Pulse Detail — Threat Intelligence

PULSE NAME

PSA: Ongoing Webex malvertising campaign drops BatLoader

WHITE AlienVault 2023-09-15 Modified: 2023-10-15

IOCs

LOW VOLUME

A new malvertising campaign is targeting corporate users who are downloading the popular web conferencing software Webex.

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

MALWARE FAMILIES

Batloader

Indicators of Compromise (6)

All FileHash-SHA256 domain

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA256	2727a418f31e8c0841f8c3e79455067798a1c11c2b83b5c74d2de4fb3476b654	—	2023-09-15
FileHash-SHA256	7a1245584c0a12186aa7228c75a319ca7f57e7b0db55c1bd9b8d7f9b397bfac8	—	2023-09-15
domain	fugas.site	—	2023-09-15
domain	monoo3at.com	—	2023-09-15
domain	updatecorporatenetworks.ru	—	2023-09-15
domain	webexadvertisingoffer.com	—	2023-09-15

References (1)