THREAT OPS › Threat News › Formula 1 Phishing Campaign & Kit Analysis
Formula 1 Phishing Campaign & Kit Analysis
<h1>Formula 1 Phishing Campaign & Kit Analysis</h1> <p>SOCRadar Threat Research Unit (STRU) has identified and analyzed a sophisticated, multi-stage phishing campaign that exploits the high-intensity demand for <strong>Formula 1 Grand Prix</strong> tickets. The attackers use highly convincing replicas of official ticketing platforms to deceive victims, tricking them into providing payment info
MITRE ATT&CK techniques
Indicators of compromise
- 144.31.3.209ipv4
- f1-tickets-sg.comdomain
- f1-ticket-es.comdomain
- f1-ticket-spain.comdomain
- ticket-f1-es.comdomain
- tickets-f1-es.comdomain
- tickets-f1-spain.comdomain
- booking-f1-spain.comdomain
- f1-tickets-spain.comdomain
- f1-tickets-es.comdomain
- f1-booking-spain.comdomain
- f1-booking-es.comdomain
- ticketsf1-madrid.comdomain
- mc.yandex.rudomain
Original source: https://socradar.io/blog/formula-1-phishing-campaign/