Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
5 IOCs
Cato CTRL™ Threat Research: Oyster Malware Loader Targets Tech-Savvy Users with Smarter Techniques During Summer Malvertising Campaign
Malware Families
Excerpt
Executive Summary Summertime in the U.S., Europe, and many other regions typically falls between June and September . Tech teams, admins, and even their bosses take vacations. Inboxes slow down, and production systems finally get a breather. But for the threat actors behind Oyster, while others were reaching for sunscreen or enjoying real sea fishing, they launched their own phishing campaign using something far more effective than email and sharpened their hook. After…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →5 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 45.86.230.77 | High | Score 58/100 | First seen |
| Domain | skyviberealty.com | High | Score 58/100 | First seen |
| Domain | putty.us.com | High | Score 58/100 | First seen |
| SHA256 | e25db8020f7fcadaec5dd54dd7364d8eaa9efd8755fb91a357f3d29bf2d9fbad | Medium | Score 53/100 | First seen |
| SHA256 | 0bb664420f910961b579f5b9f9047d5d9de52f0bb06cd49e08747ecf9056f5d6 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…