github.githubassets[.]netDomain
Reported by 1 independent source · first reported by Trend Micro Research · last reported
Last reported 8 months ago
What the reports say
1 report, newest first · the exact sentence from each-
PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups“The threat actor executed an MSHTA command connecting to github.githubassets[.]net to launch PeckBirdy on a compromised Internet Information Services (IIS) server.”
Indicators reported together
named in the same reports- 47.238.219[.]111in 1 report
- center.myrnicrosoft[.]comin 1 report
- mkdmcdn[.]comin 1 report
- 162cc325ab7b6e70…52130c56903fin 1 report
- oss-cdn[.]comin 1 report
- bbd2b9b87f968ed8…e30711e8365bin 1 report
- 47.238.184[.]9in 1 report
Copy these 7 indicators · defanged
Also named with it: CVE-2020-16040
Thanks — we review every report.