Asnarok INVOLVES sophosproductupdate.com
The wider attack infrastructure also used sophosproductupdate.com as an update domain.
Explicit Confidence 99% · Andrew Brandt EP 174 Details
“there was sophosfirewallupdate.com and sophosproductupdate.com”
Website
website:sophosproductupdate_com
Second attacker-controlled domain used in the campaign for malicious or redirected product updates.
Second attacker-controlled domain used in the campaign for malicious or redirected product updates.
“there was sophosfirewallupdate.com and sophosproductupdate.com”
Asnarok INVOLVES sophosproductupdate.com
The wider attack infrastructure also used sophosproductupdate.com as an update domain.
Explicit Confidence 99% · Andrew Brandt EP 174 Details
“there was sophosfirewallupdate.com and sophosproductupdate.com”