Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Fake CCleaner Installer Deploys GhostDesk Chrome Spyware to Steal Credentials, Cookies and Keystrokes
Excerpt
Cybercriminals are using a fake CCleaner installer to infect Windows users with GhostDesk, a malicious Chrome extension designed to spy on browsing activity and steal sensitive information. CCleaner is one of the most widely recognized PC-cleaning utilities, with more than 2 billion downloads worldwide. Its popularity makes it a valuable lure for threat actors, who can abuse user trust in the brand to deliver malware through convincing download pages. The campaign uses a…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | liderongrade.duckdns.org | High | Score 58/100 | First seen |
| Domain | ccleanerwind.top | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…