LurkMalware
Last reported 11 days ago, by Dark Reading4 reports
ATT&CK techniques
1 technique · each with the sentence it comes from- T1684Social Engineering
“…e regular personnel trainings, which should include not only training sessions on issues related to targeted attacks, phishing and social engineering, but also “combat training”: banks should simulate targeted attacks or phishing emails from time to time.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
4 reports, newest first · the exact sentence from each-
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday“Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday”
-
Cobalt Renaissance“This complicated attack vector is very similar to the tactics used in targeted attacks by professional state-sponsored attackers and the Lurk group.”
-
Secrets of Cobalt“The basic principles of targeted attacks on financial institutions have not changed since 2013 when the Anunak, Corkow, Buhtrap, and Lurk groups began conducting the first attacks on Russian banks.”
-
Targeted attacks on banks“…ow, which conducted targeted attacks, whereas in 2015 there were three (Anunak, Corkow and Andromeda), and in 2016 four of them (Buhtrap, Lurk, Cobalt and MoneyTaker).”
Indicators in its reports
named in the reports above- kaspersky-corporate[.]comin 1 report
- 172.217.22[.]110in 1 report
- 194.58.112[.]174in 1 report
- 62.76.40[.]207in 1 report
- mail.kaspersky-corporate[.]comin 1 report
- hxxps://kaspersky-security[.]com/Complaint.docin 1 report
- kaspersky-security[.]comin 1 report
- fa354151a3fc6d0dce69e8eeaa8cd197in 1 report
- 91.230.121[.]86in 1 report
- 7b55c7ae346efb428aaf63d25ca0fcc7in 1 report
- foxsecit[.]comin 1 report
- 185.86.79[.]156in 1 report
- ibm-notice[.]comin 1 report
- spamhuas[.]comin 1 report
- hoteltoren[.]comin 1 report
- dns-verifon[.]comin 1 report
- spam-huas[.]comin 1 report
- 37.1.212[.]129in 1 report
- 37.1.211[.]165in 1 report
- 162.243.38[.]176in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.