Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
5 IOCs
Disruption Targets Major Chinese-Language Phishing Kits with Japanese Focus
Excerpt
Key findings A disruption action targeting prominent players across the Chinese-speaking phishing and fraud ecosystem struck a blow to the most high-volume threats in Proofpoint data. Proofpoint supported Microsoft and other private and public partners in the civil lawsuit and takedown action. The highest-volume direct email threats in Proofpoint campaign data come from three phishing kits our researchers named CoGUI, CoAceV, and CoFish_Ws, which all actively target Japanese…
Read the original report →Diamond Model
Adversary
Infrastructure(5)
Capability
Victim
Indicators of Compromise
Open the mindmap →5 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://paidy.farradae.com/paidy/ubmissionsjp | High | Score 58/100 | First seen |
| URL | https://lygyaou.com/9AioLNhtdi.kumamoto-city.jp | High | Score 58/100 | First seen |
| URL | https://ylhgkj.com/BCuXkTPfKZ.kumamoto-city.jp | High | Score 58/100 | First seen |
| URL | https://kenandy.shop/paidy/ubmisionsjp/ | High | Score 58/100 | First seen |
| URL | https://new-app-haixing.com/1DWSd1DeDf.kumamoto-city.jp | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…