Eight-legged Phreaks: Silent Push DNS and content scans discover new Scattered Spider infrastructure [Monday, December 11, 2023]

Eight-legged Phreaks: Silent Push DNS and content scans discover new Scattered Spider infrastructure [Monday, December 11, 2023]
Report

Eight-legged Phreaks: Silent Push DNS and content scans discover new Scattered Spider infrastructure

Description :
Silent Push has observed an increase in the number of domains created by Scattered Spider targeting organizations in the financial, insurance, investment, retail, and entertainment sectors. The group is known for launching sophisticated social engineering attacks designed to obtain login credentials and MFA tokens from employees.

Published Created Modified
2023-12-11 16:05:10 2023-12-11 16:05:10 2023-12-11 16:16:11

Tags

Indicators

Domains :
  • freshworks-sso.net
  • telnyx-sso.com
  • victrasso.com
  • telesignsso.com
  • workatbbt.com
  • cashsso.com
  • graysso.com
  • connect-cox.com
  • fedsso.net
  • bbt-hr.com
  • ssopodium.com
  • freshworksso.com
  • victrasso.net
  • actlvecampaign.net
  • hubsso.net
  • asurionsso.com
  • ssotelnyx.com
  • grayscalesso.com
  • grayscale-sso.com
  • klaviyocorp.net
  • my-twilio.com
  • postmarksso.com
  • bbtplus.com
  • bbthour.com
  • activesso.comassurionsso.net
  • freshworks-sso.com
  • telnyxsso.com
  • 53help.org
  • gryscale-ox0d.com
  • workbbt.com
  • bbtvpn.com
  • trustsso.com
  • bbtemps.com
  • dashsso.com
  • att-networks.net
  • aitice-usa.com
  • podiumsso.com
  • bbt-work.com
  • intercomsso.net
  • att-my.com

External References

You can download the txt file containing the indicators by clicking on the button below:

About the author
Julien B.

Securitricks

Up-to-Date Cybersecurity Insights & Malware Reports

Securitricks

Great! You’ve successfully signed up.

Welcome back! You've successfully signed in.

You've successfully subscribed to Securitricks.

Success! Check your email for magic link to sign-in.

Success! Your billing info has been updated.

Your billing was not updated.