Trusted Design

Argentina based Phishing/Malware campaign

概要

Email originate from the info@executive-com.info ... user is encourgaged to follow link in order to download a shared document. Portal hosted at https://gmtouch.com.ar/wp-includes/SimplePie/HTTP displays Microsoft branding and requests users Domain credentials in order to download file. Emails are specifically targeted against members of the business and are crafted to look like internal requests.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Mr.Xpl0it (score: 0.62)
Infy Malware Active In Decade of Targeted Attacks (score: 0.58)
Malicious Phishing Email Payload Bilp #999 Paymen #2143 8/24/2016 diablo.exe (score: 0.58)
" has sent you a document through Google Docs!" - Phishing E-mail (score: 0.56)
MALWARE POSING AS HUMAN RIGHTS ORGANIZATIONS AND COMMERCIAL SOFTWARE TARGETING IRANIANS AND FOREIGN POLICY INSTITUTIONS (score: 0.56)

このPulseに関連する脅威アクター (事実ベース)

Scattered Spider

Score: 12.11

Matched TTPs:

T1564.008 - Email Hiding Rules
T1598 - Phishing for Information
T1538 - Cloud Service Dashboard

MITREへのリンク →

FIN4

Score: 9.61

Matched TTPs:

T1564.008 - Email Hiding Rules
T1566.002 - Spearphishing Link
T1114.002 - Remote Email Collection
T1204.001 - Malicious Link

MITREへのリンク →

Magic Hound

Score: 14.03

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1566.002 - Spearphishing Link
T1114.002 - Remote Email Collection
T1204.001 - Malicious Link
T1566.003 - Spearphishing via Service
T1584.001 - Domains

MITREへのリンク →

APT29

Score: 17.95

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1566.002 - Spearphishing Link
T1114.002 - Remote Email Collection
T1090.004 - Domain Fronting
T1204.001 - Malicious Link
T1566.003 - Spearphishing via Service
T1078.003 - Local Accounts

MITREへのリンク →

Gamaredon Group

Score: 13.44

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1039 - Data from Network Shared Drive
T1221 - Template Injection
T1204.001 - Malicious Link
T1027.015 - Compression

MITREへのリンク →

TA2541

Score: 8.70

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1027.015 - Compression

MITREへのリンク →

Lotus Blossom

Score: 5.67

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1090.001 - Internal Proxy

MITREへのリンク →

FIN13

Score: 8.34

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1564.001 - Hidden Files and Directories
T1090.001 - Internal Proxy

MITREへのリンク →

HAFNIUM

Score: 14.88

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1114.002 - Remote Email Collection
T1564.001 - Hidden Files and Directories
T1550.001 - Application Access Token
T1078.003 - Local Accounts

MITREへのリンク →

Turla

Score: 14.77

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1566.002 - Spearphishing Link
T1555.004 - Windows Credential Manager
T1204.001 - Malicious Link
T1090.001 - Internal Proxy
T1078.003 - Local Accounts

MITREへのリンク →

Volt Typhoon

Score: 5.67

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1090.001 - Internal Proxy

MITREへのリンク →

FIN8

Score: 5.55

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1566.002 - Spearphishing Link
T1204.001 - Malicious Link

MITREへのリンク →

LuminousMoth

Score: 5.47

Matched TTPs:

T1566.002 - Spearphishing Link
T1564.001 - Hidden Files and Directories
T1204.001 - Malicious Link

MITREへのリンク →

Confucius

Score: 5.96

Matched TTPs:

T1566.002 - Spearphishing Link
T1221 - Template Injection
T1204.001 - Malicious Link

MITREへのリンク →

Mofang

Score: 5.96

Matched TTPs:

T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1027.015 - Compression

MITREへのリンク →

Kimsuky

Score: 14.86

Matched TTPs:

T1566.002 - Spearphishing Link
T1114.002 - Remote Email Collection
T1598 - Phishing for Information
T1204.001 - Malicious Link
T1584.001 - Domains
T1078.003 - Local Accounts

MITREへのリンク →

FIN7

Score: 11.07

Matched TTPs:

T1566.002 - Spearphishing Link
T1195.002 - Compromise Software Supply Chain
T1564.001 - Hidden Files and Directories
T1204.001 - Malicious Link
T1078.003 - Local Accounts

