Trusted Design

Targeted Phishing Attempt (7/25/2017)

概要

Email received from an unknown person, with a PDF file that had a suspicious name, but reported zero hits on Virus Total. Email Subject: Special business file for you Email Body: Please see the attached shared business file for you today. Thank You, Jennifer Tarducci Surgical Boarding Radiology Oakland Regional Hospital 22401 Foster Winter Drive Southfield, MI 48075 Filename: Scanned 2321072517.pdf PDF file received is clean but has an embedded URL to another domain to steal email username/password. Using the Tor Browser and the Embedded URL I was blocked by phish.opendns.com

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

CoT email 20171113 (score: 0.69)
Phishing Email with PDF doc link to URL (score: 0.68)
Scanned Document - (Inv097854.PDF) Received (score: 0.68)
Phishing email with malicious PDF (score: 0.67)
Phishing Email Serving W97M/Dropper.cu via Office Doc with Macro (score: 0.65)

このPulseに関連する脅威アクター (事実ベース)

BlackTech

Score: 4.60

Matched TTPs:

T1566.002 - Spearphishing Link
T1588.003 - Code Signing Certificates

MITREへのリンク →

Mofang

Score: 4.60

Matched TTPs:

T1566.002 - Spearphishing Link
T1027.015 - Compression

MITREへのリンク →

Kimsuky

Score: 19.16

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1036.004 - Masquerade Task or Service
T1566 - Phishing
T1598 - Phishing for Information
T1588.003 - Code Signing Certificates
T1584.001 - Domains

MITREへのリンク →

Sidewinder

Score: 7.53

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1598.002 - Spearphishing Attachment

MITREへのリンク →

Elderwood

Score: 3.21

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise

MITREへのリンク →

Machete

Score: 3.21

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise

MITREへのリンク →

FIN7

Score: 3.54

Matched TTPs:

T1566.002 - Spearphishing Link
T1036.004 - Masquerade Task or Service

MITREへのリンク →

Mustard Tempest

Score: 6.50

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise
T1584.001 - Domains

MITREへのリンク →

Sandworm Team

Score: 3.91

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link

MITREへのリンク →

Transparent Tribe

Score: 6.50

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise
T1584.001 - Domains

MITREへのリンク →

Mustang Panda

Score: 11.19

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1588.003 - Code Signing Certificates
T1027.007 - Dynamic API Resolution

MITREへのリンク →

FIN8

Score: 7.34

Matched TTPs:

T1566.002 - Spearphishing Link
T1573.002 - Asymmetric Cryptography
T1588.003 - Code Signing Certificates

MITREへのリンク →

APT32

Score: 11.61

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1550.003 - Pass the Ticket
T1036.004 - Masquerade Task or Service
T1189 - Drive-by Compromise

MITREへのリンク →

APT1

Score: 4.73

Matched TTPs:

T1566.002 - Spearphishing Link
T1584.001 - Domains

MITREへのリンク →

Lazarus Group

Score: 11.96

Matched TTPs:

T1566.002 - Spearphishing Link
T1036.004 - Masquerade Task or Service
T1189 - Drive-by Compromise
T1027.007 - Dynamic API Resolution
T1566.003 - Spearphishing via Service

MITREへのリンク →

Leviathan

Score: 6.36

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise
T1027.015 - Compression

MITREへのリンク →

ZIRCONIUM

Score: 9.44

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1036.004 - Masquerade Task or Service
T1598 - Phishing for Information

MITREへのリンク →

EXOTIC LILY

Score: 3.97

Matched TTPs:

T1566.002 - Spearphishing Link
T1566.003 - Spearphishing via Service

MITREへのリンク →

Molerats

Score: 4.60

Matched TTPs:

T1566.002 - Spearphishing Link
T1027.015 - Compression

MITREへのリンク →

Magic Hound

Score: 13.57

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1036.004 - Masquerade Task or Service
T1189 - Drive-by Compromise
T1566.003 - Spearphishing via Service
T1584.001 - Domains

MITREへのリンク →

OilRig

Score: 9.87

Matched TTPs:

T1566.002 - Spearphishing Link
T1573.002 - Asymmetric Cryptography
T1588.003 - Code Signing Certificates
T1566.003 - Spearphishing via Service

MITREへのリンク →

Windshift

Score: 5.74

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise
T1566.003 - Spearphishing via Service

MITREへのリンク →

Cobalt Group

Score: 4.19

Matched TTPs:

T1566.002 - Spearphishing Link
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

APT29

Score: 7.81

Matched TTPs:

T1566.002 - Spearphishing Link
T1550.003 - Pass the Ticket
T1566.003 - Spearphishing via Service

MITREへのリンク →

TA2541

Score: 7.34

Matched TTPs:

T1566.002 - Spearphishing Link
T1573.002 - Asymmetric Cryptography
T1027.015 - Compression

MITREへのリンク →

Earth Lusca

Score: 3.21

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise

MITREへのリンク →

RedCurl

Score: 7.23

Matched TTPs:

T1566.002 - Spearphishing Link
T1039 - Data from Network Shared Drive
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

Storm-1811

Score: 3.97

Matched TTPs:

T1566.002 - Spearphishing Link
T1566.003 - Spearphishing via Service

MITREへのリンク →

Turla

Score: 3.21

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise

MITREへのリンク →

Wizard Spider

Score: 6.69

Matched TTPs:

