Trusted Design

Spear-phishing with URL to infect with Gozi/ifsb Trojan

概要

There is a campaign of spear-phishing where the bad actor uses an email crafted to resemble a Notice of Intended Prosecution claiming speeding or other moving violation and representing a police unit in the U.K. The template has numerous flaws such as this type of notice would not be sent via email. The bad actor keys on the recipients curiosity and entices them to view the photo evidence where the Gozi/ifsb Trojan is transferred.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Spear Phishing Campaign Using “Sign in” Themed Emails Designed to Harvest User Credentials (score: 0.66)
NetTraveler Spear-Phishing Email Targets Diplomat of Uzbekistan (score: 0.65)
New Spear Phishing Campaign Pretends to be EFF (score: 0.65)
Uncovering the Seven Pointed Dagger (score: 0.64)
Hijacked Existing E-mail Thread - Ursnif (aka Gozi aka Gozi ISFB) Malware Phishing (score: 0.60)

このPulseに関連する脅威アクター (事実ベース)

Ember Bear

Score: 4.13

Matched TTPs:

T1564.008 - Email Hiding Rules

MITREへのリンク →

Sandworm Team

Score: 12.53

Matched TTPs:

T1564.008 - Email Hiding Rules
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1049 - System Network Connections Discovery

MITREへのリンク →

Kimsuky

Score: 31.33

Matched TTPs:

T1053.007 - Container Orchestration Job
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1552.003 - Shell History
T1055.014 - VDSO Hijacking
T1562.013 - Disable or Modify Network Device Firewall
T1690 - Prevent Command History Logging
T1030 - Data Transfer Size Limits
T1197 - BITS Jobs

MITREへのリンク →

Mustang Panda

Score: 15.71

Matched TTPs:

T1053.007 - Container Orchestration Job
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1055.005 - Thread Local Storage

MITREへのリンク →

LuminousMoth

Score: 5.29

Matched TTPs:

T1543.003 - Windows Service
T1584.005 - Botnet

MITREへのリンク →

Confucius

Score: 5.47

Matched TTPs:

T1543.003 - Windows Service
T1598.003 - Spearphishing Link
T1200 - Hardware Additions

MITREへのリンク →

Sidewinder

Score: 10.99

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1657 - Financial Theft
T1578.001 - Create Snapshot

MITREへのリンク →

FIN7

Score: 8.76

Matched TTPs:

T1543.003 - Windows Service
T1598.003 - Spearphishing Link
T1584.005 - Botnet
T1578.001 - Create Snapshot

MITREへのリンク →

APT32

Score: 4.78

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link

MITREへのリンク →

Lazarus Group

Score: 11.57

Matched TTPs:

T1543.003 - Windows Service
T1598.003 - Spearphishing Link
T1055.005 - Thread Local Storage
T1578.001 - Create Snapshot
T1547.008 - LSASS Driver

MITREへのリンク →

Leviathan

Score: 8.61

Matched TTPs:

T1543.003 - Windows Service
T1598.003 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1055.014 - VDSO Hijacking

MITREへのリンク →

ZIRCONIUM

Score: 9.94

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1197 - BITS Jobs
T1578.001 - Create Snapshot

MITREへのリンク →

EXOTIC LILY

Score: 8.69

Matched TTPs:

T1543.003 - Windows Service
T1598.003 - Spearphishing Link
T1690 - Prevent Command History Logging
T1547.008 - LSASS Driver

MITREへのリンク →

Magic Hound

Score: 9.09

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1547.008 - LSASS Driver

MITREへのリンク →

OilRig

Score: 7.51

Matched TTPs:

T1543.003 - Windows Service
T1598.003 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1547.008 - LSASS Driver

MITREへのリンク →

Windshift

Score: 4.84

Matched TTPs:

T1543.003 - Windows Service
T1598.003 - Spearphishing Link
T1547.008 - LSASS Driver

MITREへのリンク →

APT29

Score: 7.51

Matched TTPs:

T1543.003 - Windows Service
T1598.003 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1547.008 - LSASS Driver

MITREへのリンク →

Storm-1811

Score: 19.92

Matched TTPs:

T1543.003 - Windows Service
T1205.001 - Port Knocking
T1486 - Data Encrypted for Impact
T1567.003 - Exfiltration to Text Storage Sites
T1030 - Data Transfer Size Limits
T1547.008 - LSASS Driver

MITREへのリンク →

Turla

Score: 4.04

Matched TTPs:

T1543.003 - Windows Service
T1578.001 - Create Snapshot

MITREへのリンク →

TA577

Score: 4.11

Matched TTPs:

T1543.003 - Windows Service
T1024 - Custom Cryptographic Protocol

MITREへのリンク →

Patchwork

Score: 4.78

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link

MITREへのリンク →

APT42

Score: 4.48

Matched TTPs:

T1543.003 - Windows Service
T1030 - Data Transfer Size Limits

MITREへのリンク →

Scattered Spider

Score: 15.59

Matched TTPs:

T1566.002 - Spearphishing Link
T1019 - System Firmware
T1552.003 - Shell History
T1030 - Data Transfer Size Limits
T1197 - BITS Jobs

MITREへのリンク →

Silent Librarian

Score: 6.30

Matched TTPs:

T1566.002 - Spearphishing Link
T1584.005 - Botnet

MITREへのリンク →

APT28

Score: 16.43

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1205.001 - Port Knocking
T1197 - BITS Jobs
T1200 - Hardware Additions

