APTTrail: APT MOUSTACHEDBOUNCER indicators and references

Fecha
18 Jun 2026
Actor
apt-moustachedbouncer
Tipo
Ioc
Pais
Unknown
Sector
-
Confianza
high
100
Prioridad analitica
Alta

Basado en actor, pais, IOCs, TTPs, filtracion y calidad de contexto.

12IOCs
0TTPs
apt-moustachedbouncerActor
UnknownPais
Executive Summary
APTTrail mantiene indicadores publicos asociados a APT MOUSTACHEDBOUNCER. Aliases observados: APT MOUSTACHEDBOUNCER. Conteo por tipo: domain: 5, ipv4: 6.

Key Points

  • https://www.welivesecurity.com/en/eset-research/moustachedbouncer-espionage-against-foreign-diplomats-in-belarus/

Resumen APTTrail

APTTrail mantiene indicadores publicos asociados a APT MOUSTACHEDBOUNCER. Aliases observados: APT MOUSTACHEDBOUNCER. Conteo por tipo: domain: 5, ipv4: 6.

Indicadores de Compromiso (IOCs)

TipoValorContexto
Domaincentrocspupdate.comAPTTrail
Domaindervasopssec.comAPTTrail
Domainedgeupdate-security-windows.comAPTTrail
Domainocsp-atomsecure.comAPTTrail
Domainsecurityocspdev.comAPTTrail
IP209.19.37.184:445APTTrail
IP24.9.51.94:445APTTrail
IP35.214.56.2:445APTTrail
IP38.9.8.78:445APTTrail
IP52.3.8.25:445APTTrail
IP59.6.8.25:445APTTrail

Referencias

Diamond Model

Adversary
apt-moustachedbouncer
Ver perfil →
Victim
APTTrail: APT MOUSTACHEDBOUNCER indicators and references
Capability
Ioc
Infrastructure
centrocspupdate.com
dervasopssec.com
edgeupdate-security-windows.com
ocsp-atomsecure.com

Indicadores de Compromiso (IOCs)

TipoValorContextoOSINT
Domain centrocspupdate.com APTTrail VT OffSec SOCRadar
Domain dervasopssec.com APTTrail VT OffSec SOCRadar
Domain edgeupdate-security-windows.com APTTrail VT OffSec SOCRadar
Domain ocsp-atomsecure.com APTTrail VT OffSec SOCRadar
Domain securityocspdev.com APTTrail VT OffSec SOCRadar
IP 209.19.37.184:445 APTTrail VT OffSec SOCRadar
IP 24.9.51.94:445 APTTrail VT OffSec SOCRadar
IP 35.214.56.2:445 APTTrail VT OffSec SOCRadar
IP 38.9.8.78:445 APTTrail VT OffSec SOCRadar
IP 52.3.8.25:445 APTTrail VT OffSec SOCRadar
IP 59.6.8.25:445 APTTrail VT OffSec SOCRadar
Domain www.welivesecurity.com Extraido del contenido VT OffSec SOCRadar

Referencias y enlaces

→ Perfil del actor apt-moustachedbouncer en el blog → Ver apt-moustachedbouncer en IntelTracker → URL IntelTracker: www.welivesecurity.com → Fuente OSINT: github.com→ Fuente OSINT: raw.githubusercontent.com→ Fuente OSINT: www.welivesecurity.com → Buscar apt-moustachedbouncer en APTTrail → Repositorio APTTrail → Buscar en Google News → Analizar en VirusTotal → Feed RSS del blog
← Volver al panel de inteligencia

Incidentes recientes