Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Malware Families
Excerpt
Tycoon2FA Deobfuscation | Malware Analysis Malware Analysis Tycoon2FA Deobfuscation Nov 29, 2024 Randy McEoin Tycoon2FA is a phishing-as-a-service that is used to collect Microsoft and Google credentials. Recently Tycoon2FA has introduced a new method for their fake Google login. This new method uses an iframe to wrap around what was previously used as their main domains. As part of this new loader page there is an esoteric obfuscation mechanism. Here I will attempt to…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://caioba.com/cg/index.html | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…