PULSE NAME
How Cyber Propaganda Influenced Politics in 2016
WHITE Sofacy AlienVault 2017-03-30 Modified: 2017-07-24
67
IOCs
HIGH VOLUME
A collection of domains registered by Pawn Storm/Sofacy/APT28/Fancy Bear to target organisations
Indicators of Compromise (67)
All domain hostname YARA
TYPEINDICATORDESCRIPTIONCREATED
domain account-aljazeera.net 2017-03-30
domain actblues.com 2017-03-30
domain anadolu-ajansi.com 2017-03-30
domain dansa.bg 2017-03-30
domain fkit-mil.dk 2017-03-30
domain fortele.ro 2017-03-30
domain login-osce.org 2017-03-30
domain mail-aljazeera.net 2017-03-30
domain mail-gov.me 2017-03-30
domain mail-hurriyet.com 2017-03-30
domain mail-navy.ro 2017-03-30
domain mail-pims.org 2017-03-30
domain mail-skupstina.me 2017-03-30
domain mailpho.com 2017-03-30
domain mobile-sanoma.net 2017-03-30
domain posta-hurriyet.com 2017-03-30
domain privacy-yahoo.com 2017-03-30
domain sset-aljazeera.com 2017-03-30
domain sset-aljazeera.net 2017-03-30
domain ssset-aljazeera.net 2017-03-30
domain support-cdu.de 2017-03-30
domain tas-cass.org 2017-03-30
domain webmail-cdu.de 2017-03-30
domain webmail-hurriyet.com 2017-03-30
domain webmail-mfa.am 2017-03-30
domain webmail-mil.dk 2017-03-30
domain webmail-mil.gr 2017-03-30
domain webmail-saic.com 2017-03-30
hostname e-post.byegm.web.tr 2017-03-30
hostname e-posta.tbmm.qov.web.tr 2017-03-30
hostname email.mfa.qov.gs 2017-03-30
hostname eposta.basbakanlik.qov.web.tr 2017-03-30
hostname inside.wada-arna.org 2017-03-30
hostname link.candybober.info 2017-03-30
hostname mail.academl.com 2017-03-30
hostname mail.anadoluajansi.web.tr 2017-03-30
hostname mail.armf.bg.message-id8665213.tk 2017-03-30
hostname mail.arnf.bg 2017-03-30
hostname mail.bostondynamlcs.com 2017-03-30
hostname mail.byegm.web.tr 2017-03-30
hostname mail.fach.rnil.cl 2017-03-30
hostname mail.g0v.me 2017-03-30
hostname mail.hm.qov.hu 2017-03-30
hostname mail.kuwaitarmy.gov-kw.com 2017-03-30
hostname mail.mod.qov.af 2017-03-30
hostname mail.mod.qov.es 2017-03-30
hostname mail.moda.qov.sa.com 2017-03-30
hostname mail.mofa.g0v.qa 2017-03-30
hostname mail.rnil.am 2017-03-30
hostname mail.rsaf.qov.sa.com 2017-03-30
hostname mail.university-tartu.info 2017-03-30
hostname mail.wada-awa.org 2017-03-30
hostname mod.qov.al 2017-03-30
hostname myaccount.google.com-changepasswordmyaccount-idx8jxcn4ufdmncudd.gq 2017-03-30
hostname myaccount.google.com-securitysettingpage.gq 2017-03-30
hostname poczta.mon-gov.pl 2017-03-30
hostname poczta.mon.q0v.pl 2017-03-30
hostname sftp.onderzoekraad.nl 2017-03-30
hostname vpn.onderzoekraad.nl 2017-03-30
hostname web.mailmil.lv 2017-03-30
hostname webmail.exerclto.pt 2017-03-30
hostname webmail.mfa.qov.ae 2017-03-30
hostname webmail.mofa.qov.ae 2017-03-30
hostname webmail.westinqhousenuclear.com 2017-03-30
hostname www.mailmil.ae 2017-03-30
YARA c284ccf479ac77b3c41b6e9a3ee005232c9055b4 2017-07-24
YARA 390e1109e04dbcd4a47ae508ad5beb2b9fea1c33 2017-07-24