2024-02-14 (WEDNESDAY): DANABOT INFECTION FROM ITALIAN LANGUAGE MALSPAM

NOTES:

• Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website.

REFERENCES:

• https://www.linkedin.com/posts/unit42_danabot-malspam-unit42threatintel-activity-7163648622029422592-wDSx
• https://twitter.com/Unit42_Intel/status/1757882997829730662

ASSOCIATED FILES:

• 2024-02-14-IOCs-from-Danabot-infection.txt.zip   1.5 kB   (1,512 bytes)
• 2024-02-14-Danabot-infection-traffic.pcap.zip   12.5 MB   (12,479,802 bytes)
• 2024-02-14-Danabot-malware-and-artifacts.zip   10.0 MB   (9,970,544 bytes)

 

Click here to return to the main page.