Super Cookies, Web Analytics Behind Malicious Profiling
ID: c5ccb577-6372-51e8-830e-5b08ff5fb69a
STIX ID: report--c5ccb577-6372-51e8-830e-5b08ff5fb69a
Feed Name: Security Ledger
Threat Score
FireEye detected a sophisticated watering-hole campaign that combined compromised legitimate websites with a WITCHCOVEN tracking script and Evercookie supercookies to profile and persistently track visitors—focusing on individuals tied to international diplomacy, Ukraine’s security services, Russian entities and the energy sector—allowing attackers to identify high-value targets for subsequent tailored exploits or spearphishing; FireEye believes the activity aligns with nation-state intelligence collection.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.