Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
11 IOCs
Threat Intelligence | Job Scam Alert: Interview Software Used to Deliver Info-Stealing Malware
Excerpt
Background Recently, MistEye identified an information-stealing campaign targeting Web3 professionals through fake recruitment offers. Attackers impersonate recruiters, contact job seekers about interview arrangements, and then direct them to relay.lc for further communication. The site presents itself as Relay , an AI-powered meeting and collaboration platform, claiming to offer features such as real-time transcription, collaborative notes, AI-generated summaries, action…
Read the original report →Diamond Model
Adversary
Infrastructure(5)
Capability
Victim
Indicators of Compromise
Open the mindmap →11 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | e434755827e48f4e0693c83aa51b99e4600d5b0e625da1e80963b783a78de070 | Medium | Score 53/100 | First seen |
| SHA256 | 64fa024e0563eb6fa06cb6437c76a652021a93dff78979496b4b005e61639e78 | Medium | Score 53/100 | First seen |
| SHA256 | 271ed218b2a3fddd38529c3730491078a7737afa5f78b873592a2946fb86ab2e | Medium | Score 53/100 | First seen |
| Domain | cdnresolver.com | High | Score 69/100 | First seen |
| URL | https://a2.cdnresolver.com/m/test | High | Score 58/100 | First seen |
| SHA256 | 4a7ef5aec036dc7cff3eeece774caa2500bcd9f3d7712799637dab2645dfc265 | Medium | Score 53/100 | First seen |
| Domain | relay.lc | High | Score 63/100 | First seen |
| SHA256 | cd7500d51c200fe0493f16d8870d79359faf9ba9b121d453b28f871ec252579d | Medium | Score 53/100 | First seen |
| URL | https://e1.cdnresolver.com/m/test | High | Score 58/100 | First seen |
| URL | https://e1.cdnresolver.com/lk/p1 | High | Score 58/100 | First seen |
| SHA256 | 6bc9378366076a028365ecff61ab868fe51bf988c18588c29c393a5488eafe0c | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…