ctrlINT What the industry said about every indicator, with the quote

167.148.41[.]96IP address

Reported by 1 independent source · first reported by Huntress · last reported

Last reported 2 days ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “Five minutes later, from the same Interserver address (167.148.41[.]96), they created a second rule named d that marked all email from the CPA's address as read and moved it to the Conversation History folder, effectively hiding the responses from the victim.”

    HuntressVendor
    M365 Token Spray and Replay Campaign Compromises Business Email Accounts

Indicators reported together

named in the same reports
Copy these 11 indicators · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with 167.148.41[.]96 here?
No account needed. We do not store your IP address.