{
  "aliases": [],
  "attack_id": null,
  "attack_name": null,
  "attack_url": null,
  "counts": {
    "domain": 59
  },
  "first_seen": {
    "domain": {
      "bb-apps-world.com": "2015-03-18",
      "blackberry-apps-world.com": "2015-03-18",
      "blackberry-update.com": "2015-03-18",
      "csrss-check-new.com": "2015-03-18",
      "csrss-update-new.com": "2015-03-18",
      "csrss-upgrade-new.com": "2015-03-18",
      "dailyinfonews.net": "2015-03-18",
      "dll-host-check.com": "2015-03-18",
      "dll-host-udate.com": "2015-03-18",
      "dll-host-update.com": "2015-03-18",
      "dll-host.com": "2015-03-18",
      "dllupdate.info": "2015-03-18",
      "drivers-check.com": "2015-03-18",
      "drivers-get.com": "2015-03-18",
      "drivers-update-online.com": "2015-03-18",
      "genuine-check.com": "2015-03-18",
      "genuineservicecheck.com": "2015-03-18",
      "genuineupdate.com": "2015-03-18",
      "hotinfonews.com": "2015-03-18",
      "microsoft-msdn.com": "2015-03-18",
      "microsoftcheck.com": "2015-03-18",
      "microsoftosupdate.com": "2015-03-18",
      "mobile-update.com": "2015-03-18",
      "mobileimho.com": "2015-03-18",
      "mobileimho.ru": "2015-03-18",
      "ms-software-check.com": "2015-03-18",
      "ms-software-genuine.com": "2015-03-18",
      "ms-software-update.com": "2015-03-18",
      "msgenuine.net": "2015-03-18",
      "msinfoonline.org": "2015-03-18",
      "msonlinecheck.com": "2015-03-18",
      "msonlineget.com": "2015-03-18",
      "msonlineupdate.com": "2015-03-18",
      "new-driver-upgrade.com": "2015-03-18",
      "nt-windows-check.com": "2015-03-18",
      "nt-windows-online.com": "2015-03-18",
      "nt-windows-update.com": "2015-03-18",
      "os-microsoft-check.com": "2015-03-18",
      "os-microsoft-update.com": "2015-03-18",
      "osgenuine.com": "2015-03-18",
      "security-mobile.com": "2015-03-18",
      "shellupdate.com": "2015-03-18",
      "svchost-check.com": "2015-03-18",
      "svchost-online.com": "2015-03-18",
      "svchost-update.com": "2015-03-18",
      "update-genuine.com": "2015-03-18",
      "win-check-update.com": "2015-03-18",
      "win-driver-upgrade.com": "2015-03-18",
      "windows-genuine.com": "2015-03-18",
      "windowscheckupdate.com": "2015-03-18",
      "windowsonlineupdate.com": "2015-03-18",
      "wingenuine.com": "2015-03-18",
      "wins-driver-check.com": "2015-03-18",
      "wins-driver-update.com": "2015-03-18",
      "wins-update.com": "2015-03-18",
      "winupdateonline.com": "2015-03-18",
      "winupdateos.com": "2015-03-18",
      "world-mobile-congress.com": "2015-03-18",
      "xponlineupdate.com": "2015-03-18"
    }
  },
  "first_seen_precision": {
    "domain": {}
  },
  "first_seen_range": {
    "earliest": "2015-03-18",
    "latest": "2015-03-18"
  },
  "generated_at": "2026-08-08T03:26:30+00:00",
  "indicators": {
    "domain": [
      "bb-apps-world.com",
      "blackberry-apps-world.com",
      "blackberry-update.com",
      "csrss-check-new.com",
      "csrss-update-new.com",
      "csrss-upgrade-new.com",
      "dailyinfonews.net",
      "dll-host-check.com",
      "dll-host-udate.com",
      "dll-host-update.com",
      "dll-host.com",
      "dllupdate.info",
      "drivers-check.com",
      "drivers-get.com",
      "drivers-update-online.com",
      "genuine-check.com",
      "genuineservicecheck.com",
      "genuineupdate.com",
      "hotinfonews.com",
      "microsoft-msdn.com",
      "microsoftcheck.com",
      "microsoftosupdate.com",
      "mobile-update.com",
