216.73.217.22

Squid Werewolf

· Published 21/12/2025 12:11 · Modified 21/12/2025 12:11 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 12:11
Modified
21/12/2025 12:11
Updated at
21/12/2025 12:11
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
1 reports, 6 attack patterns (mitre), 1 countries, 6 indicators

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (1)

Attack patterns (MITRE) (6)

  • T1598 uses
    Phishing for Information
  • T1585 uses
    Establish Accounts
  • T1589 uses
    Gather Victim Identity Information
  • T1584 uses
    Compromise Infrastructure
  • T1566 uses
    Phishing
  • T1534 uses
    Internal Spearphishing

Countries (1)

  • Russian Federation targets

Indicators (6)

  • hwsrv-1253398.hostwindsdns.com indicates
  • 49a2ed08930ed20cbf859ca2fe3113e64f7a305c7a03cbda284fcceb781d053b indicates
  • https://hwsrv-1253398.hostwindsdns.com/307c77ab-f41f-4dd4-a478-2a71b9625f64/c/discountcode.php indicates
  • https://hwsrv-1253398.hostwindsdns.com/307c77ab-f41f-4dd4-a478-2a71b9625f64/c/shoppingcart.php indicates
  • 0601426a6da40ec9b47bab54e4ec149ba69ee58f787eea0e32d1001cab1abd04 indicates
  • 20dd93441c5e78b7adc7764c92719bed70ddb0676f707df7ea9f37d7969f4776 indicates