← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Attack Signals Possible Return of Genesis Market, Abuses Node.js, and EV Code Signing
WHITE ghitansilviu@gmail.com 2023-11-22 Modified: 2023-12-22
28
IOCs
MEDIUM VOLUME
malwareendpointsresearchphishingarticlesnewsreportscyber threatslearngenesis markettrend microgoogle colabev codetrend visionot securitymanaged xdralliancevision onestopprotectattackaprilsectorhybridsmallcarrierscodedatelu0botpossiblestealcvidarbewarelumma stealerfindindonesiadisease vectorreturnsigningcompromisefiles detectionurls
Indicators of Compromise (7 / 28 total)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://91.212.166.16:443 — 2023-11-22
URL https://complete-s.monster/upd.php — 2023-11-22
URL https://sito-company.com/launcher/auth?login= — 2023-11-22
URL http://230927151335115.mxb.ewk48.shop/f/fvgs30927001.msi — 2023-11-22
URL http://91.103.252.74:80 — 2023-11-22
URL https://fast-difficult.monster/api7.php?name=microsoft_barcode_control_16.0_download — 2023-11-22
URL https://ps1-local.com/obfs3ip2.bs64 — 2023-11-22
References (2)
↗ https://www.trendmicro.com/en_us/research/23/k/attack-signals-possible-return-of-genesis-market.html ↗ https://www.trendmicro.com/content/dam/trendmicro/global/en/research/23/k/attack-signals-possible-return-of-genesis-market/iocs-attack-signals-possible-return-of-genesis-market.txt