New attacks by UltraRank group
ID: c8b3e650-dbea-5eaf-9dbf-08d1f4098c28
STIX ID: report--c8b3e650-dbea-5eaf-9dbf-08d1f4098c28
Feed Name: Group-IB Blog
Threat Score
Group-IB details a new UltraRank campaign using Radix-obfuscated SnifLite JavaScript sniffers injected into eCommerce sites to collect payment card data and exfiltrate it to attacker-controlled domains (notably googletagsmanager.co/info and s-panel.su). The report includes code analysis, infrastructure linkage (IP 45.141.84.239, Media Land LLC bulletproof hosting, SSL certificate), observed IOCs, and mitigation recommendations for banks, payment systems, and merchants.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.