Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Excerpt
Precise geolocation information for IP addresses has emerged from a niche requirement to a ubiquitous demand. While the country an IP address is (allegedly) related to has long been used for applications such as network traffic distribution and coarse geoblocking, today, state-, city- and sometimes even district-level geolocation information is crucial for modern security measures, such as fraud detection. Data brokers, advertisers, defenders, and investigators alike are…
Read the original report →Attack Flow7 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | 22722a610a1ecc6548cb0b539aca5c5d77fe9e72 | Medium | Score 53/100 | First seen |
| SHA1 | 358614d3c919471d8bba6ce31f9f9583bda3adba | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…