MITREへのリンク →

Star Blizzard

Score: 9.62

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1657 - Financial Theft

MITREへのリンク →

Moonstone Sleet

Score: 9.30

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1197 - BITS Jobs
T1547.008 - LSASS Driver

MITREへのリンク →

CURIUM

Score: 12.29

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1205.001 - Port Knocking
T1578.001 - Create Snapshot
T1547.008 - LSASS Driver

MITREへのリンク →

Dragonfly

Score: 10.11

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1657 - Financial Theft
T1200 - Hardware Additions

MITREへのリンク →

Saint Bear

Score: 3.91

Matched TTPs:

T1598.003 - Spearphishing Link
T1030 - Data Transfer Size Limits

MITREへのリンク →

Tropic Trooper

Score: 4.03

Matched TTPs:

T1598.003 - Spearphishing Link
T1200 - Hardware Additions

MITREへのリンク →

FIN6

Score: 3.40

Matched TTPs:

T1598.003 - Spearphishing Link
T1547.008 - LSASS Driver

MITREへのリンク →

BRONZE BUTLER

Score: 3.47

Matched TTPs:

T1598.003 - Spearphishing Link
T1578.001 - Create Snapshot

MITREへのリンク →

Gamaredon Group

Score: 7.65

Matched TTPs:

T1598.003 - Spearphishing Link
T1055.014 - VDSO Hijacking
T1200 - Hardware Additions

MITREへのリンク →

Darkhotel

Score: 3.47

Matched TTPs:

T1598.003 - Spearphishing Link
T1578.001 - Create Snapshot

MITREへのリンク →

Inception

Score: 4.03

Matched TTPs:

T1598.003 - Spearphishing Link
T1200 - Hardware Additions

MITREへのリンク →

Ajax Security Team

Score: 3.40

Matched TTPs:

T1598.003 - Spearphishing Link
T1547.008 - LSASS Driver

MITREへのリンク →

APT41

Score: 3.91

Matched TTPs:

T1598.003 - Spearphishing Link
T1030 - Data Transfer Size Limits

MITREへのリンク →

Higaisa

Score: 3.47

Matched TTPs:

T1598.003 - Spearphishing Link
T1578.001 - Create Snapshot

MITREへのリンク →

Malteiro

Score: 3.40

Matched TTPs:

T1598.003 - Spearphishing Link
T1552.003 - Shell History

MITREへのリンク →

SideCopy

Score: 4.50

Matched TTPs:

T1598.003 - Spearphishing Link
T1657 - Financial Theft

MITREへのリンク →

IndigoZebra

Score: 3.54

Matched TTPs:

T1598.003 - Spearphishing Link
T1024 - Custom Cryptographic Protocol

MITREへのリンク →

DarkHydrus

Score: 4.03

Matched TTPs:

T1598.003 - Spearphishing Link
T1200 - Hardware Additions

MITREへのリンク →

The White Company

Score: 3.47

Matched TTPs:

T1598.003 - Spearphishing Link
T1578.001 - Create Snapshot

MITREへのリンク →

HEXANE

Score: 6.29

Matched TTPs:

T1024 - Custom Cryptographic Protocol
T1055.014 - VDSO Hijacking

MITREへのリンク →

LAPSUS$

Score: 9.83

Matched TTPs:

T1024 - Custom Cryptographic Protocol
T1019 - System Firmware
T1030 - Data Transfer Size Limits

MITREへのリンク →

HAFNIUM

Score: 3.62

Matched TTPs:

T1049 - System Network Connections Discovery

MITREへのリンク →

Axiom

Score: 6.91

Matched TTPs:

T1049 - System Network Connections Discovery
T1562.013 - Disable or Modify Network Device Firewall

MITREへのリンク →

Volt Typhoon

Score: 6.21

Matched TTPs:

T1049 - System Network Connections Discovery
T1578.001 - Create Snapshot

MITREへのリンク →

INC Ransom

Score: 5.81

Matched TTPs:

T1552.003 - Shell History
T1562.013 - Disable or Modify Network Device Firewall

MITREへのリンク →

Contagious Interview

Score: 11.92

Matched TTPs:

T1552.003 - Shell History
T1690 - Prevent Command History Logging
T1030 - Data Transfer Size Limits
T1547.008 - LSASS Driver

MITREへのリンク →

AppleJeus

Score: 5.81

Matched TTPs:

T1552.003 - Shell History
T1562.013 - Disable or Modify Network Device Firewall

MITREへのリンク →

Sea Turtle

Score: 3.29

Matched TTPs:

T1562.013 - Disable or Modify Network Device Firewall

MITREへのリンク →

GOLD SOUTHFIELD

Score: 3.29

Matched TTPs:

T1562.013 - Disable or Modify Network Device Firewall

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.81

Matched TTPs:

T1055.014 - VDSO Hijacking
T1598.003 - Spearphishing Link
T1024 - Custom Cryptographic Protocol
T1690 - Prevent Command History Logging
T1030 - Data Transfer Size Limits
T1543.003 - Windows Service
T1552.003 - Shell History
T1566.002 - Spearphishing Link
T1562.013 - Disable or Modify Network Device Firewall
T1197 - BITS Jobs
T1053.007 - Container Orchestration Job

MITREへのリンク →

Storm-1811

Score: 0.60

Matched TTPs:

T1567.003 - Exfiltration to Text Storage Sites
T1205.001 - Port Knocking
T1547.008 - LSASS Driver
T1486 - Data Encrypted for Impact
T1543.003 - Windows Service
T1030 - Data Transfer Size Limits

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る