Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
8 IOCs
Threat Intelligence | Analysis of a Malicious Bookmark Phishing Attack Targeting Fomo Users
Excerpt
1. Background Recently, the SlowMist security team received a request for assistance from a Fomo user. The user reported that while viewing the details of the MOONLET token on the Fomo web interface, they clicked the project website entry displayed on the page and were redirected to voltage.family. They then followed the instructions to complete a “human verification” process, after which they discovered that approximately $48,000 worth of assets had been transferred out of…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability
Victim
Indicators of Compromise
Open the mindmap →8 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | d5576bb50cb299d0c48657ed0cfd3f03b4c2313db8b37abcee57f779d70f7f18 | Medium | Score 53/100 | First seen |
| SHA256 | 6d771096e442b36b0719a4e07b19c62a5a985005e8a07ab5d50dd6ca59c4ad06 | Medium | Score 53/100 | First seen |
| SHA256 | 193b305baf9548a6dded341f3dd613a811e4604c7dfa4447219664f6c43818f8 | Medium | Score 53/100 | First seen |
| SHA256 | 24df225d70e399fa30a2d0761e8645e339d99a0f751af6f9e5e00ab555e2fa07 | Medium | Score 53/100 | First seen |
| Domain | noisy-heart-5856.zmfkc29.workers.dev | High | Score 58/100 | First seen |
| URL | https://voltage.family/app/live | High | Score 58/100 | First seen |
| URL | https://voltage.family/app | High | Score 58/100 | First seen |
| SHA1 | 77bd56dfef9530ba61962a420e34a0dbd55de51c | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…