90b87d8b4dda273ef64853a9997bba0844f0bc02071ae5101d1be2693be1b861SHA-256 hash
Reported by 1 independent source · first reported by CERT Polska · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
Inside a multi stage toll fraud operation targeting Poland“One unchanged file, SHA-256 90b87d8b4dda273ef64853a9997bba0844f0bc02071ae5101d1be2693be1b861, appeared in 55 new advertisements across 20 packages and 39 identified profiles, in addition to one earlier record.”
Indicators reported together
named in the same reports- 7299f7de6acf366f…2ee816c5d284in 1 report
- api.bcvsri[.]linkin 1 report
- api.sdbnxm[.]linkin 1 report
- api.trixbn[.]linkin 1 report
- 8.219.222[.]81in 1 report
- api.fdghsn[.]linkin 1 report
- 47.245.84[.]227in 1 report
- api.fgsbns[.]linkin 1 report
- api.ghdnbv[.]linkin 1 report
- 43.106.56[.]154in 1 report
- api.hsbdbv[.]linkin 1 report
- 47.84.193[.]174in 1 report
- 47.84.57[.]5in 1 report
- api.ksbxnc[.]linkin 1 report
- 47.84.66[.]120in 1 report
- api.yandeb[.]linkin 1 report
- api.uhsbxh[.]linkin 1 report
- api.evabunt[.]linkin 1 report
- api.piaagt[.]clickin 1 report
- api.fuzwek[.]clickin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.