webdisk.media
Classification: Malicious
webdisk.media is a malicious hostname. Linked to Remsec, Cobalt Strike malware. 12 sightings from Maltiverse (Nitro, Ice Fog), last seen 2023-08-22.
Current activity
- Offline — no longer resolving. Last online 2023-08-22 20:40:56.
MITRE ATT&CK associations
Malware families: REMSEC (S0125) COBALT STRIKE (S0154)
Intrusion sets: DARKHOTEL (G0012) STRIDER (G0041) BRONZE BUTLER (G0060) TURLA (G0010) LEVIATHAN (G0065) MUDDYWATER (G0069)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Nitro | Maltiverse | 2023-08-21 04:13:34 | 2023-08-22 20:40:55 | malicious-activity | |
| Darkhotel | Maltiverse | 2023-08-21 04:13:36 | 2023-08-22 20:40:23 | malicious-activity | G0012 Darkhotel |
| Ice Fog | Maltiverse | 2023-08-21 04:13:38 | 2023-08-22 20:39:50 | malicious-activity | |
| Projectsauron | Maltiverse | 2023-08-21 04:13:41 | 2023-08-22 20:39:18 | malicious-activity | G0041 Strider S0125 Remsec |
| Cobalt Strike | Maltiverse | 2023-08-21 04:13:43 | 2023-08-22 20:38:45 | malicious-activity | S0154 Cobalt Strike |
| Tick | Maltiverse | 2023-08-21 04:13:45 | 2023-08-22 20:38:12 | malicious-activity | G0060 BRONZE BUTLER |
| Turla | Maltiverse | 2023-08-21 04:13:48 | 2023-08-22 20:37:39 | malicious-activity | G0010 Turla |
| Careto | Maltiverse | 2023-08-21 04:13:50 | 2023-08-22 20:37:05 | malicious-activity | |
| Leviathan | Maltiverse | 2023-08-21 04:13:52 | 2023-08-22 20:36:32 | malicious-activity | G0065 Leviathan |
| Muddywater | Maltiverse | 2023-08-21 04:13:55 | 2023-08-22 20:35:59 | malicious-activity | G0069 MuddyWater |
| Fastcash | Maltiverse | 2023-08-21 04:13:57 | 2023-08-22 20:35:25 | malicious-activity | |
| Predatory Sparrow | Maltiverse | 2023-08-21 04:13:59 | 2023-08-22 20:34:51 | malicious-activity |
Tags
aptWhois information
- Domain
- webdisk.media
- TLD
- media
- First indexed
- 2023-08-22 20:34:51
- Last updated
- 2026-09-30 09:27:17