ctrlINT What the industry said about every indicator, with the quote

mail.tsinghua[.]instituteDomain

Reported by 1 independent source · first reported by Group-IB · last reported

Last reported 3 years ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “A similar LNK file, student Data Base 8.pdf.lnk, launches mshta.exe and downloads and executes an HTA file located at hxxps://mail.tsinghua[.]institute/3206/1/25395/2/0/1/1863616521/3DIm0LGMztTur2KVczxFjB36rLfwnHf9DwWAo2oI/files-5b71f8ef/hta (the domain: mail.tsinghua.institute).”

    Group-IBVendor
    The distinctive rattle of APT SideWinder

Thanks — we review every report.

Report a wrong value
What is wrong with mail.tsinghua[.]institute here?
No account needed. We do not store your IP address.