Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
10 IOCs
ToddyCat: your hidden email assistant. Part 2
Excerpt
Introduction We continue to share details on the malicious techniques and toolsets used by the ToddyCat APT group. In the first part of this report , we examined the group’s attacks aimed at stealing data from browsers, as well as from local and cloud email services. The methods used in that campaign indicated that ToddyCat was attempting to access corporate correspondence while evading monitoring tools. However, all of the group’s methods we described previously…
Read the original report →Indicators of Compromise
Open the mindmap →10 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 3d3a621f852c42d97fd7260681e42508 | Medium | Score 53/100 | First seen |
| MD5 | 9f5f2f0fb0a7f5aa9f16b9a7b6dad89f | Medium | Score 53/100 | First seen |
| MD5 | a7d7d6c4c3f227f7117261c63b9e23a9 | Medium | Score 53/100 | First seen |
| MD5 | f169d6d172dfb775895a5e2b1540c854 | Medium | Score 53/100 | First seen |
| MD5 | 22aaeb4946ba6d2f2e27feb7dbb295de | Medium | Score 53/100 | First seen |
| MD5 | 1ab58838e5790efb22f2d35ab98c0b7d | Medium | Score 53/100 | First seen |
| MD5 | 28cb7b261f4eb97e8a4b3b0d32f8def1 | Medium | Score 53/100 | First seen |
| MD5 | f61fbfb7aa1cd5dc8f70b055b51563e2 | Medium | Score 53/100 | First seen |
| MD5 | bae82a15d1dbfb024617b9b56a8e5f66 | Medium | Score 53/100 | First seen |
| MD5 | 3432dd9ac0df80ef86eb80bd080f839b | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…