Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
18 IOCs
Russia-Linked Cyber Espionage Clusters Use OAuth Phishing to Target U.S. and European Organizations
Threat Actors
Malware Families
Excerpt
Google Threat Intelligence Group (GTIG) has detailed several Russia-linked cyber espionage clusters targeting people in academia, think tanks, and other organizations in the United States and Europe. The activity involves OAuth phishing, device-code phishing, spoofed websites, and infrastructure designed to imitate trusted organizations and cloud services. The tracked clusters UNC6293, UNC7005, and UNC5976 show different levels of operational maturity. However, their…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →18 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | stateaffairs.us | High | Score 58/100 | First seen |
| Domain | dosportal.app | High | Score 63/100 | First seen |
| Domain | statistic-ms.live | High | Score 62/100 | First seen |
| Domain | globsec.org | High | Score 58/100 | First seen |
| Domain | foreignrelations.us | High | Score 66/100 | First seen |
| Domain | sharefolders.org | High | Score 58/100 | First seen |
| Domain | fileshareapp.org | High | Score 58/100 | First seen |
| Domain | formshare.cloud | High | Score 58/100 | First seen |
| Domain | the-washington-ballet.com | High | Score 58/100 | First seen |
| IP | 104.194.159.150 | High | Score 80/100 | First seen |
| Domain | usercontent.app | High | Score 58/100 | First seen |
| IP | 151.236.15.213 | High | Score 58/100 | First seen |
| Domain | internationalaffairsportal.us | High | Score 58/100 | First seen |
| Domain | my-invite.org | High | Score 73/100 | First seen |
| registration@globsec.org | High | Score 58/100 | First seen | |
| Domain | 2200freefonts.com | High | Score 58/100 | First seen |
| Domain | fllefolder.com | High | Score 58/100 | First seen |
| Domain | sharedfolders.org | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…