Aliyun

Reported Context (2)

The operation also relied on Bright Data proxies for account validation, Aliyun DirectMail for outbound phishing emails, and three Telegram bots forwarding results to a command chat. Operation ASTERIX Uses Vishing and Fake Wallet Apps in Crypto Fraud Pipeline
Our next IP, 120.55.74_104, is hosted in China on the Aliyun Computing network and also has an exposed directory on port 8000. This server serves as a prime example of why we cannot rely solely on certificates to draw Researchers Trace Geacon_Pro Infrastructure and Linux and Windows Payloads

People (3)

MITRE ATT&CK (18)

Vendors (5)

Products (12)

Tools (9)

Industries (1)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.