Updated 2024-02-08-IOCs-from-TA577-Pikabot-infection.txt

PaloAltoNetworks · Feb 9, 2024 · e11904e · e11904e
1 parent 987c3fc
commit e11904e
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/2024-02-08-IOCs-from-TA577-Pikabot-infection.txt b/2024-02-08-IOCs-from-TA577-Pikabot-infection.txt
@@ -1,5 +1,10 @@
 2024-02-08 (THURSDAY): TA577 MALSPAM PUSHES PIKABOT
 
+REFERENCES:
+
+- https://www.linkedin.com/posts/unit42_ta577-pikabot-unit42threatintel-activity-7161507003310231552-ufq1
+- https://twitter.com/Unit42_Intel/status/1755741384982561175
+
 ORIGINAL REFERENCES:
 
 - https://twitter.com/Cryptolaemus1/status/1755655639370514595
@@ -83,4 +88,4 @@ SELF-SIGNED CERTIFICATE FOR TRAFFIC FROM 158.220.80[.]157 OVER TCP PORT 9785:
   -- Common Name: bloodguiltiness.tirol
 - Validity:
   -- Not Before: Thu, 08 Feb 2024 09:57:45 UTC
-  -- Not After: Fri, 07 Feb 2025 09:57:45 UTC
+  -- Not After: Fri, 07 Feb 2025 09:57:45 UTC