Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Excerpt
Threat actors are impersonating a legitimate Mexican government website to trick users into downloading a malicious JavaScript file (drive-by download). The site tricks users to download the SUA (Single Self-Determination System) related with amounts and items for the payment of employer-employee contributions for Social Security, Retirement, Severance, Old-Age, and Housing Credit. The malware spreading site was created around 7 months and is not reported as malicious (at the…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | extensioninstaller.onrender.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…