Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
35 IOCs
BengalSEO Part 1: Anatomy of the Operation
Malware Families
Excerpt
BengalSEO Part 1: Anatomy of the Operation - The DFIR Report Read our latest report Click here X Public Reports Products Products Overview Threat Intel Threat Feed Private DFIR Reports All Intel Active Defense DFIR Labs Case Artifacts - Detection Pack AI Training Ground - bruteratel From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion Read More - dragonforce Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs Read More Services…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →35 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | pltechoo.pro | High | Score 58/100 | First seen |
| Domain | url90.com | High | Score 58/100 | First seen |
| Domain | pre.im | High | Score 58/100 | First seen |
| Domain | us6.my | High | Score 58/100 | First seen |
| Domain | us3.org | High | Score 58/100 | First seen |
| Domain | fm.ci | High | Score 58/100 | First seen |
| Domain | 4jio.com | High | Score 58/100 | First seen |
| Domain | iconnectpc.com | High | Score 58/100 | First seen |
| Domain | sasta.holiday | High | Score 58/100 | First seen |
| Domain | ustechnio100.com | High | Score 58/100 | First seen |
| Domain | garage2global.com | High | Score 58/100 | First seen |
| Domain | flosyr.com | High | Score 58/100 | First seen |
| Domain | reficon.pro | High | Score 58/100 | First seen |
| Domain | tx.platdir.com | High | Score 58/100 | First seen |
| Domain | readthedocs.io | High | Score 58/100 | First seen |
| Domain | ustechnio.com | High | Score 58/100 | First seen |
| Domain | ajax.googleapis.com.co | High | Score 58/100 | First seen |
| Domain | dll.lat | High | Score 58/100 | First seen |
| Domain | wapp.live | High | Score 58/100 | First seen |
| Domain | q82.net | High | Score 58/100 | First seen |
| Domain | u320.my | High | Score 58/100 | First seen |
| Domain | tax.dll.lat | High | Score 58/100 | First seen |
| Domain | ww0.us | High | Score 58/100 | First seen |
| Domain | wc.ci | Medium | Score 54/100 | First seen |
| Domain | tx.newredir.com | High | Score 58/100 | First seen |
| Domain | aol.cx | High | Score 58/100 | First seen |
| Domain | cus.cam | High | Score 58/100 | First seen |
| Domain | activate.uhc.com | High | Score 58/100 | First seen |
| Domain | to.ghredir.com | High | Score 58/100 | First seen |
| Domain | ts.remdos.com | High | Score 58/100 | First seen |
| IP | 5.101.140.80 | High | Score 58/100 | First seen |
| Domain | us99.org | High | Score 58/100 | First seen |
| URL | https://stats.us3.org/matomo.php | High | Score 58/100 | First seen |
| Domain | us00.net | High | Score 58/100 | First seen |
| Domain | link72.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…