hxxps://webhook[.]siteURL
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 2 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Attack Behaviors“…sed and commands issued remained the same, including the use of PowerShell to download files from the same online location (i.e., hxxps://webhook[.]site), illustrated in Figure 4, and deploying the SimpleHelp RMM tool.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2023-48788
Thanks — we review every report.