Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Hackers Abuse SniperDz PhaaS for Brand Impersonation Attacks
Excerpt
Threat actors are leveraging a sophisticated Phishing-as-a-Service (PhaaS) platform named SniperDz to impersonate trusted brands, public figures, and politicians. Recently observed targeting users in the Middle East and North Africa (MENA), these campaigns trick victims into clicking fake promotional offers. Instead of receiving free internet or financial aid, victims are pulled into a massive fraud ecosystem. SniperDz acts as a turnkey operation for cybercriminals. The…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Attack Flow9 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | win.feezossl.xyz | High | Score 58/100 | First seen |
| Domain | win.anababayala.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…