ctrlINT What the industry said about every indicator, with the quote

gov[.]brDomain

Reported by 3 independent sources · first reported by Elastic Security Labs · last reported

Last reported 1 month ago

What the reports say

3 reports, newest first · the exact sentence from each
  1. “… RECEITA FEDERAL DO BRASIL The archives contain several thousand documents with personnel and customer data, as well as all user date on gov[.]br with passwords.”

    ransomware.liveFeed
    emperador lists RECEITA FEDERAL DO BRASIL
  2. “…app tiles and nav links don’t point to a single server; they point to dozens of real Brazilian domains, the majority of them legitimate .gov[.]br government sites, each serving the attacker’s gambling pages under paths like /jogos and /nova.”

    Check Point ResearchVendor
    Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon
  3. “Government and public administration systems represent approximately 8% of identified victims across at least 5 countries (.gov.cn, .gov[.]br, .gov.bd, .gov.vn, .gov.in, .leg.br).”

    Elastic Security LabsVendor
    BADIIS to the Bone: New Insights to a Global SEO Poisoning Campaign

Indicators reported together

named in the same reports
Copy these 20 indicators · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with gov[.]br here?
No account needed. We do not store your IP address.