Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
26 IOCs
Scams, Slaves and (Malware-as-a) Service: Tracking a Trojan to Cambodia’s Scam Centers
Threat Actors
Malware Families
Excerpt
Authors: Infoblox Threat Intel and Chong Lua Dao Incidents of malware-enabled fraud and remote access scams have been on the rise against the backdrop of proliferating industrial-scale scam operations in Southeast Asia, with many countries in the region issuing official warnings over the past three years. But connecting specific malware to the notorious compounds has been elusive … until now. In collaboration with the Vietnamese non-profit Chong Lua Dao , we uncovered…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →26 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | orbiixtrade.com | High | Score 58/100 | First seen |
| Domain | vnwd.top | Medium | Score 58/100 | First seen |
| Domain | alperu.top | High | Score 58/100 | First seen |
| SHA256 | 39ea88f852b25d3c55d605464a3440bd250a577e3e21f52d1eaf94d15aad5b82 | High | Score 71/100 | First seen |
| IP | 38.47.52.4 | High | Score 58/100 | First seen |
| Domain | nmxgo.cc | High | Score 58/100 | First seen |
| Domain | ngovbr.cc | High | Score 64/100 | First seen |
| SHA256 | 4338ab77d05aeacd7eac5acbe9eed5568778c8e3e9499562816805b54b4d1a6a | High | Score 74/100 | First seen |
| Domain | googleplay.djppajakgoid.com | High | Score 58/100 | First seen |
| Domain | immigration-kr.net | High | Score 58/100 | First seen |
| Domain | cedula-registraduria-gov.org | High | Score 58/100 | First seen |
| Domain | openbank-es.com | High | Score 58/100 | First seen |
| Domain | sss.oiago.cc | High | Score 58/100 | First seen |
| Domain | idphil.net | High | Score 58/100 | First seen |
| Domain | vsgo.cc | High | Score 58/100 | First seen |
| Domain | orgo.cc | High | Score 68/100 | First seen |
| Domain | safeapk.xyz | High | Score 58/100 | First seen |
| Domain | alafrica.xyz | High | Score 58/100 | First seen |
| SHA256 | 4fff28eecc0ab6303e4948df77671009dda5b93ed3d1cead527b02d1317426bc | High | Score 68/100 | First seen |
| Domain | dkhth.com | High | Score 64/100 | First seen |
| Domain | avianca.sxjgo.cc | High | Score 66/100 | First seen |
| IP | 18.167.169.60 | High | Score 58/100 | First seen |
| Domain | egov.nbsvgo.cc | High | Score 58/100 | First seen |
| Domain | rycnair.com | High | Score 58/100 | First seen |
| IP | 103.214.169.197 | High | Score 58/100 | First seen |
| Domain | lx-yindu.top | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…