scams[.]inDomain
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 4 years ago
What the reports say
1 report, newest first · the exact sentence from each-
CUBA Ransomware Campaign Analysis“GoToAssist is a remote desktop support application with some legitimate usage, but also known for its use in tech support scams[.]In this incident, it was used to download a malicious DLL to the newly created user’s downloads directory (C:\Users\Mysql\Downloads\94-79.dll).”
Indicators reported together
named in the same reports- 0f385cc69a93abea…805bdfe468a3in 1 report
- 33352a38454cfc24…8ec45b4d3d0ein 1 report
- b495456a2239f3ba…a48746e8051fin 1 report
- 159.203.70[.]39in 1 report
- hxxp://208.76.253[.]84in 1 report
- 208.76.253[.]84in 1 report
- hxxp://108.170.31[.]115/add.dllin 1 report
- 108.170.31[.]115in 1 report
- 104.217.8[.]100in 1 report
- 193.23.244[.]244in 1 report
- 86.59.21[.]38in 1 report
- 199.58.81[.]140in 1 report
- 204.13.164[.]118in 1 report
- 194.109.206[.]212in 1 report
- 131.188.40[.]189in 1 report
- 154.35.175[.]225in 1 report
- 171.25.193[.]9in 1 report
- 128.31.0[.]34in 1 report
- 128.31.0[.]39in 1 report
- mvnetworking[.]comin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.