Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Fake Microsoft Scanner Secretly Sends Victim Banking and Remote Access Data to Telegram
Excerpt
A new refund scam is using fake Microsoft-branded security scan websites to trick users into removing antivirus software and sharing sensitive information. The sites, which use names such as SysScan, claim to check whether antivirus software is working correctly. Instead, they display alarming but fabricated warnings and tell visitors that their installed antivirus is causing serious problems. The pages falsely claim that Windows no longer supports third-party antivirus…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | detectsysscanner.at | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…