← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Leveraging 16shop Phishing Kit for Vast Exploitation
WHITE cryptocti 2023-09-05 Modified: 2023-10-05
31
IOCs
MEDIUM VOLUME
Trend Vision One provides a comprehensive guide to the best ways to protect your business from cyber-attacks, threats and other threats in the modern world, as well as the latest 5G network and cloud-native apps.
phishingmalwareendpointscyber crimearticlesnewsreportscyber threatslearnappletrend microindonesiainterpolcash appjapancloud securityalliancepaypalhybridstopleverageprotectsmallattackaugustagentteslaserviceaprilphoenixcybercrimetechfindemailbusiness emailcompromiseresearchspamave marianegastealsecurityresponseunderstandwarzoneautoitmalspamagent teslatrojanpowershellfrenchytrojanspy
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Frenchy Agent Tesla Negasteal TrojanSpy Ave Maria
Indicators of Compromise (31)
All domain hostname FileHash-SHA1
TYPEINDICATORDESCRIPTIONCREATED
domain 16digit.shop — 2023-09-05
domain 16shop.club — 2023-09-05
domain 16shop.co — 2023-09-05
domain 16shop.online — 2023-09-05
domain 16shop.us — 2023-09-05
domain 16shop.vip — 2023-09-05
hostname appleidnotice.apphelpa.cc — 2023-09-05
domain 5g-att.co — 2023-09-05
domain 5g-tmobile.com — 2023-09-05
domain 5g-verizou.com — 2023-09-05
domain admin-office-mail-server-ssl0.management — 2023-09-05
domain cell-mobile.host — 2023-09-05
domain mails-officesslappssecure-serversportal-execs.management — 2023-09-05
domain mobile-celldata.online — 2023-09-05
domain network-sprint.biz — 2023-09-05
domain office-mails-appsslz-workmail-management.work — 2023-09-05
domain office-xlsx-appspts-management-worksmailxls-cs.rest — 2023-09-05
domain reply-netsuite-mails.management — 2023-09-05
domain reply-tmobile.com — 2023-09-05
domain reply-workplace-secure-protection-management-office.one — 2023-09-05
domain replys-mail-netsuite-com.management — 2023-09-05
domain servermail-reply-office-works-secure-protecty-inbound-netsuite.one — 2023-09-05
domain sprint-mobile.net — 2023-09-05
domain system-mail-protection-outlook.management — 2023-09-05
domain systerm-proctection-outlook.management — 2023-09-05
domain t-mobile4g-us.com — 2023-09-05
domain verizon-private-wireless.com — 2023-09-05
domain verizone4g-device.com — 2023-09-05
domain wireles-communication.com — 2023-09-05
FileHash-SHA1 224f6e0c21145534ec2bab670bcb1b690c08a26d — 2023-09-05
FileHash-SHA1 bc077b31c61d61d5d077b68b7f0b110efe85d138 — 2023-09-05
References (3)
↗ https://www.trendmicro.com/en_us/research/23/i/revisiting-16shop-phishing-kit-trend-interpol-partnership.html ↗ https://www.trendmicro.com/content/dam/trendmicro/global/en/research/21/j/analyzing-email-services-abused-for-business-email-compromise/IOCs-analyzing-email-services-abused-for-BEC.txt ↗ https://www.trendmicro.com/en_us/research/19/j/autoit-compiled-negasteal-agent-tesla-ave-maria-delivered-via-malspam.html