Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE2 IOCs
NightEagle Deploys GhostContainer Backdoor on Microsoft Exchange Servers in Russian Attacks
Threat Actors
Malware Families
Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Indicators of Compromise2
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2020-0688 c2exploitintel-blog | Medium | 54 | Sep 16, 26 |
| CVE | CVE-2019-0708 aptespionageexploit | Medium | 50 | Jul 28, 26 |
IOC Relationship Graph
IOC Relationship Graph2 total IOCs
CVE