Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Thursday, 18-Jan-2024 20:14:31 JST Kevin Beaumont

   #NoName targets today - Estonia and Switzerland

   myyk.inges.ee
   marketplace.e-resident.gov.ee
   epp.energia.ee
   www.tallinn.ee
   www.nordica.ee
   www.sob.ch
   www.post.ch
   www.gva.ch
   airport-grenchen.ch
   www.bernairport.ch
   engadin-airport.ch
   peoples.ch
   www.geneve.com
   www.stadt-zuerich.ch
   www.myswitzerland.com
   www.postauto.ch
   www.zvv.ch
   www.mnt.ee
   pilet.ee
   lengmatta-davos.ch
   alpenhof-davos.ch
   www.davos-pischa.ch
   europe-davos.ch
   kajakallas.ee

   Botnet config: https://github.com/GossiTheDog/Monitoring/blob/main/NoName/targets_2024_01_18_11am.txt

   #threatintel

2. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:01:06 JST Kevin Beaumont

   #NoName targets for today are all in Latvia - whose gov protect the host of the C2 server that is hardcoded into binaries (94.140.115.89)

   myyk.inges.ee
   tenders.blrt.ee
   pasts.lv
   www.evr.ee
   marketplace.e-resident.gov.ee
   www.saeima.lv
   epp.energia.ee
   www.mk.gov.lv
   cert.lv
   express.pasts.lv
   www.tallinn.ee
   www.nordica.ee
   saraksti.rigassatiksme.lv
   www.autoosta.lv
   nasdaqbaltic.com
   www.citadele.lv
   www.rietumu.com
   www.edoks.lv
   www.mnt.ee
   pilet.ee
   www.ecaa.ee
   company.inbox.lv
   www.chamber.lv

   #threatintel