🐾 - ☠ TA505 – sharespoint-en.com - Phishing domain 🎣

SID: 3315290Rev: 10 views
Sourcepawpatrules
CreatedJune 27, 2020
UpdatedJune 27, 2020
Classificationtrojan-activity
alert dns any any -> any any (msg:"🐾 - ☠ TA505 – sharespoint-en.com - Phishing domain 🎣"; flow:to_server, stateless; dns_query; content:"sharespoint-en.com"; nocase; reference:url,https://www.cert.ssi.gouv.fr/ioc/CERTFR-2020-IOC-004/; reference:url,https://malpedia.caad.fkie.fraunhofer.de/actor/ta505; metadata:created_at 2020_06_27, updated_at 2020_06_27; sid:3315290; rev:1; classtype:trojan-activity;)

References

urlhttps://www.cert.ssi.gouv.fr/ioc/CERTFR-2020-IOC-004/
urlhttps://malpedia.caad.fkie.fraunhofer.de/actor/ta505

Metadata

created at2020_06_27
updated at2020_06_27

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!