Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
34 IOCs
Kali365 Targets US Organizations with Data Theft via Device Code Phishing
Excerpt
Kali365 is targeting US organizations with device code phishing attacks that abuse legitimate Microsoft authentication. Instead of directing victims to a fake login form, the phishkit sends them to a real Microsoft page, where they authorize access using an attacker-controlled device code. This makes the attack harder for analysts to spot and more dangerous for the business. By obtaining OAuth…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →34 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | functionalityfirst.de | High | Score 58/100 | First seen |
| Domain | onlinebrandinghub.de | High | Score 58/100 | First seen |
| Domain | txatvrk.net | High | Score 58/100 | First seen |
| Domain | brandswithintegrity.de | High | Score 58/100 | First seen |
| Domain | navigatingdigitalchange.de | High | Score 58/100 | First seen |
| Domain | scalableadapt.de | High | Score 58/100 | First seen |
| Domain | onlineidentityperfection.de | High | Score 58/100 | First seen |
| Domain | securedecisionmakers.de | High | Score 58/100 | First seen |
| Domain | guardwebsolutions.de | High | Score 58/100 | First seen |
| Domain | flexiscalesystems.de | High | Score 58/100 | First seen |
| Domain | modernwebbalance.de | High | Score 58/100 | First seen |
| Domain | theconsistencyfactor.de | High | Score 58/100 | First seen |
| Domain | waschmaschinenmarkt.de | High | Score 58/100 | First seen |
| Domain | bluefoodtruths.xyz | High | Score 58/100 | First seen |
| Domain | buildyouronlineidentity.de | High | Score 58/100 | First seen |
| Domain | performancereputation.de | High | Score 58/100 | First seen |
| Domain | securedecisionmaking.de | High | Score 58/100 | First seen |
| Domain | prowebsitemakers.de | High | Score 58/100 | First seen |
| Domain | dewdhurstlobl.com | High | Score 58/100 | First seen |
| Domain | trustinbrands.de | High | Score 58/100 | First seen |
| Domain | onsite-developments.net | High | Score 58/100 | First seen |
| Domain | qualityfirstonline.de | High | Score 58/100 | First seen |
| Domain | wellpults.com | High | Score 58/100 | First seen |
| Domain | flexievolve.de | High | Score 58/100 | First seen |
| Domain | reliablebusinesstech.de | High | Score 58/100 | First seen |
| Domain | proforcstaffing.com | High | Score 58/100 | First seen |
| Domain | hbaknoxvillecom.top | High | Score 58/100 | First seen |
| Domain | cloud-microsoft-drive-for-business.workers.dev | High | Score 58/100 | First seen |
| Domain | brandtrustmasters.de | High | Score 58/100 | First seen |
| Domain | marketadaptabletech.de | High | Score 58/100 | First seen |
| Domain | reputationboosters.de | High | Score 58/100 | First seen |
| Domain | turnideastoresults.de | High | Score 58/100 | First seen |
| Domain | guardedwebsolutions.de | High | Score 58/100 | First seen |
| Domain | guardextion.online | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…