IOCs for phishing campaign using BitM pages
Source AlienVault OTX General
0
Description
This intelligence report focuses on a phishing campaign that utilizes Browser-in-the-Middle (BitM) pages. The campaign likely involves sophisticated tactics to intercept and manipulate browser traffic, potentially allowing attackers to harvest credentials or inject malicious content. While specific details are not provided, the use of BitM techniques suggests a high level of technical sophistication and a targeted approach to compromising user data. The report appears to include Indicators of Compromise (IOCs) related to this campaign, which could be crucial for detecting and mitigating the threat.
Indicators of compromise
Domains 191
- 2022-05-15-iocs-for-deadbolt-ransomware.md
- 2025-03-04-group-likely-impersonating-bianlian.md
- 2025-03-14-testing-cve-2025-24813.md
- 2025-04-17-ingressnightmare-scans-and-testing.md
- 2fgithub.com
- ananmajsna.com
- anmanianer412.com
- antibot-meta.com
- antibotverify.com
- apicaptcha-meta.com
URLs 1
- https://api.githubcopilot.com
IP addresses 5
- 123.181.24.36
- 138.112.25.25
- 162.245.238.224
- 36.75.75.75
- 71.162.181.51
Hashes 14
Community reviews
Loading reviews…