Export from MISP Threat Report Reckless Redux: Senior Mexican Legislators and Politicians Targeted with NSO Spyware (MISP Event #107) Threat Report Reckless Redux: Senior Mexican Legislators and Politicians Targeted with NSO Spyware 107 2017-06-29T00:00:00+00:00 2017-06-29T10:18:44+00:00 Closed Network activity Network activity: smsmensaje.mx (MISP Attribute #16345) Malware Artifacts Domain Watchlist Network activity: smsmensaje.mx (MISP Attribute #16345) smsmensaje.mx High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: http://bit.ly/29F2psM (MISP Attribute #16337) Malware Artifacts URL Watchlist Network activity: http://bit.ly/29F2psM (MISP Attribute #16337) http://bit.ly/29F2psM High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: https://smsmensaje.mx/8306090s/ (MISP Attribute #16338) Malware Artifacts URL Watchlist Network activity: https://smsmensaje.mx/8306090s/ (MISP Attribute #16338) https://smsmensaje.mx/8306090s/ High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: http://bit.ly/1WONumj (MISP Attribute #16339) Malware Artifacts URL Watchlist Network activity: http://bit.ly/1WONumj (MISP Attribute #16339) http://bit.ly/1WONumj High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: https://smsmensaje.mx/4995075s/ (MISP Attribute #16340) Malware Artifacts URL Watchlist Network activity: https://smsmensaje.mx/4995075s/ (MISP Attribute #16340) https://smsmensaje.mx/4995075s/ High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: http://bit.ly/1WRYHm8 (MISP Attribute #16341) Malware Artifacts URL Watchlist Network activity: http://bit.ly/1WRYHm8 (MISP Attribute #16341) http://bit.ly/1WRYHm8 High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: https://smsmensaje.mx/1351276s/ (MISP Attribute #16342) Malware Artifacts URL Watchlist Network activity: https://smsmensaje.mx/1351276s/ (MISP Attribute #16342) https://smsmensaje.mx/1351276s/ High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: http://bit.ly/1UUsVi6 (MISP Attribute #16343) Malware Artifacts URL Watchlist Network activity: http://bit.ly/1UUsVi6 (MISP Attribute #16343) http://bit.ly/1UUsVi6 High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: https://smsmensaje.mx/9993247s/ (MISP Attribute #16344) Malware Artifacts URL Watchlist Network activity: https://smsmensaje.mx/9993247s/ (MISP Attribute #16344) https://smsmensaje.mx/9993247s/ High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Event Threat Level: Medium MISP Tag: SOURCE:CITIZENLAB MISP Tag: PUBLISHED MISP Tag: TLP:WHITE MISP Tag: TARGET:MEXICO citizenlab ../../../descendant-or-self::node()