Overview 1,524 indicators
No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.
| domain | 1,523 | PEGASUS-domain.txt |
| url | 1 | PEGASUS.json |
Principal sources 31 reports
Ranked by how many of this actor's indicators each report brought in.
- 1,438twitter.com/AmnestyTech/status/1416810917216538629
- 1,438amnesty.org/en/latest/research/2021/07/forensic-met…
- 1,438github.com/AmnestyTech/investigations/blob/master/…
- 55amnesty.org/en/latest/research/2018/08/amnesty-inte…
- 35proofpoint.com/us/daily-ruleset-update-summary-20160825
- 29virustotal.com/gui/ip-address/161.8.149.21/relations
- 24citizenlab.org/2016/08/million-dollar-dissident-iphone…
- 19trendmicro.com/en_us/research/21/h/confucius-uses-pega…
Timeline 1,524 indicators
Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.
Showing the 300 most recent of 1,524. Complete: PEGASUS.json.
No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.
-
twitter.com/AmnestyTech/status/1416810917216538629 · amnesty.org/en/latest/research/2021/07/forensic-met… · github.com/AmnestyTech/investigations/blob/master/…
accountsecurities.org awizo.info holiday-sun.net loginverify.net newsportal24.online oneadjump.com sale-2019.com -
citizenlab.ca/2022/07/geckospy-pegasus-spyware-used-a… · otx.alienvault.com/pulse/62d56bfbcb851c6bfcfdaf4d
1place-togo.com accounts-unread.com sexxclip.com siamha.info stayallalone.com thtube.video -
virustotal.com/gui/ip-address/161.8.149.21/relations
allaboutwrightwood.com bingoblitzvippro.com brandttoyota.com brookviewpetgrooming.com casusbocekler.com cerfcube.com derinaydogan.com eliteautosaloninc.com garrigareptiles.com gherboshop.com grevejeunesmedecins.com henrietta-commerce.com judo-genlis.com kruseswiss.com lamyterie.com leshutchins.com loschanquetes.com macmaclaren.com masternicherights.com masterpolishformula.com matlauinlondon.com mywebbargains.com nettprofile.com northridgebest.com produitsjpcote.com recepzihni.com rotaryimports.com seacoastkaraoke.com sterlingpetcare.com -
twitter.com/AmnestyTech/status/1416810917216538629 · amnesty.org/en/latest/research/2021/07/forensic-met… · github.com/AmnestyTech/investigations/blob/master/… · citizenlab.ca/2022/04/catalangate-extensive-mercenary…
123tramites.com adsmetrics.co infoquiz.net nnews.co redirstats.com statsads.co statsupplier.com -
trendmicro.com/en_us/research/21/h/confucius-uses-pega… · otx.alienvault.com/pulse/611e21b71a08edbfb6061a06
api.priveetalk.com cnic-ferify.live cnic-update.com defencepk.email download.fbr.tax fbr-update.com fbr.news fbr.tax file-dnld.com funtifu.live ispr.email mailerservice.directory pakistanarmy.email parinari.xyz pemra.email pirnaram.xyz pmogovpk.email priveetalk.com support-team.tech -
twitter.com/AmnestyTech/status/1416810917216538629 · amnesty.org/en/latest/research/2021/07/forensic-met… · github.com/AmnestyTech/investigations/blob/master/… · citizenlab.ca/2022/04/peace-through-pegasus-jordanian… · otx.alienvault.com/pulse/624c56d3b71d3fc25f820e87
akhbar-almasdar.com akhbar-islamyah.com akhbarnew.com al-nusr.net al-taleanewsonline.net al7erak247.com al7eraknews.com alrainew.com arabia-islamion.com cozmo-store.net hona-alrabe3.com khilafah-islamic.com login-service.net mangoutlet.net mobiles-security.net rss-me.com talabatt.net unsubscribe-now.net -
citizenlab.ca/2022/04/peace-through-pegasus-jordanian… · otx.alienvault.com/pulse/624c56d3b71d3fc25f820e87
al-taleanews.net -
twitter.com/h2jazi/status/1490829405106569217 · virustotal.com/gui/ip-address/185.244.151.172/relations · virustotal.com/gui/ip-address/185.198.58.178/relations · virustotal.com/gui/file/8b5279e449004c98c8693363cf9a1d…
mijn-vgz-overzicht-nl.info travelcrimea.info -
twitter.com/blackorbird/status/1481548876918439936 · citizenlab.ca/2022/01/project-torogoz-extensive-hacki…
cominfo-urbano.com deportes24-7.com informados24h.cominfo-urbano.com mobile-analytics.netweb-cloud-services.com netweb-cloud-services.com solo-hoy.com -
twitter.com/AmnestyTech/status/1416810917216538629 · amnesty.org/en/latest/research/2021/07/forensic-met… · github.com/AmnestyTech/investigations/blob/master/…
