← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
CVE-2025-0411: Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks | Trend Micro (US)
WHITE ghitansilviu@gmail.com 2025-02-04 Modified: 2025-03-06
47
IOCs
MEDIUM VOLUME
El Navegador de Netskope, a Spanish internet operator, says he has "no idea" how to respond to the conexión between his team and the rival Netcom.
netskopeel navegadorsi deseaintuneexploits & vulnerabilitiesapt & targeted attacksendpointsresearcharticlesnewsreportstrend visioncve20240411cve20250411educatevision oneone threatthreat insightsvulnerabilitycyber espionagestate executiveserviceukrainetwitter
Indicators of Compromise (47)
All CVE FileHash-SHA256 domain URL hostname
TYPEINDICATORDESCRIPTIONCREATED
CVE CVE-2024-0411 — 2025-02-04
CVE CVE-2025-0411 — 2025-02-04
FileHash-SHA256 2e33c2010f95cbda8bf0817f1b5c69b51c860c536064182b67261f695f54e1d5 — 2025-02-04
FileHash-SHA256 7786501e3666c1a5071c9c5e5a019e2bc86a1f169d469cc4bfef2fe339aaf384 — 2025-02-04
FileHash-SHA256 84ab6c3e1f2dc98cf4d5b8b739237570416bb82e2edaf078e9868663553c5412 — 2025-02-04
FileHash-SHA256 888f68917f9250a0936fd66ea46b6c510d0f6a0ca351ee62774dd14268fe5420 — 2025-02-04
FileHash-SHA256 a059d671d950abee93ef78a170d58a3839c2a465914ab3bd5411e39c89ae55a2 — 2025-02-04
FileHash-SHA256 ba74ecae43adc78efaee227a0d7170829b9036e5e7f602cf38f32715efa51826 — 2025-02-04
domain rosoft.com — 2025-02-04
FileHash-SHA256 2e33c2010f95cbda8bf0817f1b5c69b51c860c536064182b67261f695f54e1d5 — 2025-02-04
FileHash-SHA256 54678013c8741db3340960e54ba93001c27619ead5cf5cc2eafd4c0fcf797ae6 — 2025-02-04
FileHash-SHA256 554d9ddd6fd1ccb15d7686c8badb8653323c71884c7f20efb19b56324ff34fc1 — 2025-02-04
FileHash-SHA256 5c7d582ba61ac95fb0d330ecc05feeb4853ac1de1f5a6fd12df6491dd0b7ea34 — 2025-02-04
FileHash-SHA256 62eb856a5f646c2883a3982f15c3eb877641f9e69783383ce8a73c688eccd543 — 2025-02-04
FileHash-SHA256 84ab6c3e1f2dc98cf4d5b8b739237570416bb82e2edaf078e9868663553c5412 — 2025-02-04
FileHash-SHA256 888f68917f9250a0936fd66ea46b6c510d0f6a0ca351ee62774dd14268fe5420 — 2025-02-04
FileHash-SHA256 8ee225bdd38cf6fd014a16beb9e33a0650147a9b7ea2104afe2f47c01bd1db0b — 2025-02-04
FileHash-SHA256 915b73a57aaf759fbd5352d79656e1b697545e6c9d953ab05aacf61ed4f6e397 — 2025-02-04
FileHash-SHA256 a059d671d950abee93ef78a170d58a3839c2a465914ab3bd5411e39c89ae55a2 — 2025-02-04
FileHash-SHA256 b3df042c5286fa91a4555e105038364bc66bfe7fdfe3769eb26b96e0ffe6096b — 2025-02-04
FileHash-SHA256 cd123c288f623878218be31125000441bb8c5447375af67bc3c1d27d16eb5f8c — 2025-02-04
FileHash-SHA256 d6d722ae73ddff1ad7c468feca882b159a2a6e267df8b219482b514cdab74c21 — 2025-02-04
FileHash-SHA256 fdfbdd42944c9e3b9697a8d8375e4e5cfd45c86941aa3f8f6dd0d08607b73144 — 2025-02-04
URL http://185.156.72.78/MyFolder/invoce.zip — 2025-02-04
URL http://185.156.72.78/MyFolder/pay.zip — 2025-02-04
URL http://alfacentarusmulticopter.ru/index.php — 2025-02-04
URL http://goodmastersportunicum.ru/load/svc.exe — 2025-02-04
URL http://johnfabiconinteraption.ru/index.php — 2025-02-04
URL http://lazaretmed.pw/index.php — 2025-02-04
URL http://netfilediscdownloadapplication.ru/file/download/6852365456384563846538458 — 2025-02-04
URL http://oncomnigos.online/index.php — 2025-02-04
URL http://southlander.ru/dklfhgjdfhgjd78khdgfjgh/akt.bat — 2025-02-04
URL http://storeagroculturnaya.ru/index.php — 2025-02-04
URL http://technoads.pw/index.php — 2025-02-04
URL http://unicalads.ru/index.php — 2025-02-04
domain alfacentarusmulticopter.ru — 2025-02-04
domain goodmastersportunicum.ru — 2025-02-04
domain johnfabiconinteraption.ru — 2025-02-04
domain lazaretmed.pw — 2025-02-04
domain netfilediscdownloadapplication.ru — 2025-02-04
domain oncomnigos.online — 2025-02-04
domain southlander.ru — 2025-02-04
domain storeagroculturnaya.ru — 2025-02-04
domain technoads.pw — 2025-02-04
domain ukr-netfilediscdownloadapplication.ru — 2025-02-04
domain unicalads.ru — 2025-02-04
hostname trojan.win32.downloader.bz — 2025-02-04
References (1)
↗ https://www.trendmicro.com/en_us/research/25/a/cve-2025-0411-ukrainian-organizations-targeted.html