Monitor SG on Nostr: Detected #SocGholish infection chain Compromised site --> ficinity[.]com/dual.js ...
Detected #SocGholish infection chain
Compromised site
-->
ficinity[.]com/dual.js (SocGholish redirect)
-->
event.coachgreb[.]com/r1zSntR+sffLfuismWT+vN1+6LzDObjwxyWj/M4/u/aNIQ== (SocGholish)
Published at
2024-01-14 22:10:22Event JSON
{
"id": "0c7637d1055f4dc52b84d6cbf39d1a68247d920b44e6ab8506f1a92446d788f1",
"pubkey": "6a985bb2175436ff5e38174384f47f5def5d3e1cc95a5481ffeb2d13ad40cfce",
"created_at": 1705270222,
"kind": 1,
"tags": [
[
"t",
"SocGholish"
],
[
"proxy",
"https://infosec.exchange/users/monitorsg/statuses/111756589282558934",
"activitypub"
]
],
"content": "Detected #SocGholish infection chain\n\nCompromised site\n --\u003e\nficinity[.]com/dual.js (SocGholish redirect)\n --\u003e\nevent.coachgreb[.]com/r1zSntR+sffLfuismWT+vN1+6LzDObjwxyWj/M4/u/aNIQ== (SocGholish)",
"sig": "2bbed8d8837fb8ff05bce5cddf746cd232647cddfd2f3d64302e4489e45b2ccabc7e38b1537c880b696da8290a00d6a2ceaa3e89f96d88e2f686893792929861"
}
