admin/APT_REPORT
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README.MD

Browse Source
This commit is contained in:
blackorbird
2019-04-23 15:01:34 +08:00
committed by GitHub
parent 0f40058a12
commit f27485bd6c
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
group123/README.MD
View File

@@ -2,7 +2,7 @@
## 20190423 ## 20190423
two related phishing operation: ### two related phishing operation:
Group123, APT attack impersonating Unification Ministry, spread malicious code to Google Drive Group123, APT attack impersonating Unification Ministry, spread malicious code to Google Drive
@@ -12,6 +12,7 @@ https://blog.alyac.co.kr/2268 (April 22 , 2019)
https://blog.alyac.co.kr/1767 (July 28, 2014) https://blog.alyac.co.kr/1767 (July 28, 2014)
IOC：
email_93682646.html email_93682646.html
88107e3c785d3d30e5f6fc191622a157 88107e3c785d3d30e5f6fc191622a157
memo.utr memo.utr
@@ -24,7 +25,7 @@ Lee Soo-hyun <loveshlee@unikorea.go.kr>
info: info:
http://155.138.236.240/sec[.]png?id= http://155.138.236.240/sec[.]png?id=
## phishing: ### phishing:
### input password and login it will redirect to unikorea.go.kr ### input password and login it will redirect to unikorea.go.kr
https://unikorea.go.kr/upload/editUpload/20190418/2019041814360535872.png https://unikorea.go.kr/upload/editUpload/20190418/2019041814360535872.png