Indicators of Compromise - SHADOW-VOID-042 Targets Multiple Industries with Void Rabisu-like Tactics


[URL]				[DESCRIPTION]
re-tdm-sec[.]live		landing domain
re-tdm-sec[.]online		landing domain
re-tdmsec[.]live		landing domain
re-tdmsec[.]online		landing domain
re-tdmsec[.]pub			landing domain
re-tdmsec[.]software		landing domain
re-tdmsec[.]zone		landing domain
retdmsec[.]live			landing domain
tdm-sec[.]consulting		landing domain
tdm-sec[.]live			landing domain
tdm-sec[.]news			landing domain
tdm-sec[.]online		landing domain
tdm-sec[.]pub			landing domain
tdm-sec[.]software		landing domain
tdmsec-analysis[.]live		landing domain
tdmsec-analysis[.]online	landing domain
tdmsec[.]consulting		landing domain
tdmsec[.]expert			landing domain
tdmsec[.]live			landing domain
tdmsec[.]online			landing domain
tdmsec[.]pub			landing domain
tdmsec[.]social			landing domain
tdmsecglobal[.]live		landing domain
tdmsecglobal[.]online		landing domain
tdmsecglobal[.]pub		landing domain
tdmsecglobal[.]zone		landing domain
tdmseclabs[.]consulting		landing domain
tdmseclabs[.]live		landing domain
tdmseclabs[.]online		landing domain
tdmseclabs[.]pub		landing domain
tdmseclabs[.]software		landing domain
tdmsecsys[.]live		landing domain
tdmsecsys[.]online		landing domain
tdmsecsys[.]pub			landing domain
tdmsecsys[.]social		landing domain
tdmsecsys[.]software		landing domain
tdmsecsys[.]zone		landing domain
tdmsecteam[.]live		landing domain
tdmsecteam[.]online		landing domain
tdmsecteam[.]pub		landing domain
tdmsecteam[.]software		landing domain
tdmsecteam[.]zone		landing domain
tdmsecure[.]consulting		landing domain
tdmsecure[.]live		landing domain
tdmsecure[.]online		landing domain
tdmsecure[.]pub			landing domain
tdmsecure[.]software		landing domain
tdmsecure[.]zone		landing domain
tdmsecurity[.]consulting	landing domain
tdmsecurity[.]live		landing domain
tdmsecurity[.]online		landing domain
tdmsecurity[.]pub		landing domain
tdmsecurity[.]social		landing domain
tm-blog[.]live			landing domain
tm-blog[.]online		landing domain
tm-blog[.]pub			landing domain
tm-blog[.]social		landing domain
tm-blog[.]software		landing domain
tm-blog[.]website		landing domain
tmsec-blog[.]live		landing domain
tmsec-blog[.]online		landing domain
tmsec-blog[.]pub		landing domain
tmsec-blog[.]software		landing domain
docs-live[.]works		landing domain
docs-workspace[.]live		landing domain
docs-workspace[.]online		landing domain
form-direct[.]live		redirect domain
forms-gle[.]online		redirect domain
forms[.]works			redirect domain
drivemyfile[.]com		redirect domain
form-space[.]org		redirect domain
redirect-workspace[.]com	redirect domain
linkeedservice[.]com		second-stage domain
linkerseervice[.]com		second-stage domain
doubletwistertop[.]com		third-stage domain
buyiceecream[.]com		third-stage domain
gotomind[.]net			malware hosting domain
tdmsec[.]com			decoy website