MITREへのリンク →

Mustard Tempest

Score: 6.09

Matched TTPs:

T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1584.001 - Domains

MITREへのリンク →

Sandworm Team

Score: 5.74

Matched TTPs:

T1566.002 - Spearphishing Link
T1195.002 - Compromise Software Supply Chain
T1204.001 - Malicious Link

MITREへのリンク →

Transparent Tribe

Score: 8.76

Matched TTPs:

T1566.002 - Spearphishing Link
T1564.001 - Hidden Files and Directories
T1204.001 - Malicious Link
T1584.001 - Domains

MITREへのリンク →

Mustang Panda

Score: 9.61

Matched TTPs:

T1566.002 - Spearphishing Link
T1027.007 - Dynamic API Resolution
T1564.001 - Hidden Files and Directories
T1204.001 - Malicious Link

MITREへのリンク →

APT32

Score: 8.14

Matched TTPs:

T1566.002 - Spearphishing Link
T1564.001 - Hidden Files and Directories
T1204.001 - Malicious Link
T1078.003 - Local Accounts

MITREへのリンク →

APT1

Score: 7.40

Matched TTPs:

T1566.002 - Spearphishing Link
T1114.002 - Remote Email Collection
T1584.001 - Domains

MITREへのリンク →

Lazarus Group

Score: 13.70

Matched TTPs:

T1566.002 - Spearphishing Link
T1027.007 - Dynamic API Resolution
T1564.001 - Hidden Files and Directories
T1566.003 - Spearphishing via Service
T1090.001 - Internal Proxy

MITREへのリンク →

Leviathan

Score: 5.96

Matched TTPs:

T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1027.015 - Compression

MITREへのリンク →

ZIRCONIUM

Score: 6.25

Matched TTPs:

T1566.002 - Spearphishing Link
T1598 - Phishing for Information
T1204.001 - Malicious Link

MITREへのリンク →

EXOTIC LILY

Score: 5.33

Matched TTPs:

T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1566.003 - Spearphishing via Service

MITREへのリンク →

Molerats

Score: 5.96

Matched TTPs:

T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1027.015 - Compression

MITREへのリンク →

OilRig

Score: 8.95

Matched TTPs:

T1566.002 - Spearphishing Link
T1555.004 - Windows Credential Manager
T1204.001 - Malicious Link
T1566.003 - Spearphishing via Service

MITREへのリンク →

Windshift

Score: 5.33

Matched TTPs:

T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1566.003 - Spearphishing via Service

MITREへのリンク →

Cobalt Group

Score: 5.74

Matched TTPs:

T1566.002 - Spearphishing Link
T1195.002 - Compromise Software Supply Chain
T1204.001 - Malicious Link

MITREへのリンク →

RedCurl

Score: 8.51

Matched TTPs:

T1566.002 - Spearphishing Link
T1039 - Data from Network Shared Drive
T1564.001 - Hidden Files and Directories
T1204.001 - Malicious Link

MITREへのリンク →

Storm-1811

Score: 3.97

Matched TTPs:

T1566.002 - Spearphishing Link
T1566.003 - Spearphishing via Service

MITREへのリンク →

Wizard Spider

Score: 6.43

Matched TTPs:

T1566.002 - Spearphishing Link
T1555.004 - Windows Credential Manager
T1204.001 - Malicious Link

MITREへのリンク →

APT39

Score: 5.74

Matched TTPs:

T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1090.001 - Internal Proxy

MITREへのリンク →

APT28

Score: 20.45

Matched TTPs:

T1039 - Data from Network Shared Drive
T1114.002 - Remote Email Collection
T1598 - Phishing for Information
T1221 - Template Injection
T1564.001 - Hidden Files and Directories
T1204.001 - Malicious Link
T1550.001 - Application Access Token

MITREへのリンク →

BRONZE BUTLER

Score: 3.03

Matched TTPs:

T1039 - Data from Network Shared Drive

MITREへのリンク →

Sowbug

Score: 3.03

Matched TTPs:

T1039 - Data from Network Shared Drive

MITREへのリンク →

Chimera

Score: 5.70

Matched TTPs:

T1039 - Data from Network Shared Drive
T1114.002 - Remote Email Collection

MITREへのリンク →

menuPass

Score: 3.03

Matched TTPs:

