business.gogift[.]comDomain
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 7 months ago
What the reports say
1 report, newest first · the exact sentence from each-
How Threat Actors Abuse Remote Management Tools“During their operational setup, the actor purchased gift cards from business.gogift[.]com and downloaded the CertifyTheWeb tool to automate SSL/TLS certificate management.”
Indicators reported together
named in the same reports- lolrmm[.]ioin 1 report
- 209.160.115[.]150in 1 report
- 98.97.79[.]68in 1 report
- 105.113.63[.]173in 1 report
- 93.152.214[.]210in 1 report
- 79f25a73e056ecb8…d395453c9c48in 1 report
- 83a8c175cdab60d0…939873416adcin 1 report
- 42ef97c8260f9f28…19159bfe5ebein 1 report
- 429cbc557b1a9c8c…b386ccdb679ain 1 report
- db341aaa9cd902b1…a20404f1d90bin 1 report
- ca9ac952feaaa5cb…066703de6955in 1 report
- 22006710eaad12c4…83eed7f3e7dein 1 report
- ec2bdcd616d9dcfb…b5a9fc69e879in 1 report
- 1a0769b8445cc27e…b0fb2bdfe0efin 1 report
- 27c489d5239a3a25…3c602bd367f8in 1 report
- bc8b1b0c80512ba0…f42dac1baa6cin 1 report
- 6cc665057c4a4fe4…105e05378bccin 1 report
- ebc81a8f91d9b18c…b67666d8c3e1in 1 report
- f2c0c09f4871621c…6449b1eddfb3in 1 report
- b775f42c9d280b11…e2c98c986bddin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.