Skip to main content
CampaignPublished Updated

IOCs for phishing campaign using BitM pages

Source AlienVault OTX General

0

Description

This intelligence report focuses on a phishing campaign that utilizes Browser-in-the-Middle (BitM) pages. The campaign likely involves sophisticated tactics to intercept and manipulate browser traffic, potentially allowing attackers to harvest credentials or inject malicious content. While specific details are not provided, the use of BitM techniques suggests a high level of technical sophistication and a targeted approach to compromising user data. The report appears to include Indicators of Compromise (IOCs) related to this campaign, which could be crucial for detecting and mitigating the threat.

Indicators of compromise

Domains 191

  • 2022-05-15-iocs-for-deadbolt-ransomware.md
  • 2025-03-04-group-likely-impersonating-bianlian.md
  • 2025-03-14-testing-cve-2025-24813.md
  • 2025-04-17-ingressnightmare-scans-and-testing.md
  • 2fgithub.com
  • ananmajsna.com
  • anmanianer412.com
  • antibot-meta.com
  • antibotverify.com
  • apicaptcha-meta.com

URLs 1

  • https://api.githubcopilot.com

IP addresses 5

  • 123.181.24.36
  • 138.112.25.25
  • 162.245.238.224
  • 36.75.75.75
  • 71.162.181.51

Hashes 14

  • bd6fa5badad704b9d7b9852d0ce0c2162de7a52f
  • f65891a5bc3c044d46fdae7dcbfb95756f17ffe6
  • 2b11edab52c706fc1da0216b069c81c670bff0dacf579f4df5446a88f9b96d90
  • 448bfe39b6103b8374868bd1532ca2f15bf745833f2b4fef291a2d941b71f5f4
  • 52346ecdf234263f0a160a1d59dfd68544fb261b3a40e29f8f2743954a4f97b7
  • 5ed9804462c179b080b7b3fda49f782582dab5f464c0bfccc8e008c031eeee9e
  • 85fc04af6cd1e35ca37d9d093c9c1f018ff70b29861a7bf071aac9c0c5220af2
  • 908d3293db2bcd2f939400bea7380eeafbfb41b05ce56e4f9734263f6e4ca3f4
  • b077150928a2ba3900d927f2f8487fb78e1435a2dcccb12be923f2f6bff61f11
  • c922ef32c4ab94f8b870c62883f3e41755ec705db76ec4efb0d343458f1e28c7

Community reviews

Loading reviews…