be3effcb9069ac6d66256c8246fde33e55980403SHA-1 hash
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 4 years ago
What the reports say
2 reports, newest first · the exact sentence from each-
Switching side jobs“If a user clicked on the link, they would receive a malicious Office document “0210_4367220121562.doc” (SHA1: be3effcb9069ac6d66256c8246fde33e55980403) and then would be redirected to the phishing website hxxps://xn--keynvigatorkey-yp8g.com/ktt/cmd/logon0210_4367220121562.doc.”
-
Prometheus TDS“be3effcb9069ac6d66256c8246fde33e55980403”
Indicators reported together
named in the same reports- hxxps://designestylelab[.]com/css/in 1 report
- designestylelab[.]comin 1 report
- hxxps://gvenlayer[.]com/track/in 1 report
- gvenlayer[.]comin 1 report
- hxxps://xn--keyvigatrs-key-7oc4531jsva[.]com/ktt/cmd/logonin 1 report
- xn--keyvigatrs-key-7oc4531jsva[.]comin 1 report
- xn--kys-nvigatorky-zp8g5mna[.]comin 1 report
- xn--kynavigatos-ky-pwc6541jna[.]comin 1 report
- navlgator-kcy[.]comin 1 report
- xn--kyavigator-ky-jjc7914ima[.]comin 1 report
- xn--ky-vigatorkey-kjc9383i4ka[.]comin 1 report
- xn--key-vigatrs-key-wuc9688j1wa[.]comin 1 report
- vigatorkey[.]comin 1 report
- rskey[.]comin 1 report
- xn--key-vigatrskey-8oc4531jsva[.]comin 1 report
- hxxp://www.swingsidebilbao[.]com/wp-content/plugins/contact-form-7/includes/block-editor/carl.phpin 1 report
- www.swingsidebilbao[.]comin 1 report
- hxxps://xn--keynvigatorkey-yp8g[.]com/ktt/cmd/logon0210_4367220121562.docin 1 report
- xn--keynvigatorkey-yp8g[.]comin 1 report
- 17693bca881ec9bc…64704c048b9din 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.