image.isu[.]pubDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 6 years ago
What the reports say
1 report, newest first · the exact sentence from each-
A Shortcut to Compromise: Cobalt Gang phishing campaign“Now we can see, that this function is used to download and open the decoy image from hxxps://image.isu[.]pub/130729032316-97fbf070197fbde8e88397077c468ab6/jpg/page_1.jpg.”
Indicators reported together
named in the same reports- swift-customer[.]comin 1 report
- e85a079f9e48216e…139677ec3c9fin 1 report
- 76a5a477927a4b8c…fb62afa41a98in 1 report
- valorleads[.]comin 1 report
- 1fdc309f8ff96ebb…7a91165e0b5fin 1 report
- hxxps://image.isu[.]pub/130729032316-97fbf070197fbde8e88397077c468ab6/jpg/page_1.jpgin 1 report
- hxxp://safestaticfirefox[.]com/uacuxuiaeoerkaryixjuin 1 report
- safestaticfirefox[.]comin 1 report
Copy these 8 indicators · defanged
Thanks — we review every report.