T1566.002 - Spearphishing Link
T1036.004 - Masquerade Task or Service
T1588.003 - Code Signing Certificates

MITREへのリンク →

Patchwork

Score: 5.67

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1189 - Drive-by Compromise

MITREへのリンク →

APT42

Score: 4.19

Matched TTPs:

T1566.002 - Spearphishing Link
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

Scattered Spider

Score: 5.90

Matched TTPs:

T1598.003 - Spearphishing Link
T1598 - Phishing for Information

MITREへのリンク →

APT28

Score: 14.83

Matched TTPs:

T1598.003 - Spearphishing Link
T1039 - Data from Network Shared Drive
T1598 - Phishing for Information
T1189 - Drive-by Compromise
T1550.001 - Application Access Token

MITREへのリンク →

Star Blizzard

Score: 6.08

Matched TTPs:

T1598.003 - Spearphishing Link
T1598.002 - Spearphishing Attachment

MITREへのリンク →

Moonstone Sleet

Score: 8.42

Matched TTPs:

T1598.003 - Spearphishing Link
T1598 - Phishing for Information
T1566.003 - Spearphishing via Service

MITREへのリンク →

CURIUM

Score: 6.75

Matched TTPs:

T1598.003 - Spearphishing Link
T1189 - Drive-by Compromise
T1566.003 - Spearphishing via Service

MITREへのリンク →

Dragonfly

Score: 7.85

Matched TTPs:

T1598.003 - Spearphishing Link
T1598.002 - Spearphishing Attachment
T1189 - Drive-by Compromise

MITREへのリンク →

BRONZE BUTLER

Score: 8.64

Matched TTPs:

T1550.003 - Pass the Ticket
T1039 - Data from Network Shared Drive
T1189 - Drive-by Compromise

MITREへのリンク →

Winter Vivern

Score: 3.86

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1189 - Drive-by Compromise

MITREへのリンク →

FIN6

Score: 7.36

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1573.002 - Asymmetric Cryptography
T1566.003 - Spearphishing via Service

MITREへのリンク →

Fox Kitten

Score: 5.13

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1039 - Data from Network Shared Drive

MITREへのリンク →

PROMETHIUM

Score: 7.99

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1205.001 - Port Knocking
T1189 - Drive-by Compromise

MITREへのリンク →

UNC3886

Score: 6.23

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1205.001 - Port Knocking

MITREへのリンク →

Higaisa

Score: 5.25

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1027.015 - Compression

MITREへのリンク →

SideCopy

Score: 11.04

Matched TTPs:

T1598.002 - Spearphishing Attachment
T1614 - System Location Discovery
T1584.001 - Domains

MITREへのリンク →

INC Ransom

Score: 3.29

Matched TTPs:

T1566 - Phishing

MITREへのリンク →

Sea Turtle

Score: 3.29

Matched TTPs:

T1566 - Phishing

MITREへのリンク →

Axiom

Score: 5.05

Matched TTPs:

T1566 - Phishing
T1189 - Drive-by Compromise

MITREへのリンク →

AppleJeus

Score: 3.29

Matched TTPs:

T1566 - Phishing

MITREへのリンク →

GOLD SOUTHFIELD

Score: 3.29

Matched TTPs:

T1566 - Phishing

MITREへのリンク →

Gamaredon Group

Score: 6.19

Matched TTPs:

T1039 - Data from Network Shared Drive
T1027.015 - Compression

MITREへのリンク →

Sowbug

Score: 3.03

Matched TTPs:

T1039 - Data from Network Shared Drive

MITREへのリンク →

Chimera

Score: 3.03

Matched TTPs:

T1039 - Data from Network Shared Drive

MITREへのリンク →

menuPass

Score: 3.03

Matched TTPs:

T1039 - Data from Network Shared Drive

MITREへのリンク →

Volt Typhoon

Score: 4.13

Matched TTPs:

T1614 - System Location Discovery

MITREへのリンク →

Dark Caracal

Score: 4.29

Matched TTPs:

T1189 - Drive-by Compromise
T1566.003 - Spearphishing via Service

MITREへのリンク →

Threat Group-3390

Score: 8.07

Matched TTPs:

T1189 - Drive-by Compromise
T1588.003 - Code Signing Certificates
T1027.015 - Compression

MITREへのリンク →

Equation

Score: 4.13

Matched TTPs:

T1564.005 - Hidden File System

MITREへのリンク →

Strider

Score: 4.13

Matched TTPs:

T1564.005 - Hidden File System

MITREへのリンク →

HAFNIUM

Score: 4.13

Matched TTPs:

T1550.001 - Application Access Token

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.78

Matched TTPs:

T1566 - Phishing
T1598 - Phishing for Information
T1566.002 - Spearphishing Link
T1584.001 - Domains
T1588.003 - Code Signing Certificates
T1036.004 - Masquerade Task or Service
T1598.003 - Spearphishing Link

MITREへのリンク →

APT28

Score: 0.64

Matched TTPs:

T1550.001 - Application Access Token
T1598 - Phishing for Information
T1189 - Drive-by Compromise
T1039 - Data from Network Shared Drive
T1598.003 - Spearphishing Link

MITREへのリンク →

Magic Hound

Score: 0.59

Matched TTPs:

T1189 - Drive-by Compromise
T1566.003 - Spearphishing via Service
T1566.002 - Spearphishing Link
T1584.001 - Domains
T1036.004 - Masquerade Task or Service
T1598.003 - Spearphishing Link

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る