Trusted Design

SF Bay Area Spear Phishing Ring

概要

Cell phone stolen in Downtown San Francisco on October 21. Locked with FindMyPhone, iCloud password changed. Victim began receiving a series of spear phishing messages requesting that they change their password at a series of URLs (enclosed in Pulse). The pairing of a phone stolen to a specific set of IDs seems to indicate that this is the result of some kind of tool. Can't get a malware sample but will actively search for one as new texts come in.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Spear Phishing Campaign Using “Sign in” Themed Emails Designed to Harvest User Credentials (score: 0.60)
20151215: Phishing Campaign Targeting Pandora Jewelers (score: 0.58)
Phishing Apple ID login (score: 0.57)
Source of a user credential stealing phishing attack (score: 0.57)
Group 123 (update June 4th 2018) (score: 0.56)

このPulseに関連する脅威アクター (事実ベース)

Scattered Spider

Score: 15.30

Matched TTPs:

T1598.003 - Spearphishing Link
T1598.004 - Spearphishing Voice
T1598 - Phishing for Information
T1003.003 - NTDS
T1078.004 - Cloud Accounts

MITREへのリンク →

Mustang Panda

Score: 8.93

Matched TTPs:

T1598.003 - Spearphishing Link
T1027.007 - Dynamic API Resolution
T1003.003 - NTDS

MITREへのリンク →

Sandworm Team

Score: 7.73

Matched TTPs:

T1598.003 - Spearphishing Link
T1195.002 - Compromise Software Supply Chain
T1003.003 - NTDS

MITREへのリンク →

ZIRCONIUM

Score: 5.90

Matched TTPs:

T1598.003 - Spearphishing Link
T1598 - Phishing for Information

MITREへのリンク →

Kimsuky

Score: 5.90

Matched TTPs:

T1598.003 - Spearphishing Link
T1598 - Phishing for Information

MITREへのリンク →

APT28

Score: 11.17

Matched TTPs:

T1598.003 - Spearphishing Link
T1598 - Phishing for Information
T1003.003 - NTDS
T1078.004 - Cloud Accounts

MITREへのリンク →

Moonstone Sleet

Score: 8.83

Matched TTPs:

T1598.003 - Spearphishing Link
T1195.002 - Compromise Software Supply Chain
T1598 - Phishing for Information

MITREへのリンク →

Dragonfly

Score: 7.73

Matched TTPs:

T1598.003 - Spearphishing Link
T1195.002 - Compromise Software Supply Chain
T1003.003 - NTDS

MITREへのリンク →

Medusa Group

Score: 6.47

Matched TTPs:

T1608.002 - Upload Tool
T1003.003 - NTDS

MITREへのリンク →

Threat Group-3390

Score: 7.06

Matched TTPs:

T1608.002 - Upload Tool
T1195.002 - Compromise Software Supply Chain

MITREへのリンク →

LAPSUS$

Score: 9.40

Matched TTPs:

T1598.004 - Spearphishing Voice
T1003.003 - NTDS
T1078.004 - Cloud Accounts

MITREへのリンク →

Storm-1811

Score: 4.54

Matched TTPs:

T1566.004 - Spearphishing Voice

MITREへのリンク →

APT41

Score: 5.27

Matched TTPs:

T1195.002 - Compromise Software Supply Chain
T1003.003 - NTDS

MITREへのリンク →

APT38

Score: 4.54

Matched TTPs:

T1036.006 - Space after Filename

MITREへのリンク →

Mustard Tempest

Score: 4.54

Matched TTPs:

T1608.006 - SEO Poisoning

MITREへのリンク →

Lazarus Group

Score: 4.13

Matched TTPs:

T1027.007 - Dynamic API Resolution

MITREへのリンク →

Ke3chang

Score: 5.27

Matched TTPs:

T1003.003 - NTDS
T1078.004 - Cloud Accounts

MITREへのリンク →

HAFNIUM

Score: 5.27

Matched TTPs:

T1003.003 - NTDS
T1078.004 - Cloud Accounts

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Scattered Spider

Score: 0.79

Matched TTPs:

T1598 - Phishing for Information
T1078.004 - Cloud Accounts
T1598.003 - Spearphishing Link
T1003.003 - NTDS
T1598.004 - Spearphishing Voice

MITREへのリンク →

APT28

Score: 0.61

Matched TTPs:

T1598 - Phishing for Information
T1003.003 - NTDS
T1078.004 - Cloud Accounts
T1598.003 - Spearphishing Link

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る