Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Explorer COM Hijacking Attack Loads Shellcode From AES-Encrypted Steganographic PNG
Threat Actors
Excerpt
A highly sophisticated cyberespionage campaign has been discovered utilizing advanced persistence techniques and encrypted steganography to infiltrate targeted networks. The 360 Advanced Threat Research Institute said in a report shared with Cyber Security News (CSN) that the notorious state-sponsored hacking group APT-C-20, widely known as APT28 or Fancy Bear, is actively orchestrating this stealthy operation. Active since 2004, this elite hacking collective is deploying a…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability
Victim
Attack Flow7 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 77014b3e77529079f041b5b9e73a013b | Medium | Score 53/100 | First seen |
| MD5 | b077401fe3d9642345d4c3deafa60aa5 | High | Score 85/100 | First seen |
IOC Relationship Graph
Building graph…