webfaset[.]comDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 5 years ago
What the reports say
1 report, newest first · the exact sentence from each-
GrelosGTM group abuses Google Tag Manager to attack e-commerce websites“… Tag Manager script (Figure 2) contains malicious inject, which loads the next stage script from the attacker’s website by URL hXXs://webfaset[.]com/str.css.”
Indicators reported together
named in the same reports- fountm[.]onlinein 1 report
- jqwereid[.]onlinein 1 report
- bulder[.]onlinein 1 report
- gstatcs[.]comin 1 report
- hxxps://www.googletagmanager[.]com/gtm.js?id=GTM-5SF293Jin 1 report
Copy these 5 indicators · defanged
Thanks — we review every report.