50 lines
2.6 KiB
XML
50 lines
2.6 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<ioc xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" id="59550bab-3ce0-48c3-ba55-06b28e96ca05" last-modified="2017-06-29T00:00:00" xmlns="http://schemas.mandiant.com/2010/ioc">
|
|
<short_description>Event #107</short_description>
|
|
<description>Reckless Redux: Senior Mexican Legislators and Politicians Targeted with NSO Spyware</description>
|
|
<keywords />
|
|
<authored_by>citizenlab</authored_by>
|
|
<authored_date>2017-06-29T00:00:00</authored_date>
|
|
<links />
|
|
<definition>
|
|
<Indicator operator="OR" id="59550bab-3ce0-48c3-ba55-06b28e96ca05">
|
|
<IndicatorItem id="smsmensaje.mx" condition="is">
|
|
<Context document="Network" search="Network/DNS" type="mir" />
|
|
<Content type="string"></Content>
|
|
</IndicatorItem>
|
|
<IndicatorItem id="http://bit.ly/29F2psM" condition="is">
|
|
<Context document="UrlHistoryItem" search="UrlHistoryItem/URL" type="mir" />
|
|
<Content type="string"></Content>
|
|
</IndicatorItem>
|
|
<IndicatorItem id="https://smsmensaje.mx/8306090s/" condition="is">
|
|
<Context document="UrlHistoryItem" search="UrlHistoryItem/URL" type="mir" />
|
|
<Content type="string"></Content>
|
|
</IndicatorItem>
|
|
<IndicatorItem id="http://bit.ly/1WONumj" condition="is">
|
|
<Context document="UrlHistoryItem" search="UrlHistoryItem/URL" type="mir" />
|
|
<Content type="string"></Content>
|
|
</IndicatorItem>
|
|
<IndicatorItem id="https://smsmensaje.mx/4995075s/" condition="is">
|
|
<Context document="UrlHistoryItem" search="UrlHistoryItem/URL" type="mir" />
|
|
<Content type="string"></Content>
|
|
</IndicatorItem>
|
|
<IndicatorItem id="http://bit.ly/1WRYHm8" condition="is">
|
|
<Context document="UrlHistoryItem" search="UrlHistoryItem/URL" type="mir" />
|
|
<Content type="string"></Content>
|
|
</IndicatorItem>
|
|
<IndicatorItem id="https://smsmensaje.mx/1351276s/" condition="is">
|
|
<Context document="UrlHistoryItem" search="UrlHistoryItem/URL" type="mir" />
|
|
<Content type="string"></Content>
|
|
</IndicatorItem>
|
|
<IndicatorItem id="http://bit.ly/1UUsVi6" condition="is">
|
|
<Context document="UrlHistoryItem" search="UrlHistoryItem/URL" type="mir" />
|
|
<Content type="string"></Content>
|
|
</IndicatorItem>
|
|
<IndicatorItem id="https://smsmensaje.mx/9993247s/" condition="is">
|
|
<Context document="UrlHistoryItem" search="UrlHistoryItem/URL" type="mir" />
|
|
<Content type="string"></Content>
|
|
</IndicatorItem>
|
|
</Indicator>
|
|
</definition>
|
|
</ioc>
|