ctrlINT What the industry said about every indicator, with the quote

offices-update[.]comDomain

Reported by 1 independent source · first reported by Group-IB · last reported

Last reported 3 years ago

What the reports say

1 report, newest first · the exact sentence from each
  1. “In the sample obtained in 2020, we have found traces of communication with the C2 server offices-update[.]com, which was also mentioned by IZ:SOC in connection with another Bisonal malware sample.”

    Group-IBVendorC2
    Nice Try Tonto Team

Indicators reported together

named in the same reports
Copy these 17 indicators · defanged

Also named with it: CVE-2018-0802, CVE-2017-11882, CVE-2018-0798

Thanks — we review every report.

Report a wrong value
What is wrong with offices-update[.]com here?
No account needed. We do not store your IP address.