control[.]inDomain
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 16 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware“…e deployed Python scripts to steal sensitive data from the victim before ultimately dropping the ROOFDECK backdoor to gain full remote control[.]In this blog, ThreatLabz examines the inner workings of these tools and analyzes the multi-stage infection chain.”
Indicators reported together
named in the same reports- hashicorp-terraform[.]ioin 1 report
- hxxps://arusupport-region1-webhook[.]online/statics/cache/v11/abicfjejin 1 report
- arusupport-region1-webhook[.]onlinein 1 report
- campaign[.]inin 1 report
- 9d88b4494c7bc27b10358b68a899ad54in 1 report
- diagnose.hashicorp-terraform[.]ioin 1 report
- supportaru.serveftp[.]comin 1 report
- stage-fashion365.vercel[.]appin 1 report
Copy these 8 indicators · defanged
Thanks — we review every report.