PerSwaysionThreat actor
PerSwaysion is a threat actor known for conducting phishing campaigns targeting high-level executives. They have been active since at least August 2019 and are believed to be based in Vietnam. PerSwaysion has recently updated their techniques, using more direct phishing methods and leveraging Microsoft 365 to steal credentials.From MISP Galaxy
Last reported 6 years ago, by Group-IB1 report
Suspected originVietnamMISP Galaxy
ATT&CK techniques
1 technique · each with the sentence it comes from- T1565Data Manipulation
“…main phishing web application adopts reactive JavaScript framework Vue.js and promise-based HTTP client axios to implement on-page data manipulation, aligning with most modern web application user experience.”
What the reports say
1 report, newest first · the exact sentence from each-
PerSwaysion Campaign“PerSwaysion Campaign”
Indicators in its reports
named in the reports above- protonmail[.]comin 1 report
- e88a1b1823a36c944d71746cdefb5fdcin 1 report
- yourjavascript[.]comin 1 report
- paperbarkestate.co[.]zain 1 report
- cargillll[.]comin 1 report
- grupolren[.]comin 1 report
- buyatcheapstore[.]comin 1 report
- inbox[.]ltin 1 report
- as54rdxfzxs.appspot[.]comin 1 report
- asgh65tfsdxz.appspot[.]comin 1 report
- da032opzasz.appspot[.]comin 1 report
- dgyu536ds.appspot[.]comin 1 report
Copy these 12 indicators · defanged
Thanks — we review every report.