← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Microsoft Teams phishing pushes DarkGate malware via group chats
WHITE CyberHunter_NL 2024-01-31 Modified: 2024-01-31
22
IOCs
MEDIUM VOLUME
New phishing attacks abuse Microsoft Teams group chat requests to push malicious attachments that install DarkGate malware payloads on victims' systems.
sha256 hashlicenseupdate octoberdarkgate exepostthursdayinfection fromteams chatseptembersome referencesdarkgate
Indicators of Compromise (4 / 22 total)
All CVE FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
domain 2022-05-15-iocs-for-deadbolt-ransomware.md — 2024-01-31
domain 2fgithub.com — 2024-01-31
domain hgfdytrywq.com — 2024-01-31
domain support.md — 2024-01-31
References (1)
↗ https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2023-10-12-IOCs-for-DarkGate-from-Teams-chat.txt