Following Recent QQ Phishes
ID: aed9baf3-00dd-52c7-918c-8636b8b1969e
STIX ID: report--aed9baf3-00dd-52c7-918c-8636b8b1969e
Feed Name: Zscaler Security Research Blog
Threat Score
This report documents a credential-phishing campaign targeting qq.com users: newly-registered domains (e.g., aq.qq.com.cn-inddex.com, qq.com.cn.indexx-cn.com) host pages that visually mimic QQ, load legitimate QQ content but submit credentials to local phishing endpoints; WHOIS and hosting data tie the domains to recent Melbourne IT/Yahoo-hosted registrations and to addresses/emails associated with prior scams, and the report provides multiple IOCs (domains, IPs, paths).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.