Trusted Design

Cyberghost VPN endpoints

概要

Over the course of the last month, I've observed unknown actors probing our network infrastructure over cyberghost VPN infrastructure (among others) - While cyberghost VPN offers free VPN service, these probes are over the premium VPN nodes. Actors will typically utilize a VPN service in order to cover their tracks and make it significantly more difficult to attribute attacks or probes. The provider states that they 545 VPN endpoints across the globe. I have taken the liberty of identifying all 545 VPN endpoints and their IP addresses so that others may benefit, review their logs and/or blacklist as necessary.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Terracotta VPN: Enabler of Advanced Threat Anonymity (score: 0.58)
Uncovering Bunitu’s Secrets (score: 0.56)
Looking Into a Cyber-Attack Facilitator in the Netherlands (score: 0.54)
Naval Targeting (2015) (score: 0.53)
Evasive Maneuvers by Wekby with Rop-packing, DNS Covert Channels (score: 0.53)

このPulseに関連する脅威アクター (事実ベース)

Andariel

Score: 5.58

Matched TTPs:

T1590.005 - IP Addresses
T1049 - System Network Connections Discovery

MITREへのリンク →

Magic Hound

Score: 5.58

Matched TTPs:

T1590.005 - IP Addresses
T1049 - System Network Connections Discovery

MITREへのリンク →

HAFNIUM

Score: 7.69

Matched TTPs:

T1590.005 - IP Addresses
T1590 - Gather Victim Network Information

MITREへのリンク →

Salt Typhoon

Score: 3.84

Matched TTPs:

T1590.004 - Network Topology

MITREへのリンク →

FIN13

Score: 9.42

Matched TTPs:

T1590.004 - Network Topology
T1087 - Account Discovery
T1049 - System Network Connections Discovery

MITREへのリンク →

Volt Typhoon

Score: 16.80

Matched TTPs:

T1590.004 - Network Topology
T1590.006 - Network Security Appliances
T1049 - System Network Connections Discovery
T1590 - Gather Victim Network Information
T1680 - Local Storage Discovery

MITREへのリンク →

Aquatic Panda

Score: 3.84

Matched TTPs:

T1087 - Account Discovery

MITREへのリンク →

Scattered Spider

Score: 3.84

Matched TTPs:

T1087 - Account Discovery

MITREへのリンク →

APT38

Score: 6.27

Matched TTPs:

T1049 - System Network Connections Discovery
T1036.006 - Space after Filename

MITREへのリンク →

TeamTNT

Score: 8.70

Matched TTPs:

T1049 - System Network Connections Discovery
T1595.001 - Scanning IP Blocks
T1680 - Local Storage Discovery

MITREへのリンク →

Mustang Panda

Score: 5.87

Matched TTPs:

T1049 - System Network Connections Discovery
T1027.007 - Dynamic API Resolution

MITREへのリンク →

Velvet Ant

Score: 4.48

Matched TTPs:

T1049 - System Network Connections Discovery
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

OilRig

Score: 4.48

Matched TTPs:

T1049 - System Network Connections Discovery
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

ToddyCat

Score: 4.57

Matched TTPs:

T1049 - System Network Connections Discovery
T1680 - Local Storage Discovery

MITREへのリンク →

Chimera

Score: 4.57

Matched TTPs:

T1049 - System Network Connections Discovery
T1680 - Local Storage Discovery

MITREへのリンク →

APT41

Score: 5.02

Matched TTPs:

T1049 - System Network Connections Discovery
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Tropic Trooper

Score: 7.31

Matched TTPs:

T1049 - System Network Connections Discovery
T1573.002 - Asymmetric Cryptography
T1680 - Local Storage Discovery

MITREへのリンク →

Lazarus Group

Score: 8.70

Matched TTPs:

T1049 - System Network Connections Discovery
T1027.007 - Dynamic API Resolution
T1680 - Local Storage Discovery

MITREへのリンク →

INC Ransom

Score: 5.58

Matched TTPs:

T1049 - System Network Connections Discovery
T1537 - Transfer Data to Cloud Account

MITREへのリンク →

Indrik Spider

Score: 3.84

Matched TTPs:

T1590 - Gather Victim Network Information

MITREへのリンク →

Gamaredon Group

Score: 4.54

Matched TTPs:

T1001 - Data Obfuscation

MITREへのリンク →

RedCurl

Score: 6.59

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1537 - Transfer Data to Cloud Account

MITREへのリンク →

APT29

Score: 8.67

Matched TTPs:

T1090.004 - Domain Fronting
T1665 - Hide Infrastructure

MITREへのリンク →

Storm-0501

Score: 3.84

Matched TTPs:

T1537 - Transfer Data to Cloud Account

MITREへのリンク →

APT28

Score: 9.08

Matched TTPs:

T1498 - Network Denial of Service
T1669 - Wi-Fi Networks

MITREへのリンク →

Ember Bear

Score: 4.13

Matched TTPs:

T1595.001 - Scanning IP Blocks

MITREへのリンク →

ZIRCONIUM

Score: 4.13

Matched TTPs:

T1665 - Hide Infrastructure

MITREへのリンク →

Patchwork

Score: 6.12

Matched TTPs:

T1680 - Local Storage Discovery
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Kimsuky

Score: 6.12

Matched TTPs:

T1680 - Local Storage Discovery
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Rocke

Score: 3.29

Matched TTPs:

T1102.001 - Dead Drop Resolver

MITREへのリンク →

RTM

Score: 3.29

Matched TTPs:

T1102.001 - Dead Drop Resolver

MITREへのリンク →

BRONZE BUTLER

Score: 3.29

Matched TTPs:

T1102.001 - Dead Drop Resolver

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Volt Typhoon

Score: 0.79

Matched TTPs:

T1049 - System Network Connections Discovery
T1590.004 - Network Topology
T1680 - Local Storage Discovery
T1590 - Gather Victim Network Information
T1590.006 - Network Security Appliances

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る