Contabo: Hosting Provider
Contabo is a German web hosting and VPS provider. The attacker's infrastructure was hosted on a Contabo VPS, highlighting the use of…
Tag: infrastructure
AstrillVPN: VPN Service Used by Suspected DPRK Operatives
AstrillVPN is a VPN service whose exit nodes were identified in the investigation as part of the infrastructure used by suspected DPRK…
Vultr: Cloud Infrastructure Provider
Vultr is a cloud infrastructure provider that was used to host the fake crypto startup's infrastructure in the undercover operation. The researchers…
Gorilla Servers: Hosting Provider Used in Undercover Operation
Gorilla Servers is a hosting provider that was used in the undercover operation to host infrastructure. The researchers noted that the operatives'…
Scattered LAPSUS$ Hunters: Shared Phishing-Kit Infrastructure
Scattered LAPSUS$ Hunters (SLH) is a threat actor associated with shared phishing-kit infrastructure. Some vishing attempts have been linked to SLH tradecraft,…
G-Core Labs: Cloud and Edge Services Provider
G-Core Labs is a cloud and edge services provider that hosted the IP address 92.38.177.17 used by the npm campaign infrastructure.