webdisk.search

Classification: Malicious

webdisk.search is a malicious hostname. Linked to Remsec, Cobalt Strike malware. 12 sightings from Maltiverse (Nitro, Ice Fog), last seen 2023-08-22.

Current activity

  • Offline — no longer resolving. Last online 2023-08-22 20:40:57.

MITRE ATT&CK associations

Malware families: REMSEC (S0125) COBALT STRIKE (S0154)

Intrusion sets: DARKHOTEL (G0012) BRONZE BUTLER (G0060) TURLA (G0010) LEVIATHAN (G0065) MUDDYWATER (G0069)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Nitro Maltiverse 2023-08-21 04:13:34 2023-08-22 20:40:57 malicious-activity
Darkhotel Maltiverse 2023-08-21 04:13:36 2023-08-22 20:40:25 malicious-activity G0012 Darkhotel
Ice Fog Maltiverse 2023-08-21 04:13:38 2023-08-22 20:39:52 malicious-activity
Projectsauron Maltiverse 2023-08-21 04:13:41 2023-08-22 20:39:19 malicious-activity S0125 Remsec
Cobalt Strike Maltiverse 2023-08-21 04:13:43 2023-08-22 20:38:47 malicious-activity S0154 Cobalt Strike
Tick Maltiverse 2023-08-21 04:13:45 2023-08-22 20:38:14 malicious-activity G0060 BRONZE BUTLER
Turla Maltiverse 2023-08-21 04:13:47 2023-08-22 20:37:41 malicious-activity G0010 Turla
Careto Maltiverse 2023-08-21 04:13:50 2023-08-22 20:37:07 malicious-activity
Leviathan Maltiverse 2023-08-21 04:13:52 2023-08-22 20:36:34 malicious-activity G0065 Leviathan
Muddywater Maltiverse 2023-08-21 04:13:54 2023-08-22 20:36:00 malicious-activity G0069 MuddyWater
Fastcash Maltiverse 2023-08-21 04:13:57 2023-08-22 20:35:27 malicious-activity
Predatory Sparrow Maltiverse 2023-08-21 04:13:59 2023-08-22 20:34:52 malicious-activity

Tags

apt

Whois information

Domain
webdisk.search
TLD
search
First indexed
2023-08-22 20:34:52
Last updated
2026-09-23 01:22:42