Mirrors/APT_CyberCriminal_Campagin_Collections
6
0
Fork 0
mirror of https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections synced 2024-06-07 23:53:37 +00:00
Code Issues Projects Releases Wiki Activity

2017.11.06.ChessMaster_New_Strategy

Browse Source
This commit is contained in:
Ziv Chang 2017-11-07 16:38:55 +08:00
parent d947929cbc
commit 6a08261026
3 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
2017/2017.11.06.ChessMaster_New_Strategy/IOC.txt Normal file
View File

@ -0,0 +1,11 @@
Related hashes detected as BKDR_ANEL.ZKEI (SHA-256):
af1b2cd8580650d826f48ad824deef3749a7db6fde1c7e1dc115c6b0a7dfa0dd
Command-and-control server:
hxxp://62[.]75[.]197[.]131/page/?[random strings]
URLs related to the campaign
hxxp://89[.]18[.]27[.]159/img.db
hxxp://89[.]18[.]27[.]159:8080/lK0RS
hxxp://89[.]18[.]27[.]159/FA347FEiwq.jpg

BIN
2017/2017.11.06.ChessMaster_New_Strategy/chessmasters-new-strategy-evolving-tools-tactics.pdf Normal file
View File

Binary file not shown.

1
README.md
View File

@ -12,6 +12,7 @@ Please fire issue to me if any lost of APT/Malware events/campaigns.
* [targetedthreats](https://github.com/botherder/targetedthreats/wiki/Reports)
## 2017
* Nov 06 - [[Trend Micro] ChessMaster’s New Strategy: Evolving Tools and Tactics](http://blog.trendmicro.com/trendlabs-security-intelligence/chessmasters-new-strategy-evolving-tools-tactics/) | [Local](../../blob/master/2017/2017.11.06.ChessMaster_New_Strategy)
* Nov 02 - [[PwC] The KeyBoys are back in town](http://www.pwc.co.uk/issues/cyber-security-data-privacy/research/the-keyboys-are-back-in-town.html) | [Local](../../blob/master/2017/2017.11.02.KeyBoys_are_back)
* Oct 31 - [[Cybereason] Night of the Devil: Ransomware or wiper? A look into targeted attacks in Japan using MBR-ONI](https://www.cybereason.com/blog/night-of-the-devil-ransomware-or-wiper-a-look-into-targeted-attacks-in-japan) | [Local](../../blob/master/2017/2017.10.31.MBR-ONI.Japan)
* Oct 30 - [[Kaspersky] Gaza Cybergang – updated activity in 2017](https://securelist.com/gaza-cybergang-updated-2017-activity/82765/) | [Local](../../blob/master/2017/2017.10.30.Gaza_Cybergang)