Trusted Design

Malspam pushing Locky ransomware tries HoeflerText notifications for Chrome and FireFox

概要

From ISC: During past two weeks or so, weve seen plenty of botnet-based malicious spam (malspam) pushing Locky ransomware. In recent days, Ive noticed multiple waves of malspam every weekday. It gets a bit boring after a while, but as 2017-08-31 came to a close, I noticed a different technique from this malspam. Todays malspam had links to fake Dropbox pages. If you viewed the pages in Chrome or Firefox, they showed a fake notification stating you dont have the HoeflerText font. These fake notifications had an update button that returned a malicious JavaScript (.js) file. These .js files were disguised as a font library.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

InfoSec Handlers Diary Blog - Malspam pushing Locky ransomware tries HoeflerText notifications for Chrome and FireFox (score: 0.81)
Affiliate’s Malspam Operation: Kovter and Miuref/Boaxxe (score: 0.66)
Jaff Ransomware Gets Makeover - SANS Internet Storm Center (score: 0.65)
UPATRE/DYRE MALSPAM -SUBJ: SCANNED IMAGE FROM A XEROX WORKCENTRE (score: 0.64)
From Locky with love – reading malicious attachments (score: 0.63)

このPulseに関連する脅威アクター (事実ベース)

Turla

Score: 8.56

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1583.006 - Web Services
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

APT32

Score: 12.99

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1583.006 - Web Services
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

Saint Bear

Score: 7.32

Matched TTPs:

T1059.007 - JavaScript
T1608.001 - Upload Malware
T1583.006 - Web Services
T1204.001 - Malicious Link

MITREへのリンク →

Sidewinder

Score: 7.24

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1204.001 - Malicious Link

MITREへのリンク →

MuddyWater

Score: 6.79

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1583.006 - Web Services
T1204.001 - Malicious Link

MITREへのリンク →

Earth Lusca

Score: 10.53

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1608.001 - Upload Malware
T1583.006 - Web Services
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

TA577

Score: 4.78

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1204.001 - Malicious Link

MITREへのリンク →

Winter Vivern

Score: 5.10

Matched TTPs:

T1059.007 - JavaScript
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

Contagious Interview

Score: 11.86

Matched TTPs:

T1059.007 - JavaScript
T1608.001 - Upload Malware
T1583.006 - Web Services
T1204.004 - Malicious Copy and Paste
T1204.001 - Malicious Link

MITREへのリンク →

LazyScripter

Score: 8.77

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1608.001 - Upload Malware
T1583.006 - Web Services
T1204.001 - Malicious Link

MITREへのリンク →

TA505

Score: 6.75

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1608.001 - Upload Malware
T1204.001 - Malicious Link

MITREへのリンク →

FIN7

Score: 8.77

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1608.001 - Upload Malware
T1583.006 - Web Services
T1204.001 - Malicious Link

MITREへのリンク →

Cobalt Group

Score: 4.78

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1204.001 - Malicious Link

MITREへのリンク →

Higaisa

Score: 5.12

Matched TTPs:

T1059.007 - JavaScript
T1027.015 - Compression

MITREへのリンク →

Kimsuky

Score: 15.76

Matched TTPs:

T1059.007 - JavaScript
T1176.001 - Browser Extensions
T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1583.006 - Web Services
T1204.001 - Malicious Link

MITREへのリンク →

Molerats

Score: 7.93

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1027.015 - Compression

MITREへのリンク →

Leafminer

Score: 3.74

Matched TTPs:

T1059.007 - JavaScript
T1189 - Drive-by Compromise

MITREへのリンク →

Mustang Panda

Score: 11.22

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1583.006 - Web Services
T1204.001 - Malicious Link

MITREへのリンク →

TA578

Score: 5.35

Matched TTPs:

T1059.007 - JavaScript
T1583.006 - Web Services
T1204.001 - Malicious Link

MITREへのリンク →

Evilnum

Score: 4.78

Matched TTPs:

T1059.007 - JavaScript
T1566.002 - Spearphishing Link
T1204.001 - Malicious Link

MITREへのリンク →

Star Blizzard

Score: 6.40

Matched TTPs:

T1059.007 - JavaScript
T1598.003 - Spearphishing Link
T1608.001 - Upload Malware

MITREへのリンク →

Mustard Tempest

Score: 11.08

Matched TTPs:

T1583.008 - Malvertising
T1566.002 - Spearphishing Link
T1608.001 - Upload Malware
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

LuminousMoth

Score: 4.78

Matched TTPs:

T1566.002 - Spearphishing Link
T1608.001 - Upload Malware
T1204.001 - Malicious Link

MITREへのリンク →

Confucius

Score: 4.82

Matched TTPs:

T1566.002 - Spearphishing Link
T1583.006 - Web Services
T1204.001 - Malicious Link

MITREへのリンク →

Mofang

Score: 5.96

Matched TTPs:

T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1027.015 - Compression

MITREへのリンク →

Elderwood

Score: 4.57

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

Machete

Score: 4.57

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

Sandworm Team

Score: 10.86

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1584.005 - Botnet
T1204.001 - Malicious Link

MITREへのリンク →

Transparent Tribe

Score: 4.57

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

Lazarus Group

Score: 5.22

Matched TTPs:

T1566.002 - Spearphishing Link
T1583.006 - Web Services
T1189 - Drive-by Compromise

MITREへのリンク →

Leviathan

Score: 7.72

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise
T1204.001 - Malicious Link
T1027.015 - Compression

MITREへのリンク →

ZIRCONIUM

Score: 7.28

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1583.006 - Web Services
T1204.001 - Malicious Link

MITREへのリンク →

EXOTIC LILY

Score: 4.78

Matched TTPs:

