Attacks on industrial control systems using ShadowPad

shadowpad

Researchers uncovered an active ShadowPad backdoor infection on industrial control systems (ICS) in Pakistan. These infected machines includes engineering hardware systems related to automation systems Infected machines includes engineering computers used in building automation systems.

Indicators of Compromise

abuoluowang.comSOCRadar2023-01-26

houwags.defineyourid.siteSOCRadar2023-01-26

grandfoodtony.comSOCRadar2023-01-26

stat.8788912.comSOCRadar2023-01-26

help.ffyl-bet.comSOCRadar2023-01-26

static.daytodayup.comSOCRadar2023-01-26

www.tiger266.comSOCRadar2023-01-26

live.musicweb.xyzSOCRadar2023-01-26

help.mkdjgame.comSOCRadar2023-01-26

yd.full-subscription.comSOCRadar2023-01-26

zk.full-subscription.comSOCRadar2023-01-26

storage.ondriev.tkSOCRadar2023-01-26

www.ffyl-bet.comSOCRadar2023-01-26

api.onedriev.tkSOCRadar2023-01-26

obo.videocenter.orgSOCRadar2023-01-26

cdn.1685810.comSOCRadar2023-01-26

cachedownload.goldenrose88.comSOCRadar2023-01-26

order.cargobussiness.siteSOCRadar2023-01-26

backup.microsupdate.comSOCRadar2023-01-26

api.gpk-demo.comSOCRadar2023-01-26

mirrors.centos.8788912.comSOCRadar2023-01-26

cs.full-subscription.comSOCRadar2023-01-26

static.1685810.comSOCRadar2023-01-26

vblocalhost.comSOCRadar2023-01-26

help.tiger266.comSOCRadar2023-01-26

closed.theworkpc.comSOCRadar2023-01-26

time.daytimegamers.comSOCRadar2023-01-26

documents.kankuedu.orgSOCRadar2023-01-26

tech.obj.servicesSOCRadar2023-01-26

www.machinetimeer.comSOCRadar2023-01-26

www.animal777.comSOCRadar2023-01-26

cdn2.twmicrosoft.comSOCRadar2023-01-26

api.geming8888.comSOCRadar2023-01-26

new.mkdjgame.comSOCRadar2023-01-26

themerecord.comSOCRadar2023-01-26

rec.micosoft.gaSOCRadar2023-01-26

static.gpk-demo.comSOCRadar2023-01-26

APT Groups4

Earth LuscaChina

TAG-22RedHotelFishmonger

AxiomChina

Bronze OliveAxiomWicked PandaAPT 22Group 72Wicked SpiderBronze ExportWinnti Group

Wet PandaChina

RedChimeraRed Chimera

Tonto TeamChina

Karma PandaHartBeatEarth AkhlutTAG-74Tonto TeamBronze HuntleyCactusPeteHeartBeatLoneRanger

Campaign Guidance

Remediation, mitigation, notes, history and related intelligence

Reports & References2

[object Object][object Object]

Observed Countries2

AF (52)

PK (350)