Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Introducing Cavalier’s New Threat Feeds: Comprehensive Visibility into Attacker Infrastructure
Malware Families
Excerpt
Introducing Cavalier’s New Threat Feeds: Comprehensive Visibility into Attacker Infrastructure We are thrilled to introduce three new Threat Feed modules in Cavalier: C2 Data , ClickFix , and PhaaS (Phishing-as-a-service) . Together, they give security teams comprehensive visibility into active attacker infrastructure – from infostealer command-and-control (C2) servers to malicious ClickFix pages executing clipboard injection, to turnkey Phishing-as-a-service…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability(3)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | garage-door-repair.cyou | High | Score 63/100 | First seen |
| Domain | webcindario.com | High | Score 64/100 | First seen |
| Domain | myrtler.biz | High | Score 86/100 | First seen |
IOC Relationship Graph
Building graph…