Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
22 IOCs
Fake Installers, Fake Reviews, Fake Services – Real Proxies, Real Victims
Threat Actors
Malware Families
Excerpt
Executive Summary Residential proxies are one of the hottest topics in cybersecurity today. Turns out, they are often not in residences, and they facilitate a wide range of criminal activity. In the simplest terms, a little piece of software in a TV, digital picture frame, or your phone might enable a company to sell access to your device’s bandwidth to their own customers. Those companies—proxy providers—often have affiliate programs where they pay for installation of the…
Read the original report →Diamond Model
Adversary(2)
Infrastructure(6)
Capability(3)
Victim
Indicators of Compromise
Open the mindmap →22 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | api.wirevpn.io | High | Score 58/100 | First seen |
| URL | https://iplogger.com/mnWD | Medium | Score 47/100 | First seen |
| Domain | wirevpn.cc | High | Score 58/100 | First seen |
| Domain | 7-zip.org | High | Score 58/100 | First seen |
| Domain | smartproxy.com | High | Score 58/100 | First seen |
| Domain | 7zip.com | Low | Score 30/100 | First seen |
| Domain | api.wirevpn.app | High | Score 58/100 | First seen |
| Domain | cate.norton-com-nu16.com | High | Score 75/100 | First seen |
| Domain | ipidea.org | Medium | Score 57/100 | First seen |
| Domain | api.betflixfree.net | Low | Score 31/100 | First seen |
| Domain | smartproxy.org | High | Score 58/100 | First seen |
| Domain | bin.visitbenin.org | High | Score 58/100 | First seen |
| Domain | proxyreviews.org | Medium | Score 54/100 | First seen |
| Domain | 911proxy.com | Low | Score 31/100 | First seen |
| Domain | api.isharkvpn.com | High | Score 63/100 | First seen |
| Domain | update.wirevpn.app | High | Score 58/100 | First seen |
| Domain | wirevpn.app | High | Score 58/100 | First seen |
| Domain | wirevpn.io | High | Score 58/100 | First seen |
| Domain | update.whtatsapp.net | Medium | Score 55/100 | First seen |
| Domain | abc.breakoursilence.com | Low | Score 31/100 | First seen |
| Domain | bintangwarisanhotel.com | Medium | Score 59/100 | First seen |
| Domain | api.snaptik.io | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…