2023-08-03 - GOOGLE AD --> FAKE TURBOTAX SITE --> DANABOT

REFERENCE:

• https://twitter.com/Unit42_Intel/status/1687510041270657024

NOTES:

• Zip files are password-protected.  If you don't know the password, see the "about" page of this website.

 

ASSOCIATED FILES:

• 2023-08-03-malicious-ad-to-Danabot-IOCs.txt.zip   1.7 kB   (1,746 bytes)
• 2023-08-03-malicious-ad-to-Danabot-traffic.pcap.zip   96.9 MB   (96,919,042 bytes)
• 2023-08-03-malicious-ad-to-Danabot-malware-and-artifacts.zip   126.1 MB   (126,059,179 bytes)

 

Click here to return to the main page.