Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
35 IOCs
포세이돈 작전: 구글 광고 리다이렉션 메커니즘을 악용한 스피어 피싱 공격
Threat Actors
Malware Families
Excerpt
포세이돈 작전: 구글 광고 리다이렉션 메커니즘을 악용한 스피어 피싱 공격 제품소개 네트워크 보안 Genian NAC (On-Prem/Cloud) Genian ZTNA (On-Prem/Cloud) Genian IPAM SSL PNS Genian Home 엔드포인트 보안 Genian Insights E (On-Prem/Cloud) Genian GPI (On-Prem/Cloud) 서비스 Genian MDR DocuRay DRM DocuRay DLP 디바이스 플랫폼 Genian DPI 제품자료실 PAPER 제품연동 웨비나 Bug Bounty 솔루션 EDR/AI ZTNA/N2SF IT 자산관리/CTEM 랜섬웨어 보안 AI 가시성 블로그 기술 블로그 위협 분석 보고서 고객 사례 고객지원 온라인 교육 NAC 온라인 EDU 세미나 DOCS Genian NAC Genian EDR 홍보센터 언론보도 회사소식 뉴스레터 투자정보 재무정보 주가정보 공시정보 IR공고…
Read the original report →Diamond Model
Adversary(2)
Infrastructure(6)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →35 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | igamingroundtable.com | High | Score 58/100 | First seen |
| MD5 | 908d074f69c0bf203ed225557b7827ec | Medium | Score 53/100 | First seen |
| MD5 | d6aa7e9ff0528425146e64d9472ffdbd | Medium | Score 53/100 | First seen |
| MD5 | 303c5e4842613f7b9ee408e5c6721c00 | Medium | Score 53/100 | First seen |
| Domain | kppe.pl | High | Score 58/100 | First seen |
| Domain | genuinashop.com | High | Score 58/100 | First seen |
| IP | 77.246.108.96 | High | Score 58/100 | First seen |
| MD5 | 0171338d904381bbf3d1a909a48f4e92 | Medium | Score 53/100 | First seen |
| Domain | tatukikai.jp | High | Score 58/100 | First seen |
| MD5 | 94935397dce29684f384e57f85beeb0a | Medium | Score 53/100 | First seen |
| MD5 | d4b06cb4ed834c295d0848b90a109f09 | Medium | Score 53/100 | First seen |
| Domain | creativepackout.co | High | Score 58/100 | First seen |
| Domain | anupamaivf.com | High | Score 58/100 | First seen |
| Domain | kyowaind.co.jp | High | Score 58/100 | First seen |
| Domain | althouqroastery.com | High | Score 58/100 | First seen |
| MD5 | 6a4c3256ff063f67d3251d6dd8229931 | Medium | Score 53/100 | First seen |
| Domain | nationalinterestparty.com | High | Score 58/100 | First seen |
| Domain | jlrandsons.co.uk | High | Score 58/100 | First seen |
| MD5 | f5842320e04c2c97d1f69cebfd47df3d | Medium | Score 53/100 | First seen |
| IP | 109.234.36.135 | High | Score 58/100 | First seen |
| MD5 | ad6273981cb53917cb8bda8e2f2e31a8 | Medium | Score 53/100 | First seen |
| MD5 | a9a52e2f2afe28778a8537f955ee1310 | Medium | Score 53/100 | First seen |
| MD5 | a58ef1e53920a6e528dc31001f302c7b | Medium | Score 53/100 | First seen |
| Domain | optique-leclercq.be | High | Score 58/100 | First seen |
| MD5 | 8b8fa6c4298d83d78e11b52f22a79100 | Medium | Score 53/100 | First seen |
| Domain | pomozzi.com | High | Score 58/100 | First seen |
| Domain | appoitment.dotoit.media | High | Score 58/100 | First seen |
| Domain | vintashmarket.com | High | Score 58/100 | First seen |
| Domain | encryptuganda.org | High | Score 58/100 | First seen |
| Domain | sparkwebsolutions.space | High | Score 58/100 | First seen |
| MD5 | 0777781dedd57f8016b7c627411bdf2c | Medium | Score 53/100 | First seen |
| MD5 | 639b5489d2fb79bcb715905a046d4a54 | Medium | Score 53/100 | First seen |
| Domain | aceeyl.com | High | Score 58/100 | First seen |
| IP | 144.124.247.97 | High | Score 58/100 | First seen |
| IP | 77.246.101.72 | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…