Overview 23 indicators
No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.
| domain | 11 | FINFISHER-domain.txt |
| ipv4 | 10 | FINFISHER.json |
| url | 2 | FINFISHER.json |
Principal sources 9 reports
Ranked by how many of this actor's indicators each report brought in.
- 8securelist.com/finspy-unseen-findings/104322
- 8otx.alienvault.com/pulse/6153383f0a31835f61921552
- 8citizenlab.ca/2015/10/mapping-finfishers-continuing-p…
- 3amnesty.org/en/latest/research/2020/09/german-made-…
- 3otx.alienvault.com/pulse/5f6e34fc8c150f8d8fb9c337
- 2app.any.run/tasks/a717ebe4-e74f-4b0a-8233-b13890686…
- 2twitter.com/billmarczak/status/511798673504620545
- 2securityaffairs.co/wordpress/8085/intelligence/finfisher-t…
Related groups 1
What the sources have in common — not a claim that these are the same actor. See the whole graph.
Timeline 23 indicators
Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.
No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.
-
securelist.com/finspy-unseen-findings/104322 · otx.alienvault.com/pulse/6153383f0a31835f61921552
45.86.163.138:443 -
securelist.com/finspy-unseen-findings/104322 · otx.alienvault.com/pulse/6153383f0a31835f61921552
108.61.190.183:443 109.235.67.175:443 185.141.24.204:443 185.25.51.104:443 213.252.247.105:443 45.86.136.138:443 79.143.87.216:443 -
app.any.run/tasks/a717ebe4-e74f-4b0a-8233-b13890686… · twitter.com/billmarczak/status/511798673504620545
184.82.101.234:443 184.82.101.234:53 -
amnesty.org/en/latest/research/2020/09/german-made-… · otx.alienvault.com/pulse/5f6e34fc8c150f8d8fb9c337
domain browserupdate.download url http://158.69.105.207 url http://172.241.27.171 -
citizenlab.ca/2015/10/mapping-finfishers-continuing-p…
google.wwwhost.biz info.dynamic-dns.net news-youm7.com pal2me.net pal4u.net shop8d.net workingulf.net wp.piedslibres.com -
securityaffairs.co/wordpress/8085/intelligence/finfisher-t… · community.rapid7.com/community/infosec/blog/2012/08/08/finfi…
ff-demo.blogdns.org tiger.gamma-international.de
Further reading 9
- amnesty.org/en/latest/research/2020/09/german-made-…
- otx.alienvault.com/pulse/6153383f0a31835f61921552
- community.rapid7.com/community/infosec/blog/2012/08/08/finfi…
- securelist.com/finspy-unseen-findings/104322
- citizenlab.ca/2015/10/mapping-finfishers-continuing-p…
- twitter.com/billmarczak/status/511798673504620545
- app.any.run/tasks/a717ebe4-e74f-4b0a-8233-b13890686…
- otx.alienvault.com/pulse/5f6e34fc8c150f8d8fb9c337
- securityaffairs.co/wordpress/8085/intelligence/finfisher-t…