2015-05-22 - FIESTA EK FROM BIZCN ACTOR

PCAPS AND MALWARE:

 

NOTES:

This is a follow-up on two Internet Storm Center (ISC) diaries I wrote during the past month:

Fiesta EK changed traffic patterns as early as 2015-05-11, about a week after the 2015-05-04 ISC diary.  The BizCN actor discussed in the 2015-04-28 ISC diary is still active.

 

CHAIN OF EVENTS

ASSOCIATED DOMAINS:

 

FIESTA EK AFTER VISAJOURNEY.COM:

 

FIESTA EK AFTER FORUMS.PINSTACK.COM:

 

FIESTA EK AFTER HACKNMOD.COM:

 

FIESTA EK AFTER FORUM.THEGRADCAFE.COM:

 

FINAL NOTES

Once again, here are the associated files:

Click here to return to the main page.