Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE3 IOCs
Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs
Threat Actors
Malware Families
Diamond Model
Adversary(2)
Infrastructure(1)
Capability(4)
Victim
Indicators of Compromise
Indicators of Compromise3
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 5956f9afb3ba610c38b2cfda88dd15be98783963769a12020c93ce05e749b3c3 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| SHA256 | f048400c23add8c75abe189393d33c873c02c74eeaf43d47b950c8d643763b35 file-hashintel-blogmalware | High | 85 | Aug 25, 26 |
| Domain | instance-g01s1n-relay.screenconnect.com intel-blogmalwarenetwork | High | 58 | Oct 9, 26 |
IOC Relationship Graph
IOC Relationship Graph3 total IOCs
SHA256Domain