17 lines
753 B
Markdown
17 lines
753 B
Markdown
|
## Dark Basin Indicators of Compromise
|
||
|
|
|
||
|
|
This list of IOCs is being jointly released by Citizen Lab and NortonLifeLock, further to reports released on June 9, 2020.
|
||
|
|
|
||
|
|
Citizen Lab Report: [Dark Basin: Uncovering a Massive Hack-For-Hire Operation](https://citizenlab.ca/2020/06/dark-basin-uncovering-a-massive-hack-for-hire-operation/)
|
||
|
|
|
||
|
|
NortonLifeLock Report: [Mercenary.Amanda](https://www.nortonlifelock.com/blogs/security-response/mercenary-amanda-professional-hackers-hire)
|
||
|
|
|
||
|
|
Note: _NortonLifeLock tracks Dark Basin as Mercenary.Amanda_
|
||
|
|
|
||
|
|
Files included in this directory:
|
||
|
|
* openioc.ioc : IOCs in OpenIOC format
|
||
|
|
* stix.xml : IOCs in STIX XML format
|
||
|
|
* iocs.csv : IOCs in csv format
|
||
|
|
* misp.json : IOCs in MISP format
|
||
|
|
* snort.rules: IOCs as a Snort ruleset.
|