doxa-vacunas.duckdns.org | High | Score 58/100 | First seen |
| SHA256 | a38b2cf8beff32a276eed8783723ecf8cc53d7dc88669e1b998dddc4db6fe996 | Medium | Score 53/100 | First seen |
| IP | 167.148.195.53 | High | Score 58/100 | First seen |
| Domain | m-doxa-geo.duckdns.org | High | Score 58/100 | First seen |
| SHA256 | 46ac289ce0c13666de616446f5d5a68da8bd150f4f065c3bec02f63776d3899c | Medium | Score 53/100 | First seen |
| IP | 165.22.184.26 | High | Score 75/100 | First seen |
| Domain | m-doxa-repuve.duckdns.org | High | Score 58/100 | First seen |
| Domain | m-doxa-intel.duckdns.org | High | Score 58/100 | First seen |
| SHA256 | 87bf8bc8b4a2cf34f0af1afe161f123a3d200e77f6c6f41b81bf6ae66ee172ec | Medium | Score 53/100 | First seen |
| SHA256 | 7d766942ef34542cee39c852286599958c4c2e23187010c4d38dbf88fcb40bf8 | Medium | Score 53/100 | First seen |
| Domain | m-doxa-apodo.duckdns.org | High | Score 58/100 | First seen |
| IP | 62.171.185.97 | High | Score 58/100 | First seen |
| IP | 178.128.87.160 | High | Score 58/100 | First seen |
| SHA256 | 4e218e70afdbb116209ec0ebe8fc556e296e69648aa4e0425b83c0e863a8fee5 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…