Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
DPRK-Linked Hackers Use Trojanized macOS Installers to Deploy OtterCookie RAT
Excerpt
DPRK-linked threat actors are using fake macOS installers to deliver the OtterCookie remote access trojan (RAT) in an expansion of the long-running Contagious Interview campaign. Jamf Threat Labs found 14 malicious DMG and PKG files impersonating popular Mac applications, including The Unarchiver, Presentify, PDFify, Magic Disk Cleaner, Sketch, SiteSucker Pro, Mole, Bartender, Disk Doctor Pro, and Mp3tag. The campaign is linked to earlier attacks that used fake job-interview…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 162.0.239.85 | High | Score 72/100 | First seen |
IOC Relationship Graph
Building graph…