Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE21 IOCs
Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy Circles
Threat Actors
Diamond Model
Adversary(1)
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Indicators of Compromise21
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | heritiage.org indicatorintel-blognetwork | High | 58 | Oct 9, 26 |
| Domain | msfile.online intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| IP | 108.61.163.187 intel-blogmalwarenetwork | High | 58 | Oct 9, 26 |
| Domain | quickfly.online intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | cloudsyncpulse.com intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | sharehub.space intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | goshshare.online intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | heritiages.org indicatorintel-blognetwork | High | 58 | Oct 9, 26 |
| Domain | publicsharefile.cloud intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | onecloudfilesync.com intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | tw-koryu.org intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | winsync.cloud intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | smartsyncbox.com intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | mypublicshare.com intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | synchvault.co intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| SHA256 | b314a1499cd728ca3e54b7150661fd0c7d2279065fe3f570f0f66c395d744460 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| Domain | cirrushare.co intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | globalfileshareplatform.com intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | driftshare.co intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | fileswiftonline.cloud intel-blognetworkphishing | High | 58 | Oct 9, 26 |
| Domain | shinjirou.info intel-blognetworkphishing | High | 58 | Oct 9, 26 |
IOC Relationship Graph
IOC Relationship Graph21 total IOCs
DomainIPSHA256