ImgBB: Image Hosting Service Used for Payload Delivery
ACR Stealer payloads were hidden in JPEG images hosted on ImgBB, an image-hosting service.
Tag: payload delivery
Quima Loader: A Browser-Cache Payload Delivery Service
Quima Loader is a browser-cache payload delivery service that allows operators to upload an EXE file, select a delivery format (e.g., HTA…
Dropbox Abused to Deliver Malicious Payloads
An early phishing page in the SMOKE#SCREEN campaign delivered its payload via a Dropbox shared link, bypassing domain reputation filters since Dropbox…
Telegra.ph: Anonymous Publishing Platform
Telegra.ph is an anonymous publishing platform abused by Gamaredon (and Turla) for payload delivery via PteroOdd.