[tr1adx]: Intel
ID: 3302487f-d979-4f3e-855a-4ceb4567792c
STIX ID: report--3302487f-d979-4f3e-855a-4ceb4567792c
Threat Score
78/100
Uploaded: 2026-08-14
Published Date: 2017-02-22
Last Modified Date: 2017-02-22
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
tr1adx's bulletin details the "Digital Plagiarist" campaign attributed to the "TelePort Crew" (likely Carbanak), which registers spoof domains and uses TelePort Pro/Ultra to mirror legitimate sites hosting malicious Office documents delivered via spearphishing; the report provides TTP analysis, targeted industries/countries and IOCs including domains, IPs (e.g., 192.99.14.211) and file hashes for "order.docx".