JekHyde USES lookalike domain
The phishing email used a domain resembling the target company's domain.
Explicit Confidence 99% · JekHyde EP 41 Details
“with a domain that looked a lot like our target company’s domain”
Technique
technique:lookalike_domain
Use of a domain resembling a legitimate business domain to make fraudulent email appear authentic.
Use of a domain resembling a target company’s domain to support a phishing pretext.
“Instead of targetcompany.com it was targetcompany-communityresources.com.”
Use of a domain resembling a legitimate business domain to make fraudulent email appear authentic.
“he probably registered a domain that was very similar to Quanta’s actual domain”
“identifying when a lookalike domain has e-mailed you”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | JekHyde | Explicit | 41 |
| incoming | INVOLVES | JekHyde and Carl physical penetration engagement | Explicit | 41 |
| incoming | INVOLVES | Evaldas Rimasauskas BEC scam | Explicit | 124 |
| incoming | USES | Evaldas Rimasauskas | Uncertain | 124 |
JekHyde USES lookalike domain
The phishing email used a domain resembling the target company's domain.
Explicit Confidence 99% · JekHyde EP 41 Details
“with a domain that looked a lot like our target company’s domain”
JekHyde and Carl physical penetration engagement INVOLVES lookalike domain
The engagement involved a lookalike domain used in the targeted phishing email.
Explicit Confidence 99% · JekHyde EP 41 Details
“Instead of targetcompany.com it was targetcompany-communityresources.com.”
Evaldas Rimasauskas BEC scam INVOLVES lookalike domain
The perpetrators used a domain made to look similar to Quanta's actual domain.
Explicit Confidence 98% · Jack Rhysider EP 124 Details
“he probably registered a domain that was very similar to Quanta’s actual domain”
Evaldas Rimasauskas USES lookalike domain
Evaldas allegedly registered a domain similar to Quanta's domain to make the fraudulent emails appear legitimate.
Uncertain Confidence 86% · Jack Rhysider EP 124 Details
“my guess is he probably registered a domain that was very similar to Quanta’s actual domain”