emeditorjp[.]comDomain
Reported by 1 independent source · first reported by Trend Micro Research · last reported
Last reported 9 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Watering Hole Attack Targets EmEditor Users with Information-Stealing Malware“…is modified such that once executed, it will spawn a PowerShell command to retrieve its first-stage code, which is located at a URL (EmEditorjp[.]com) crafted to make it look legitimate.”
Indicators reported together
named in the same reports- hxxps://emeditorgb[.]com/run/mg8heP0rin 1 report
- emeditorgb[.]comin 1 report
- hxxps://emeditorde[.]com/gate/start/2daef8cdin 1 report
- emeditorde[.]comin 1 report
- hxxps://cachingdrive[.]com/gate/init/2daef8cdin 1 report
- cachingdrive[.]comin 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.