T1566.002 - Spearphishing Link
T1608.001 - Upload Malware
T1204.001 - Malicious Link

MITREへのリンク →

Magic Hound

Score: 9.04

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1583.006 - Web Services
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

OilRig

Score: 9.32

Matched TTPs:

T1566.002 - Spearphishing Link
T1608.001 - Upload Malware
T1137.004 - Outlook Home Page
T1204.001 - Malicious Link

MITREへのリンク →

Windshift

Score: 4.57

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

APT29

Score: 8.66

Matched TTPs:

T1566.002 - Spearphishing Link
T1583.006 - Web Services
T1621 - Multi-Factor Authentication Request Generation
T1204.001 - Malicious Link

MITREへのリンク →

TA2541

Score: 9.94

Matched TTPs:

T1566.002 - Spearphishing Link
T1608.001 - Upload Malware
T1583.006 - Web Services
T1204.001 - Malicious Link
T1027.015 - Compression

MITREへのリンク →

Patchwork

Score: 7.03

Matched TTPs:

T1566.002 - Spearphishing Link
T1598.003 - Spearphishing Link
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

APT42

Score: 3.42

Matched TTPs:

T1566.002 - Spearphishing Link
T1608.001 - Upload Malware

MITREへのリンク →

Scattered Spider

Score: 6.30

Matched TTPs:

T1598.003 - Spearphishing Link
T1621 - Multi-Factor Authentication Request Generation

MITREへのリンク →

APT28

Score: 7.60

Matched TTPs:

T1598.003 - Spearphishing Link
T1583.006 - Web Services
T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

Moonstone Sleet

Score: 4.43

Matched TTPs:

T1598.003 - Spearphishing Link
T1608.001 - Upload Malware

MITREへのリンク →

CURIUM

Score: 4.22

Matched TTPs:

T1598.003 - Spearphishing Link
T1189 - Drive-by Compromise

MITREへのリンク →

Dragonfly

Score: 4.22

Matched TTPs:

T1598.003 - Spearphishing Link
T1189 - Drive-by Compromise

MITREへのリンク →

Gamaredon Group

Score: 8.50

Matched TTPs:

T1608.001 - Upload Malware
T1583.006 - Web Services
T1204.001 - Malicious Link
T1027.015 - Compression

MITREへのリンク →

Threat Group-3390

Score: 6.89

Matched TTPs:

T1608.001 - Upload Malware
T1189 - Drive-by Compromise
T1027.015 - Compression

MITREへのリンク →

HAFNIUM

Score: 5.63

Matched TTPs:

T1584.005 - Botnet
T1583.006 - Web Services

MITREへのリンク →

Axiom

Score: 5.39

Matched TTPs:

T1584.005 - Botnet
T1189 - Drive-by Compromise

MITREへのリンク →

Volt Typhoon

Score: 3.62

Matched TTPs:

T1584.005 - Botnet

MITREへのリンク →

APT12

Score: 4.54

Matched TTPs:

T1568.003 - DNS Calculation

MITREへのリンク →

Medusa Group

Score: 6.55

Matched TTPs:

T1583.006 - Web Services
T1218.014 - MMC

MITREへのリンク →

LAPSUS$

Score: 3.84

Matched TTPs:

T1621 - Multi-Factor Authentication Request Generation

MITREへのリンク →

APT38

Score: 3.13

Matched TTPs:

T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

Daggerfly

Score: 3.13

Matched TTPs:

T1189 - Drive-by Compromise
T1204.001 - Malicious Link

MITREへのリンク →

Equation

Score: 4.13

Matched TTPs:

T1564.005 - Hidden File System

MITREへのリンク →

Strider

Score: 4.13

Matched TTPs:

T1564.005 - Hidden File System

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.79

Matched TTPs:

T1204.001 - Malicious Link
T1583.006 - Web Services
T1608.001 - Upload Malware
T1598.003 - Spearphishing Link
T1176.001 - Browser Extensions
T1059.007 - JavaScript
T1566.002 - Spearphishing Link

MITREへのリンク →

APT32

Score: 0.67

Matched TTPs:

T1204.001 - Malicious Link
T1583.006 - Web Services
T1608.001 - Upload Malware
T1598.003 - Spearphishing Link
T1189 - Drive-by Compromise
T1059.007 - JavaScript
T1566.002 - Spearphishing Link

MITREへのリンク →

Mustard Tempest

Score: 0.62

Matched TTPs:

T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1608.001 - Upload Malware
T1583.008 - Malvertising
T1189 - Drive-by Compromise

MITREへのリンク →

Contagious Interview

Score: 0.62

Matched TTPs:

T1204.004 - Malicious Copy and Paste
T1204.001 - Malicious Link
T1583.006 - Web Services
T1608.001 - Upload Malware
T1059.007 - JavaScript

MITREへのリンク →

Sandworm Team

Score: 0.59

Matched TTPs:

T1584.005 - Botnet
T1204.001 - Malicious Link
T1608.001 - Upload Malware
T1598.003 - Spearphishing Link
T1566.002 - Spearphishing Link

MITREへのリンク →

Mustang Panda

Score: 0.59

Matched TTPs:

T1204.001 - Malicious Link
T1583.006 - Web Services
T1608.001 - Upload Malware
T1598.003 - Spearphishing Link
T1059.007 - JavaScript
T1566.002 - Spearphishing Link

MITREへのリンク →

Earth Lusca

Score: 0.59

Matched TTPs:

T1566.002 - Spearphishing Link
T1204.001 - Malicious Link
T1583.006 - Web Services
T1608.001 - Upload Malware
T1059.007 - JavaScript
T1189 - Drive-by Compromise

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る