Trusted Design

Malicious IP Block Used in Phishing Campaign

概要

The 89.144.2.0/24 IP block is currently being used by a group of attackers to host malicious websites. The owner of this block is spoofing Echo Romeo LLP (AS199762) to register the IPs. Various compromised WordPress sites are also holding PHP files that redirect victims to the IP block via email phishing campaigns.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• SteamStealer IPs (score: 0.65)
• Suspicious IP addresses (score: 0.63)
• Spam botnet source IPs 2016-10-17 (score: 0.62)
• Shylock malicious domains [2014] (score: 0.61)
• THL: Phishing Sites and PHP Kits - February 2016 - Part 1 (score: 0.61)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る