StrongPityMalware
According to Mitre, StrongPity is an information stealing malware used by PROMETHIUM.From MISP Galaxy
Last reported 4 months ago, by Sekoia.io1 report
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
SilentSelfie: Major Campaign Against Kurdish Websites“Cyber attacks against the Kurdish minority aiming to collect intelligence are common, often attributed to the StrongPity intrusion set in open sources.”
Indicators in its reports
named in the reports above- obfuscator[.]ioin 1 report
- ronahi[.]netin 1 report
- ronahi[.]videoin 1 report
- lekolin[.]orgin 1 report
- ciwanensoresger[.]comin 1 report
- hawarnews[.]comin 1 report
- hxxps://rojnews[.]news/ku/wp-content/mobile.htmlin 1 report
- rojnews[.]newsin 1 report
- hxxps://targetplatform[.]net/mobile.htmlin 1 report
- targetplatform[.]netin 1 report
- webmail.onlinearuba[.]netin 1 report
- 23.95.14[.]63in 1 report
- hxxp://170.75.161[.]102/asd.jsin 1 report
- 170.75.161[.]102in 1 report
- 24.246.223[.]228in 1 report
- orkesfm[.]comin 1 report
- yra-ufm[.]comin 1 report
- zindi24[.]comin 1 report
- star-fm[.]netin 1 report
- ypjrojava[.]netin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.