Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE5 IOCs
Disruption Targets Major Chinese-Language Phishing Kits with Japanese Focus
Diamond Model
Adversary
Infrastructure(5)
Capability
Victim
Indicators of Compromise
Indicators of Compromise5
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://paidy.farradae.com/paidy/ubmissionsjp intel-blogmalwarenetwork | High | 58 | Oct 15, 26 |
| URL | https://lygyaou.com/9AioLNhtdi.kumamoto-city.jp intel-blognetworkurl | High | 58 | Oct 15, 26 |
| URL | https://ylhgkj.com/BCuXkTPfKZ.kumamoto-city.jp intel-blognetworkurl | High | 58 | Oct 15, 26 |
| URL | https://kenandy.shop/paidy/ubmisionsjp/ intel-blogmalwarenetwork | High | 58 | Oct 15, 26 |
| URL | https://new-app-haixing.com/1DWSd1DeDf.kumamoto-city.jp intel-blognetworkurl | High | 58 | Oct 15, 26 |
IOC Relationship Graph
IOC Relationship Graph5 total IOCs
URL