FIN7: Silent Push unearths 4000+ phishing and shell domains
Essential information
- Published
- 11/07/2024 11:51
- Modified
- 11/07/2024 12:06
- Tags
- 2024-07-11 anunak carbanak eugenloader gracewire phishing spoofing
- Related entities
- 94 observables, 1 intrusion sets (apt), 6 techniques (mitre), 4 malware, 9 others
Description
Silent Push threat analysts have uncovered an extensive series of campaigns linked to the FIN7 cybercrime group, including several hundred active phishing, spoofing, shell and malware delivery domains and IPs targeting various organizations. The campaigns utilize over 4000 domains and subdomains, with nearly half active in the past week. Prominent global brands like Louvre Museum, Meta, Reuters, Microsoft, and others have been targeted. The group employs tactics like spearphishing, malware distribution, and renting infrastructure from bulletproof hosting providers.