Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure
ID: 58347759-5d7e-5e63-a458-268bd5d6078e
STIX ID: report--58347759-5d7e-5e63-a458-268bd5d6078e
Feed Name: Palo Alto Networks Unit 42
Threat Score
Unit 42 details CL-CRI-1171, a large-scale pay‑per‑install (PPI) operation that used OfferLoader delivered via YouTube and SEO‑poisoned pages to distribute numerous payloads—including Insomnia RAT, ARKTunnel, and Docro Hijacker—targeting gamers and corporate endpoints; the report includes technical analysis, over 10,000 loader samples, extensive IOCs (hashes, domains, URLs), and mitigation recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.