dns.studiocloud[.]xyzDomain
Reported by 2 independent sources · first reported by CISA advisories · last reported
Last reported 16 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails“…hat program starts a process named DiagTrack.exe, the same name as a legitimate Windows program, which sends encrypted traffic to dns.studiocloud[.]xyz.”
-
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data“DiagTrack.exe then establishes encrypted communications over the HTTP protocol with the domain dns.studiocloud[.]xyz, which the FBI attributes to Integrity Tech.”
Indicators reported together
named in the same reports- natcloudservice[.]comin 1 report
- 2.3.20[.]2in 1 report
- 2.3.24[.]1in 1 report
- 2.3.20[.]3in 1 report
- 2.3.24[.]3in 1 report
- 2.3.28[.]1in 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2019-11510, CVE-2014-6278, CVE-2015-3306, CVE-2015-5477, CVE-2016-3081, CVE-2021-22205, CVE-2021-3199, CVE-2023-22894
Thanks — we review every report.