Winos 4.0 Spreads via Impersonation of Official Email to Target Users in Taiwan
· Published 05/03/2025 16:04 · Modified 05/03/2025 16:39
Essential information
Description
An advanced malware framework known as Winos4.0 was used to target companies in Taiwan in January 2025.
Related entities
Vulnerabilities, IOCs, intrusion sets, MITRE techniques and other entities referenced in this report.
Observables (55)
206.238.221.6043.137.42.254206.238.221.240124.156.100.172206.238.221.244wrwyrdujtw114117-1336065333.cos.ap-guangzhou.myqcloud.comtwzfw.vipsjujfde-1329400280.cos.ap-guangzhou.myqcloud.comhtrfe4-1329400280.cos.ap-guangzhou.myqcloud.comrgghrt1140120-1336065333.cos.ap-guangzhou.myqcloud.comhei-1333855056.cos.ap-guangzhou.myqcloud.comfuued5-1329400280.cos.ap-guangzhou.myqcloud.comffggssa-1329400280.cos.ap-guangzhou.myqcloud.comfdsjg114-1336065333.cos.ap-guangzhou.myqcloud.comchakan202501-1329400280.cos.ap-guangzhou.myqcloud.com0611-1333855056.cos.ap-guangzhou.myqcloud.com0107-1333855056.cos.ap-guangzhou.myqcloud.com9010.360sdgg.com9009.360sdgg.com9007.360sdgg.com9005.360sdgg.com9006.360sdgg.com9003.360sdgg.com9002.360sdgg.com9001.360sdgg.com1234.360sdgg.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