摩诃草团伙利用公用平台分发C&C配置攻击活动揭露

概述

近期，奇安信威胁情报中心红雨滴团队利用公开情报发现一个摩诃草团伙的XLSM诱饵文档样本，经过分析发现其载荷主要通过 Github 和 Feed43获取加密的 C3癬??^a;?筛2018-12-17T06:50:14yusufk1185.29.11.592019-01-15T08:03:17str1ngstr164.132.75.222019-03-01T05:28:04z00min193.22.98.172019-05-27T05:47:11alexboycott91.92.136.2392019-06-24T11:14:16imrankhan71391.92.136.2392019-06-24T12:05:21imranikhan17185.116.210.82019-07-18T10:35:43chrisyoks185.161.210.82019-07-18T12:10:48johnhenery12139.28.38.2312019-08-07T10:58:56petersonmike139.28.38.2362019-08-08T09:06:03shaikmalik22

参考资料

1. https://securelist.com/the-dropping-elephant-actor/75328/