Intercolo: Cloud Storage Service
Intercolo is a cloud storage service abused by Gamaredon as a dead drop resolver.
Category: Cyber Service Providers
MSSPs, MDR providers, incident response firms and cybersecurity service providers.
Teletype: Publishing Platform
Teletype is a publishing platform abused by Gamaredon as a dead drop resolver.
Rentry.co: Pastebin Service
Rentry.co is a pastebin service abused by Gamaredon as a dead drop resolver.
Write.as: Blogging Platform
Write.as is a blogging platform abused by Gamaredon as a dead drop resolver.
Dropbox: Cloud Storage Service
Dropbox is a cloud storage service abused by Gamaredon for data exfiltration and dead drop resolvers.
GoFile: Cloud Storage Service
GoFile is a cloud storage service used by Gamaredon for C2 server discovery via PteroEffigy.
Telegra.ph: Anonymous Publishing Platform
Telegra.ph is an anonymous publishing platform abused by Gamaredon (and Turla) for payload delivery via PteroOdd.
Cato CTRL — Cybersecurity service provider profile
Cato CTRL was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Cato Networks: Cybersecurity Service Provider
Cato Networks provides cybersecurity services including threat research and analysis, as demonstrated by the Cato CTRL team's report on the Poisson intrusion.
DuckDNS: Free Dynamic DNS Service Provider
DuckDNS offers free dynamic DNS services, which were exploited by the attacker for C2 communication.