Switching side jobs
ID: aa9150ec-bf84-5e5a-ba7b-e8e76a7ff6cc
STIX ID: report--aa9150ec-bf84-5e5a-ba7b-e8e76a7ff6cc
Feed Name: Group-IB Blog
Threat Score
This report documents ATMZOW, a cybercriminal group operating JavaScript payment sniffers and related phishing campaigns: it analyzes GTM-based and obfuscated JS delivery, shows links between ATMZOW phishing domains and payload hosting (same registration email), and ties the phishing redirects to Hancitor distribution via Prometheus TDS, providing multiple IOCs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.