Trusted Design

Ursnif (aka Gozi aka Gozi ISFB) phishing emails

概要

Ursnif (aka Gozi aka Gozi ISFB) Malware campaign. Similar to the activity observed since May 2017 - the interesting aspects of this specific campaign are: • Use of existing e-mail threads within compromised e-mail accounts to spread their malware • Use of Ursnif (aka Gozi aka Gozi ISFB) Malware - Botnet: 200X • Use of Fluxxy (aka Dark Cloud) Fast Flux Hosting In this specific case, we observed Ursnif Botnet 2007 downloading Ursnif Botnet 1200 (DGA).

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Hijacked Existing E-mail Thread - Ursnif (aka Gozi aka Gozi ISFB) Malware Phishing (score: 0.90)
• Ursnif/Dreambot Trojan Campaign (score: 0.70)
• SPAM Attempt (score: 0.63)
• Phishing emails with URLs pointing to malware (score: 0.62)
• Mr.Xpl0it (score: 0.62)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る