ID RST:1DCC6487-2159-38D6-8973-F390E66E71F3
Type rst
Reporter RST Threat Feed
Modified 2020-12-18T00:00:00
Description
Found octango[.]net/cg/suntrust.login.ssl/e6deb196faa2d14bb076ac880ebcec2f/confirm.php?cmd=login_submit&id=9ef031c898495151406534d6b8d648b29ef031c898495151406534d6b8d648b2&session=9ef031c898495151406534d6b8d648b29ef031c898495151406534d6b8d648b2 in RST Threat Feed with score 62 .
First seen: 2020-12-18T03:00:00, Last seen: 2020-12-18T03:00:00.
IOC tags: phishing .
https://rstcloud.net/
{"id": "RST:1DCC6487-2159-38D6-8973-F390E66E71F3", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: octango.net/cg/suntrust.login.ssl/e6deb196faa2d14bb076ac880ebcec2f/confirm.php?cmd=login_submit&id=9ef031c898495151406534d6b8d648b29ef031c898495151406534d6b8d648b2&session=9ef031c898495151406534d6b8d648b29ef031c898495151406534d6b8d648b2", "description": "Found **octango[.]net/cg/suntrust.login.ssl/e6deb196faa2d14bb076ac880ebcec2f/confirm.php?cmd=login_submit&id=9ef031c898495151406534d6b8d648b29ef031c898495151406534d6b8d648b2&session=9ef031c898495151406534d6b8d648b29ef031c898495151406534d6b8d648b2** in [RST Threat Feed](https://rstcloud.net/profeed) with score **62**.\n First seen: 2020-12-18T03:00:00, Last seen: 2020-12-18T03:00:00.\n IOC tags: **phishing**.\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2020-12-18T00:00:00", "modified": "2020-12-18T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "type": "rst", "lastseen": "2020-12-18T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "url", "ip": [], "domain": ["octango.net"], "url": ["octango.net/cg/suntrust.login.ssl/e6deb196faa2d14bb076ac880ebcec2f/confirm.php?cmd=login_submit&id=9ef031c898495151406534d6b8d648b29ef031c898495151406534d6b8d648b2&session=9ef031c898495151406534d6b8d648b29ef031c898495151406534d6b8d648b2"], "iocScore": {"ioc_frequency": 1.0, "ioc_src": 74.99, "ioc_tags": 0.83, "ioc_total": 62.0}, "tags": ["phishing"], "fp": {"alarm": "false", "descr": ""}, "whois": {}, "geodata": {}, "asn": {}, "threat": []}
{}