      "mobileimho.com",
      "mobileimho.ru",
      "ms-software-check.com",
      "ms-software-genuine.com",
      "ms-software-update.com",
      "msgenuine.net",
      "msinfoonline.org",
      "msonlinecheck.com",
      "msonlineget.com",
      "msonlineupdate.com",
      "new-driver-upgrade.com",
      "nt-windows-check.com",
      "nt-windows-online.com",
      "nt-windows-update.com",
      "os-microsoft-check.com",
      "os-microsoft-update.com",
      "osgenuine.com",
      "security-mobile.com",
      "shellupdate.com",
      "svchost-check.com",
      "svchost-online.com",
      "svchost-update.com",
      "update-genuine.com",
      "win-check-update.com",
      "win-driver-upgrade.com",
      "windows-genuine.com",
      "windowscheckupdate.com",
      "windowsonlineupdate.com",
      "wingenuine.com",
      "wins-driver-check.com",
      "wins-driver-update.com",
      "wins-update.com",
      "winupdateonline.com",
      "winupdateos.com",
      "world-mobile-congress.com",
      "xponlineupdate.com"
    ]
  },
  "last_modified": "2026-01-02T23:10:15+00:00",
  "maltrail_groups": [
    "REDOCTOBER"
  ],
  "references": [
    "https://www.alienvault.com/blog-content/2013/01/RedOctober-Indicatorsofcompromise-2.pdf"
  ],
  "related": [],
  "slug": "REDOCTOBER",
  "timeline": [
    {
      "counts": {
        "domain": 59
      },
      "first_seen": "2015-03-18",
      "indicators": {
        "domain": [
          "bb-apps-world.com",
          "blackberry-apps-world.com",
          "blackberry-update.com",
          "csrss-check-new.com",
          "csrss-update-new.com",
          "csrss-upgrade-new.com",
          "dailyinfonews.net",
          "dll-host-check.com",
          "dll-host-udate.com",
          "dll-host-update.com",
          "dll-host.com",
          "dllupdate.info",
          "drivers-check.com",
          "drivers-get.com",
          "drivers-update-online.com",
          "genuine-check.com",
          "genuineservicecheck.com",
          "genuineupdate.com",
          "hotinfonews.com",
          "microsoft-msdn.com",
          "microsoftcheck.com",
          "microsoftosupdate.com",
          "mobile-update.com",
          "mobileimho.com",
          "mobileimho.ru",
          "ms-software-check.com",
          "ms-software-genuine.com",
          "ms-software-update.com",
          "msgenuine.net",
          "msinfoonline.org",
          "msonlinecheck.com",
          "msonlineget.com",
          "msonlineupdate.com",
          "new-driver-upgrade.com",
          "nt-windows-check.com",
          "nt-windows-online.com",
          "nt-windows-update.com",
          "os-microsoft-check.com",
          "os-microsoft-update.com",
          "osgenuine.com",
          "security-mobile.com",
          "shellupdate.com",
          "svchost-check.com",
          "svchost-online.com",
          "svchost-update.com",
          "update-genuine.com",
          "win-check-update.com",
          "win-driver-upgrade.com",
          "windows-genuine.com",
          "windowscheckupdate.com",
          "windowsonlineupdate.com",
          "wingenuine.com",
          "wins-driver-check.com",
          "wins-driver-update.com",
          "wins-update.com",
          "winupdateonline.com",
          "winupdateos.com",
          "world-mobile-congress.com",
          "xponlineupdate.com"
        ]
      },
      "precision": "exact",
      "references": [
        "https://www.alienvault.com/blog-content/2013/01/RedOctober-Indicatorsofcompromise-2.pdf"
      ],
      "total": 59
    }
  ]
}