Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Fake Utility Downloads Used to Deploy ScreenConnect and Crypto Mining Malware
Excerpt
A sophisticated cryptojacking campaign that leverages manipulated search engine results and AI chatbot interactions to distribute malware. Attackers are actively spoofing popular system utilities to trick users into downloading compromised packages. Microsoft Security researchers noted that this emerging delivery technique extends social engineering beyond conventional search results, thereby increasing the visibility of malicious recommendations. The primary goal of this…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | start-download.gleeze.com | Low | Score 31/100 | First seen |
| Domain | direct-download.gleeze.com | Low | Score 47/100 | First seen |
| Domain | direct-downloads.giize.com | Low | Score 28/100 | First seen |
IOC Relationship Graph
Building graph…