Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
13 IOCs

From Invoice to AnyDesk: Uncovering a Phishing Campaign Targeting  Russian Aerospace Organizations

Seqrite
Seqrite
Published July 7, 2026Original Report

Malware Families

Excerpt

Table of Contents Introduction Infection Chain Technical Analysis Conclusion Seqrite Coverage Indicators of Compromise (IOCs) MITRE ATT&CK Mapping Introduction The Seqrite Threat Research Team identified a targeted spear-phishing campaign disguised as a legitimate business invoice. The phishing email impersonates a legitimate Russian research institute associated with aerospace and aviation systems and is delivered using a spoofed domain designed to mimic the…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREvniir-info.spacenova-stream.sitefgub-vniir.spaceCAPABILITYXMRigVICTIMunknown
Adversary
Infrastructure(6)
Capability(1)
Victim

Attack Flow8 steps · MITRE ATT&CK mapped

Initial AccessTA0001T1566
1/8
Phishing
ActionSend phishing email
A spear-phishing email disguised as a business invoice is sent to target organizations.

Indicators of Compromise

Open the mindmap →

13 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainvniir-info.spaceHighScore 58/100First seen
SHA256f57e010541fb4ccbf23aefc4a827f753a6ff3f8792d9c04c3eea83f6963c6baeMediumScore 53/100First seen
SHA25612648cd9d425f78db2dbc6e03c14f11e6ac6aadf8b3975c23cce9519e2b58d33HighScore 85/100First seen
Domainnova-stream.siteMediumScore 56/100First seen
Domainfgub-vniir.spaceHighScore 58/100First seen
IP198.54.120.13HighScore 58/100First seen
IP2.23.88.201HighScore 58/100First seen
SHA25647854deb456cb08c651b7f9ae2f9d87c72d0719de6af233340632efb3c1980f4MediumScore 53/100First seen
Domainaviatronika.onlineHighScore 58/100First seen
Emailsales@vniir-avia.spaceHighScore 58/100First seen
Domainvniir-avia.spaceHighScore 58/100First seen
IP194.87.57.81HighScore 58/100First seen
SHA2560dc0fa727f900ed5033f46f8ba6cf2d97d20ab95fd334cabc0f216da6e0622b0HighScore 85/100First seen

IOC Relationship Graph

Building graph…