Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
22 IOCs
Threat Intelligence | Analysis of FomoPeek App Store Poisoning and iOS Kernel Exploitation
Excerpt
Recently, the SlowMist security team received multiple reports of user assets being stolen. Upon verification, all of the incidents involved private key exposure, and some of the affected users had previously downloaded and used FomoPeek App versions 1.1–1.2. Through a joint analysis with the OKX security team, we confirmed that FomoPeek 1.1 and 1.2 had the two malicious modules, apptrace and libapptracecore, embedded in them. These modules are capable of remote…
Read the original report →Diamond Model
Adversary
Infrastructure(5)
Capability
Victim
Indicators of Compromise
Open the mindmap →22 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | assisaint.com | High | Score 58/100 | First seen |
| SHA256 | 48f9d5623af1518e774d57c41e6e0b915a7e9f896909bf596a9b27de5022911e | Medium | Score 53/100 | First seen |
| URL | https://customer-c1cb36b5.assisaint.com | High | Score 58/100 | First seen |
| SHA256 | ca5dfd0fa7a16f26f5b369516f5b8bcac1d5a6fe01a8511a5ededf4cd2c0d042 | Medium | Score 53/100 | First seen |
| SHA1 | 111faeb95cd0786593433bcc762dc5c1debf541c | Medium | Score 53/100 | First seen |
| SHA256 | d6b6407b4c97697fdde174cbc190b6433315470f58df6b483ac5b806f35e20f9 | Medium | Score 53/100 | First seen |
| URL | https://admin-e433360cb0e.assisaint.com | High | Score 58/100 | First seen |
| URL | https://bp-a95010ced.assisaint.com | High | Score 58/100 | First seen |
| SHA1 | 4c73d7e8ef0e61129403e219debc597fd43aa0ec | Medium | Score 53/100 | First seen |
| SHA1 | 0df6ac2e2856114228756947d1b1d9ff63ea3e68 | Medium | Score 53/100 | First seen |
| MD5 | f5bdaed5953033ac8c3256f2933b9a81 | Medium | Score 53/100 | First seen |
| SHA256 | 764663ff5c8bd1bdf33bbd1ec352ce262a4fe79695456f2612dc27c35840ab9d | Medium | Score 53/100 | First seen |
| MD5 | 03d67a68b5e8507dbbe36f2a4b41aca0 | Medium | Score 53/100 | First seen |
| MD5 | fce99b45709a6f8e241175be0c121874 | Medium | Score 53/100 | First seen |
| SHA256 | f0b3be01e8597f7f35ca36c009f68e7004527fe4a01d4349a01e211ca16de1e2 | Medium | Score 53/100 | First seen |
| MD5 | 7a5475a0007346bcb6edb30e43315999 | Medium | Score 53/100 | First seen |
| SHA1 | 6d37f2c5e8f8546b648d317295565da95975f4bb | Medium | Score 53/100 | First seen |
| SHA1 | 0a571f0fa18d7eb9abcc1e98a0bb9bc15534bbae | Medium | Score 53/100 | First seen |
| MD5 | 645b9053390246995c2cb7a9b9eddf40 | Medium | Score 53/100 | First seen |
| URL | https://api-a95f0ed200f.assisaint.com/api/device/config | High | Score 58/100 | First seen |
| SHA1 | 2d53113c89c83c520c17b8bbcdc22aa0518a38be | Medium | Score 53/100 | First seen |
| MD5 | 38a8a5ddecd9a5626b42dae593ac28f6 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…