Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
A multinational law enforcement action, part of Operation Endgame , has disrupted SocGholish, a notorious malware framework known for fake updates that provides initial access to other cybercriminals, including EvilCorp. This week, law enforcement and private-industry partners have taken down 106 servers and domains and remediated 14.971 compromised WordPress websites. These websites fuel SocGholish’s fire. Infoblox Threat Intel is proud to be a partner in Operation Endgame.…
Read the original report →Diamond Model
Adversary(3)
Infrastructure(6)
Capability(8)
Victim
Indicators of Compromise
Open the mindmap →12 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | trademark.iglesiaelarca.com | High | Score 58/100 | First seen |
| Domain | content.garretttrails.org | High | Score 58/100 | First seen |
| Domain | app-front.anmaradigital.com | High | Score 86/100 | First seen |
| Domain | billing.roofnrack.us | High | Score 58/100 | First seen |
| Domain | api-app.uppercrafteroom.com | High | Score 58/100 | First seen |
| Domain | shop.steadycompanion.com | High | Score 58/100 | First seen |
| Domain | samples.addisgraphix.com | High | Score 58/100 | First seen |
| Domain | platform.exathomeswebuyarizona.com | High | Score 71/100 | First seen |
| Domain | promo.summat10n.org | High | Score 73/100 | First seen |
| Domain | devel.asurans.com | High | Score 58/100 | First seen |
| Domain | pa-portal.benningtonspringsmhp.com | High | Score 84/100 | First seen |
| Domain | storehouse.beautysupplysalonllc.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…