T1039 - Data from Network Shared Drive

MITREへのリンク →

Fox Kitten

Score: 3.03

Matched TTPs:

T1039 - Data from Network Shared Drive

MITREへのリンク →

Dragonfly

Score: 8.75

Matched TTPs:

T1114.002 - Remote Email Collection
T1195.002 - Compromise Software Supply Chain
T1221 - Template Injection

MITREへのリンク →

Threat Group-3390

Score: 6.08

Matched TTPs:

T1195.002 - Compromise Software Supply Chain
T1027.015 - Compression

MITREへのリンク →

Daggerfly

Score: 4.29

Matched TTPs:

T1195.002 - Compromise Software Supply Chain
T1204.001 - Malicious Link

MITREへのリンク →

Moonstone Sleet

Score: 8.89

Matched TTPs:

T1195.002 - Compromise Software Supply Chain
T1598 - Phishing for Information
T1566.003 - Spearphishing via Service

MITREへのリンク →

Stealth Falcon

Score: 3.62

Matched TTPs:

T1555.004 - Windows Credential Manager

MITREへのリンク →

Tropic Trooper

Score: 8.48

Matched TTPs:

T1221 - Template Injection
T1564.001 - Hidden Files and Directories
T1078.003 - Local Accounts

MITREへのリンク →

Inception

Score: 3.15

Matched TTPs:

T1221 - Template Injection

MITREへのリンク →

DarkHydrus

Score: 3.15

Matched TTPs:

T1221 - Template Injection

MITREへのリンク →

Equation

Score: 4.13

Matched TTPs:

T1564.005 - Hidden File System

MITREへのリンク →

Strider

Score: 7.06

Matched TTPs:

T1564.005 - Hidden File System
T1090.001 - Internal Proxy

MITREへのリンク →

Contagious Interview

Score: 3.88

Matched TTPs:

T1204.001 - Malicious Link
T1566.003 - Spearphishing via Service

MITREへのリンク →

Velvet Ant

Score: 5.59

Matched TTPs:

T1090.001 - Internal Proxy
T1078.003 - Local Accounts

MITREへのリンク →

Higaisa

Score: 6.08

Matched TTPs:

T1090.001 - Internal Proxy
T1027.015 - Compression

MITREへのリンク →

SideCopy

Score: 3.29

Matched TTPs:

T1584.001 - Domains

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

APT28

Score: 0.78

Matched TTPs:

T1564.001 - Hidden Files and Directories
T1204.001 - Malicious Link
T1550.001 - Application Access Token
T1221 - Template Injection
T1598 - Phishing for Information
T1114.002 - Remote Email Collection
T1039 - Data from Network Shared Drive

MITREへのリンク →

APT29

Score: 0.69

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1566.003 - Spearphishing via Service
T1078.003 - Local Accounts
T1090.004 - Domain Fronting
T1204.001 - Malicious Link
T1566.002 - Spearphishing Link
T1114.002 - Remote Email Collection

MITREへのリンク →

Turla

Score: 0.60

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1078.003 - Local Accounts
T1204.001 - Malicious Link
T1555.004 - Windows Credential Manager
T1090.001 - Internal Proxy
T1566.002 - Spearphishing Link

MITREへのリンク →

HAFNIUM

Score: 0.60

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1564.001 - Hidden Files and Directories
T1078.003 - Local Accounts
T1550.001 - Application Access Token
T1114.002 - Remote Email Collection

MITREへのリンク →

Kimsuky

Score: 0.57

Matched TTPs:

T1078.003 - Local Accounts
T1204.001 - Malicious Link
T1584.001 - Domains
T1566.002 - Spearphishing Link
T1598 - Phishing for Information
T1114.002 - Remote Email Collection

MITREへのリンク →

Magic Hound

Score: 0.56

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1566.003 - Spearphishing via Service
T1204.001 - Malicious Link
T1584.001 - Domains
T1566.002 - Spearphishing Link
T1114.002 - Remote Email Collection

MITREへのリンク →

Gamaredon Group

Score: 0.55

Matched TTPs:

T1016.001 - Internet Connection Discovery
T1204.001 - Malicious Link
T1221 - Template Injection
T1039 - Data from Network Shared Drive
T1027.015 - Compression

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る