Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Teams Transcript Page Lure Delivers GoTo RMM
Excerpt
TL;DR This documents a Teams transcript download page lure that delivers GoTo RMM. Table of Contents TL;DR Tactical Pause Summary Up Front Intro Text-based Attack chain Lead Visitor Filtering Find More Teams Transcript Lure Pages Attacker-owned Infrastructure Pattern Summary Indicators Links Tactical Pause THE CONTENT, VIEWS, AND OPINIONS EXPRESSED ON THIS DOCUMENT ARE MY OWN AND DO NOT REFLECT THOSE OF MY EMPLOYER OR ANY AFFILIATED ORGANIZATIONS. ALL RESEARCH, ANALYSIS, AND…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Attack Flow7 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 7faf4986bea4dd37fb1c0a5b011cde29552ad710696d8e458997ca55abae5bf9 | Medium | Score 53/100 | First seen |
| MD5 | 0b09947efaffc0fc13732fa71be72be8 | Medium | Score 53/100 | First seen |
| Domain | drdimages.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…