Trusted Design

2016-06-06 Nigerian Malspam Actor (SWIFT phishing today)

概要

Linconnet.com: Registrant Email: rowlandandc1@gmail.com Same registrant: tisstar.com - 2016-01-19 - significant osint detections from feb 2016 - april 2016 hsbdeliveries.com - 2015-12-07 - significant osint detections from april 2016 through today (including phishing against Chaseonline and generic "bank" urls). gsloffshoreglobal.com - 2016-03-03 - nothing yet detected gsl-offshore.com - 2015-11-29 - nothing yet detected -from osint-grabber.net Also some older stuff - VT has this email address (rowlandandc1@gmail.com) with the name "Rowland Chekwube" on an old domain registration for "aligoldmark.com" registered in 2013 with malicious URL hits in Nov 2013 through April 2014: Domain Name: ALIGOLDMARK.COM Registrant Name: ROWLAND CHEKWUBE Registrant Email: ROWLANDANDC1@GMAIL.COM Registry Admin ID:

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Phishing malware - Standard Bank SA (score: 0.61)
New Spear Phishing Campaign Pretends to be EFF (score: 0.61)
Malware Spam: STA37626091 – BACS PAYMENT (score: 0.61)
"转发: TRY5000001054739 wire recall" and "转发: Payment" - Adwind-RAT / Bank of China-Themed Phishing E-mails (score: 0.60)
KingKong.dll - Recent PoisonIvy and PlugX variants targeting South East Asia (score: 0.60)

このPulseに関連する脅威アクター (事実ベース)

Sidewinder

Score: 3.95

Matched TTPs:

T1598.003 - Spearphishing Link
T1203 - Exploitation for Client Execution

MITREへのリンク →

Scattered Spider

Score: 10.44

Matched TTPs:

T1598.003 - Spearphishing Link
T1598 - Phishing for Information
T1538 - Cloud Service Dashboard

MITREへのリンク →

Mustang Panda

Score: 3.95

Matched TTPs:

T1598.003 - Spearphishing Link
T1203 - Exploitation for Client Execution

MITREへのリンク →

Sandworm Team

Score: 3.95

Matched TTPs:

T1598.003 - Spearphishing Link
T1203 - Exploitation for Client Execution

MITREへのリンク →

ZIRCONIUM

Score: 7.99

Matched TTPs:

T1598.003 - Spearphishing Link
T1036.004 - Masquerade Task or Service
T1598 - Phishing for Information

MITREへのリンク →

APT32

Score: 8.79

Matched TTPs:

T1598.003 - Spearphishing Link
T1036.004 - Masquerade Task or Service
T1218.010 - Regsvr32
T1203 - Exploitation for Client Execution

MITREへのリンク →

Kimsuky

Score: 14.02

Matched TTPs:

T1598.003 - Spearphishing Link
T1036.004 - Masquerade Task or Service
T1218.010 - Regsvr32
T1598 - Phishing for Information
T1584.001 - Domains

MITREへのリンク →

Magic Hound

Score: 7.84

Matched TTPs:

T1598.003 - Spearphishing Link
T1036.004 - Masquerade Task or Service
T1584.001 - Domains

MITREへのリンク →

APT28

Score: 16.47

Matched TTPs:

T1598.003 - Spearphishing Link
T1203 - Exploitation for Client Execution
T1598 - Phishing for Information
T1498 - Network Denial of Service
T1137.002 - Office Test

MITREへのリンク →

Moonstone Sleet

Score: 5.90

Matched TTPs:

T1598.003 - Spearphishing Link
T1598 - Phishing for Information

MITREへのリンク →

Dragonfly

Score: 3.95

Matched TTPs:

T1598.003 - Spearphishing Link
T1203 - Exploitation for Client Execution

MITREへのリンク →

Patchwork

Score: 7.10

Matched TTPs:

T1598.003 - Spearphishing Link
T1027.005 - Indicator Removal from Tools
T1203 - Exploitation for Client Execution

MITREへのリンク →

MoustachedBouncer

Score: 4.54

Matched TTPs:

T1659 - Content Injection

MITREへのリンク →

BITTER

Score: 3.59

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1203 - Exploitation for Client Execution

MITREへのリンク →

UNC3886

Score: 6.74

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1027.005 - Indicator Removal from Tools
T1203 - Exploitation for Client Execution

MITREへのリンク →

Higaisa

Score: 3.59

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1203 - Exploitation for Client Execution

MITREへのリンク →

Lazarus Group

Score: 3.59

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1203 - Exploitation for Client Execution

MITREへのリンク →

Storm-0501

Score: 4.84

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1218.010 - Regsvr32

MITREへのリンク →

APT41

Score: 3.59

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1203 - Exploitation for Client Execution

MITREへのリンク →

Deep Panda

Score: 5.90

Matched TTPs:

T1027.005 - Indicator Removal from Tools
T1218.010 - Regsvr32

MITREへのリンク →

GALLIUM

Score: 3.15

Matched TTPs:

T1027.005 - Indicator Removal from Tools

MITREへのリンク →

OilRig

Score: 4.65

Matched TTPs:

T1027.005 - Indicator Removal from Tools
T1203 - Exploitation for Client Execution

MITREへのリンク →

Turla

Score: 3.15

Matched TTPs:

T1027.005 - Indicator Removal from Tools

MITREへのリンク →

APT3

Score: 4.65

Matched TTPs:

T1027.005 - Indicator Removal from Tools
T1203 - Exploitation for Client Execution

MITREへのリンク →

Cobalt Group

Score: 4.24

Matched TTPs:

T1218.010 - Regsvr32
T1203 - Exploitation for Client Execution

MITREへのリンク →

Leviathan

Score: 4.24

Matched TTPs:

T1218.010 - Regsvr32
T1203 - Exploitation for Client Execution

MITREへのリンク →

Inception

Score: 4.24

Matched TTPs:

T1218.010 - Regsvr32
T1203 - Exploitation for Client Execution

MITREへのリンク →

Transparent Tribe

Score: 4.78

Matched TTPs:

T1203 - Exploitation for Client Execution
T1584.001 - Domains

MITREへのリンク →

Equation

Score: 4.13

Matched TTPs:

T1564.005 - Hidden File System

MITREへのリンク →

Strider

Score: 4.13

Matched TTPs:

T1564.005 - Hidden File System

MITREへのリンク →

SideCopy

Score: 3.29

Matched TTPs:

T1584.001 - Domains

MITREへのリンク →

Mustard Tempest

Score: 3.29

Matched TTPs:

T1584.001 - Domains

MITREへのリンク →

APT1

Score: 3.29

Matched TTPs:

T1584.001 - Domains

MITREへのリンク →

Medusa Group

Score: 4.54

Matched TTPs:

T1218.014 - MMC

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

APT28

Score: 0.84

Matched TTPs:

T1203 - Exploitation for Client Execution
T1137.002 - Office Test
T1598.003 - Spearphishing Link
T1598 - Phishing for Information
T1498 - Network Denial of Service

MITREへのリンク →

Kimsuky

Score: 0.70

Matched TTPs:

T1584.001 - Domains
T1598.003 - Spearphishing Link
T1598 - Phishing for Information
T1218.010 - Regsvr32
T1036.004 - Masquerade Task or Service

MITREへのリンク →

Scattered Spider

Score: 0.56

Matched TTPs:

T1538 - Cloud Service Dashboard
T1598 - Phishing for Information
T1598.003 - Spearphishing Link

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る