Trusted Design

Hijacked Existing E-mail Thread - Ursnif (aka Gozi aka Gozi ISFB) Malware Phishing

概要

Ursnif (aka Gozi aka Gozi ISFB) Malware campaign. Similar to the activity observed in May 2017, June 2017, August 2017, and September 2017 - the interesting aspects of this specific campaign are: • Use of existing e-mail threads within compromised e-mail accounts to spread their malware • Use of Ursnif (aka Gozi aka Gozi ISFB) Malware - Botnet: 200X • Use of Fluxxy (aka Dark Cloud) Fast Flux Hosting

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Ursnif (aka Gozi aka Gozi ISFB) phishing emails (score: 0.90)
• GozNym Malware (score: 0.63)
• Ursnif/Dreambot Trojan Campaign (score: 0.62)
• New Spear Phishing Campaign Pretends to be EFF (score: 0.61)
• TrendLabs: Spam Campaign Delivers Cross-platform Remote Access Trojan Adwind (score: 0.60)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る