action.properties[.]companyDomain
Reported by 1 independent source · first reported by Sekoia.io · last reported
Last reported 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Booking.com Phishing Campaign Targeting Hotels and Customers“…imestamp, host.name, user.name, process.pid, process.executable, dll.path, dll.hash.sha256, action.properties.SignatureStatus, action.properties[.]Company, action.properties.Description”
Indicators reported together
named in the same reports- exploit[.]inin 1 report
- rule[.]inin 1 report
- process[.]pidin 1 report
- d4845669f7f56c6c4eb82147a1f82615in 1 report
- 9bab404584f6a0d9…132fd145dd32in 1 report
- 799e73863806df2964d80d12ce4e61eain 1 report
- headkickscountry[.]comin 1 report
- activatecapagm[.]comin 1 report
- homelycareinc[.]comin 1 report
- byliljedahl[.]comin 1 report
- jamerimprovementsllc[.]comin 1 report
- seedsuccesspath[.]comin 1 report
- zenavuurwerkofficial[.]comin 1 report
- brownsugarcheesecakebar[.]comin 1 report
- hareandhosta[.]comin 1 report
- customvanityco[.]comin 1 report
- ctrlcapaserc[.]comin 1 report
- bknqsercise[.]comin 1 report
- bkngssercise[.]comin 1 report
- bkngpropadm[.]comin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.