PULSE NAME
How Cyber Propaganda Influenced Politics in 2016
WHITE Sofacy AlienVault 2017-03-30 Modified: 2017-07-24
67
IOCs
HIGH VOLUME
A collection of domains registered by Pawn Storm/Sofacy/APT28/Fancy Bear to target organisations
Indicators of Compromise (37 / 67 total)
All domain hostname YARA
TYPEINDICATORDESCRIPTIONCREATED
hostname e-post.byegm.web.tr 2017-03-30
hostname e-posta.tbmm.qov.web.tr 2017-03-30
hostname email.mfa.qov.gs 2017-03-30
hostname eposta.basbakanlik.qov.web.tr 2017-03-30
hostname inside.wada-arna.org 2017-03-30
hostname link.candybober.info 2017-03-30
hostname mail.academl.com 2017-03-30
hostname mail.anadoluajansi.web.tr 2017-03-30
hostname mail.armf.bg.message-id8665213.tk 2017-03-30
hostname mail.arnf.bg 2017-03-30
hostname mail.bostondynamlcs.com 2017-03-30
hostname mail.byegm.web.tr 2017-03-30
hostname mail.fach.rnil.cl 2017-03-30
hostname mail.g0v.me 2017-03-30
hostname mail.hm.qov.hu 2017-03-30
hostname mail.kuwaitarmy.gov-kw.com 2017-03-30
hostname mail.mod.qov.af 2017-03-30
hostname mail.mod.qov.es 2017-03-30
hostname mail.moda.qov.sa.com 2017-03-30
hostname mail.mofa.g0v.qa 2017-03-30
hostname mail.rnil.am 2017-03-30
hostname mail.rsaf.qov.sa.com 2017-03-30
hostname mail.university-tartu.info 2017-03-30
hostname mail.wada-awa.org 2017-03-30
hostname mod.qov.al 2017-03-30
hostname myaccount.google.com-changepasswordmyaccount-idx8jxcn4ufdmncudd.gq 2017-03-30
hostname myaccount.google.com-securitysettingpage.gq 2017-03-30
hostname poczta.mon-gov.pl 2017-03-30
hostname poczta.mon.q0v.pl 2017-03-30
hostname sftp.onderzoekraad.nl 2017-03-30
hostname vpn.onderzoekraad.nl 2017-03-30
hostname web.mailmil.lv 2017-03-30
hostname webmail.exerclto.pt 2017-03-30
hostname webmail.mfa.qov.ae 2017-03-30
hostname webmail.mofa.qov.ae 2017-03-30
hostname webmail.westinqhousenuclear.com 2017-03-30
hostname www.mailmil.ae 2017-03-30