CloudedMalware
RansomwareFrom MISP Galaxy
Last reported 3 years ago, by Group-IB1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1110Brute Force
“However, even in this scenario, it is possible to perform a brute-force attack to find existing keys.”
- T1110.001Password Guessing
“This presents an opportunity for attackers to engage in password guessing, as users tend to change the password to the one that is easy to remember, as well as duplicate passwords that are already used for personal accounts.”
What the reports say
1 report, newest first · the exact sentence from each-
Clouded Judgment: how mismanaged cloud infrastructure can expose users to cyber risks“Clouded Judgment: how mismanaged cloud infrastructure can expose users to cyber risks”
Indicators in its reports
named in the reports above- sgp1.vultrobjects[.]comin 1 report
- ams1.vultrobjects[.]comin 1 report
- hxxps://fuzz.atlassian[.]net/login.jspin 1 report
- rapiddns[.]ioin 1 report
- omnisint[.]ioin 1 report
- hxxps://www.zendesk[.]com/app/help-center-closed/in 1 report
- hxxps://fuzz.proofhub[.]com/api/v4/authenticate/companyin 1 report
- fuzz.proofhub[.]comin 1 report
- exo[.]ioin 1 report
- hxxps://sos-ch-dk-2.exo[.]io/in 1 report
- sos-ch-dk-2.exo[.]ioin 1 report
- hxxps://sos-bg-sof-1.exe[.]io/in 1 report
- sos-bg-sof-1.exe[.]ioin 1 report
- hxxps://sos-de-muc-1.exo[.]io/in 1 report
- sos-de-muc-1.exo[.]ioin 1 report
- hxxps://sos-de-fra-1.exo[.]io/in 1 report
- sos-de-fra-1.exo[.]ioin 1 report
- hxxps://sos-at-vie-1.exo[.]io/in 1 report
- sos-at-vie-1.exo[.]ioin 1 report
- hxxps://sos-ch-gva-2.exo[.]io/in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.