2022-05-03 (TUESDAY) - CONTACT FORMS CAMPAIGN --> BUMBLEBEE --> COBALT STRIKE

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

REFERENCE:

• https://twitter.com/Unit42_Intel/status/1521831026024239107

ASSOCIATED FILES:

• 2022-05-03-IOCs-for-Contact-Forms-Bumblebee-and-Cobalt-Strike.txt.zip   1.9 kB   (1,851 bytes)
• 2022-05-03-Contact-Forms-Bumblebee-infection-with-Cobalt-Strike.pcap.zip   20.4 MB   (20,365,326 bytes)
• 2022-05-03-Contact-Forms-Bumblebee-malware-and-artifacts.zip   5.9 MB   (5,903,768 bytes)
• 2022-05-03-example-of-googleapis-and-bunadist.com-pages.zip   2.5 MB   (2,482,390 bytes)

 

Click here to return to the main page.