Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
UNC3753 Targets US Law Firms with Vishing and RMM Tools
Threat Actors
Malware Families
Excerpt
Mandiant’s Google Threat Intelligence Group (GTIG) has disclosed an active financially motivated campaign by threat cluster UNC3753, also tracked as “ Luna Moth ,” “Chatty Spider,” and “Silent Ransom Gr oup,” targeting dozens of US-based professional, legal, and financial services organizations. The campaign combines voice phishing (vishing), remote monitoring and management (RMM) tool abuse, and in some cases, physical office…
Read the original report →Diamond Model
Adversary(2)
Infrastructure(3)
Capability(1)
Victim
Attack Flow10 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | helpdesk.com | High | Score 62/100 | First seen |
| Domain | it.com | High | Score 58/100 | First seen |
| Domain | itdesk.com | High | Score 55/100 | First seen |
IOC Relationship Graph
Building graph…