Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Malware Families
Excerpt
It all started with a simple follow up on another Lumma infection. I wanted to find and automate a quick way to get hunting leads for infra that is not hidden behind CDNs but I think I might have found a Bulletproof hosting provider. Lumma continues to be in the top 5 malware families [1] [2] , which means high sample availability on malware reporting platforms and a great starting point for a hunt! Starting from the latest Lumma samples, we can expand to additional malicious…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability(5)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | dbeaver-pro.site | High | Score 58/100 | First seen |
| Domain | dbeaver.it.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…