2024-04-15 (MONDAY): CONTACT FORMS CAMPAIGN PUSHES SSLOAD MALWARE AS EARLY AS THURSDAY 2024-04-11

NOTES:

• Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website.

REFERENCES:

• https://www.linkedin.com/posts/unit42_contactforms-ssload-wirshark-activity-7185786751922192384-JPBX
• https://twitter.com/Unit42_Intel/status/1780021135813337366

ASSOCIATED FILES:

• 2024-04-15-IOC-for-Contact-Forms-campaign-SSLoad-activity.txt.zip   2.1 kB   (2,140 bytes)
• 2024-04-15-SSLoad-infection-traffic.pcap.zip   248 kB   (247,528 bytes)
• 2024-04-15-SSLoad-malware-and-artifacts.zip   2.4 MB   (2,436,750 bytes)

 

Click here to return to the main page.