← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Spoofed Saudi Purchase Order Drops GuLoader
WHITE AlienVault 2022-05-23 Modified: 2022-05-23
8
IOCs
LOW VOLUME
A phishing e-mail that appears to come from an oil company in Saudi Arabia is the latest example of a tactic used by cyber-thieves to target victims of the GuLoader malware.
agent teslalokibotphishingsocial engineeringguloader
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Lokibot Agent Tesla
Indicators of Compromise (1 / 8 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain email
TYPEINDICATORDESCRIPTIONCREATED
URL http://bounceclick.live/VVB/COrg_RYGGqN229.binb — 2022-05-23
References (1)
↗ https://www.fortinet.com/blog/threat-research/spoofed-saudi-purchase-order-drops-guloader