ctrlINT What the industry said about every indicator, with the quote

r2r2Malware

Last reported 9 days ago, by The Hacker News1 report

ATT&CK techniques

2 techniques · each with the sentence it comes from
  1. T1176.001Browser Extensions

    “The destination domains frequently host different scams, such as fake services, malicious browser extensions and more."”

    The Hacker NewsNews
  2. T1684Social Engineering

    “"Help TDS delivers tech support scams (TSSs) that direct users to call centers, where social engineering is used to convince them to install remote desktop tools," Infoblox said in a report shared with The Hacker News.”

    The Hacker NewsNews

Reports per month

last 12 months

October so far (hatched). Counted by report, not by story.

What the reports say

1 report, newest first · the exact sentence from each

  1. “The activity involved the compromise of vulnerable servers to deploy a malware named r2r2 and then leverage them to mine cryptocurrency.”

    The Hacker NewsNews
    Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

Indicators in its reports

named in the reports above
Copy this indicator · defanged

Thanks — we review every report.

Report a wrong match
What is wrong with r2r2 here?
No account needed. We do not store your IP address.