1minto-start.com 24-7clinic.com 301-redirecting.com 365redirect.co 3driving.com 456h612i458g.com 7style.org 800health.net 911hig11carcay959454.com a-redirect.com a-resolver.com accomodation-tastes.net accountcanceled.com accountnotify.com accountsections.com activate-discount.com active-folders.com actorsshop.net actu24.online ad-generator.net ad-switcher.com add-client.com additional-costs.com addmyid.net addresstimeframe.com adeal4u.co adjustlocalsettings.net adscreator.net adsload.co advert-time.com advert-track.com agilityprocessing.net aircraftsxhibition.com akhbar-aliqtisad.com albumphotopro.biz alignmentdisabled.net alive2plunge.com allbeautifularts.com alldaycooking.co allergiesandcooking.com allfadiha.co allladiesloveme.com allthecolorsyoulike.com allthegamesyouneed.com allthemakeupyouneed.com allthesongsyoulike.com alluneed4home.net alpharythme.com android-core.org android-updates.net apiapple.com apigraphs.net apiwacdn.com appleleaveit.co applicationcreation.net appointments-online.com appsgratis.com.mx appsjuegos.com.mx ar-tweets.com arab-share.com around-theglobe.co arrowowner.com assembled-battery.com atlaslions.info auditorcast.com authenticangry.com authenticated-origin.com authlovebirth.com autodiscount.info autoredirect.net av-scanner.com avocadofight.com awardpractice.com axis-indication.net babies-bottles.com balancewreckpoint.com bankportal.net baramije.net bargainservice.online bdaynotes.com beanbounce.net beautifulhousesaroundme.com becomeiguana.com beethoventopsymphonies.com behindaquarium.com benjamin-taganga.info bestadventures4u.com bestcandyever.com bestday-sales.com bestfoods.co bestfriendneedshelp.com bestheadphones4u.com besthotelsaroundme.com bestperfumesnow.com bestpresents4all.net bestsalesaroundme.com bestsushiever.com better-deal.info betterapplesearch.com betterhandsblack.com bicyclerentalnow.com biggunsarefun.com bigseatsout.net billednorth.com birdbathmorning.com biscuit-taste.net bitanalysis.net bitfadepens.com bitforeat.net bl33pon6373.com black-bricks.net blackberry.org.mx blackwhitebags.com blindlydivision.com blockedsituation.net blogreseller.net boldconclusion.com booking-tables.com bottlehere.com boxes-mix.net boysrbabies.co br-hashtags.com br-travels.com brand-tech.net breakfastisgood.com brighttooth.net brownandblueeyes.com browser-update.online bubblesmoke.net bubblesweetcake.com buildingcarpet.com buildurlife.net buildyourdata.com bulk-theft.net bulksender.info bulktheft.com bullgame.net bunchi.club bundlestofear.com businesssupportme.com bussybeesallover.com bustimer.net butterdogchange.com buymanuel.co buypresent4me.net bytlo.com cablegirls.net calculatesymbols.com calendarsapp.com candlealbum.com carpetdignity.com carrefour-des-affaires.com cars-to-buy.com cartsafer.com cashandlife.com cashtowebmail.com casia-news.info catbrushcable.com catfoodstorage.net catsndogsproducts.com cdnupdateweb.com cdnwa.com celebrateyourdaynow.com cell-abonnes.com cell-mcel.info cellphone-inside.org cellphonesprices.com cellular-updates.com cellular-updates.online cellularupdates.info centersession.com changesstarted.net chatresponses.com cheapcardonline.com cheaphostingtoday.com cheapmotelz.net cheapsolutions4u.com cheaptransporting.net check-my-internetspeed.com checkboxcart.com checkboxfee.com chickenwaves.com chistedeldia.mx chocolateicecreamlovers.com chocollife.me chormnet3.com chubaka.org classic-furnitures.com classstylemap.com cleanmiddle.com clickrighthere.online clicktrack247.com clients-access.com clockmarkcoffee.com closefly.com cloudads.net cloudbiggest.com clubloading.net clubmovistar.com clubsforus.net coffecups.online coffee2go.org colorfulnotebooks.com colorsoflife.online columbus-parking.com · 1,059 more in this batch, in the JSON
Further reading 31
- otx.alienvault.com/pulse/62d56bfbcb851c6bfcfdaf4d
- github.com/AmnestyTech/investigations/blob/master/…
- citizenlab.ca/2022/01/project-torogoz-extensive-hacki…
- citizenlab.ca/2020/08/nothing-sacred-nso-sypware-in-t…
- citizenlab.ca/2018/10/the-kingdom-came-to-canada-how-…
- virustotal.com/gui/ip-address/185.198.58.178/relations
- amnesty.org/en/latest/research/2021/07/forensic-met…
- citizenlab.ca/2018/09/hide-and-seek-tracking-nso-grou…
- virustotal.com/gui/ip-address/161.8.149.21/relations
- twitter.com/VK_Intel/status/1017190191864434689
- citizenlab.ca/2020/12/the-great-ipwn-journalists-hack…
- citizenlab.org/2016/08/million-dollar-dissident-iphone…
- citizenlab.ca/2022/07/geckospy-pegasus-spyware-used-a…
- virustotal.com/gui/file/8b5279e449004c98c8693363cf9a1d…
- proofpoint.com/us/daily-ruleset-update-summary-20160825
- otx.alienvault.com/pulse/611e21b71a08edbfb6061a06
- citizenlab.ca/2022/04/catalangate-extensive-mercenary…
- amnesty.org/en/latest/research/2018/08/amnesty-inte…
- citizenlab.ca/2018/07/nso-spyware-targeting-amnesty-i…
- virustotal.com/gui/ip-address/185.244.151.172/relations
- trendmicro.com/en_us/research/21/h/confucius-uses-pega…
- twitter.com/AmnestyTech/status/1416810917216538629
- twitter.com/blackorbird/status/1481548876918439936
- citizenlab.ca/2022/04/peace-through-pegasus-jordanian…
- otx.alienvault.com/pulse/624c56d3b71d3fc25f820e87
- citizenlab.ca/2017/06/reckless-exploit-mexico-nso
- otx.alienvault.com/pulse/5d9f05596b5109e891f42a24
- citizenlab.ca/2018/11/mexican-journalists-investigati…
- amnesty.org/en/latest/research/2019/10/morocco-huma…
- citizenlab.ca/2017/08/nso-spyware-mexico-corruption
- twitter.com/h2jazi/status/1490829405106569217