In Q4 2023, X-Force assisted with an investigation involving an attempted brute force attack against a target’s email infrastructure. Although tens of thousands of failed logins were observed for hundreds of usernames, there was no evidence of successful external compromise. The threat actor primarily leveraged infrastructure belonging to Stark Industries to carry out the attack.
Sample Indicators of Compromise:
185.74.222.16845.159.251.3595.164.46.275.182.37.16645.137.155.13
