IoC Extractor

This IoC extractor identifies Indicators of Compromise (IoCs) by matching patterns, without analyzing the context of the surrounding text. Manual Review and Validation of the extracted IoCs are essential before any action is used.

Roasting 0ktapus: The phishing campaign going after Okta identity credentials

DATE : 2022-08-19T07:00:00
SOURCE : group-ib.com

Domain:
twiiio-sso.com
box-okta.org
kucoin-pin.com
boxokta.com
kucoin-sso.com
microsoft-sso.net
sendgrid-okta.org
mlcrosoft.info
mlcrosoft.cloud
ouryahoo-okta.org
ouryahooinc-okta.com
sykes-sso.com
internai-customer.io
ouryahoo-okta.com
ouryahoo-okta.net
techmahindra-sso.com
qualfon-sso.com
twiiio.net
twiiio.org
teleperformanceusa-sso.com
tmo-sso.net
okta-sso.net
att-mfa.com
att-rsa.com
mcsupport-okta.com
mailgun-okta.com
sprint-idg.net
tmobie.net
kucoinpin.com
kucoinpin.net
twiiio-okta.net
kucoin-pin.net
kucoin-sso.net
telus-sso.com
rogers-rci.net
rogers-ssp.com
iqor-duo.net
iqor-portal.com
cgslnc-okta.com
conexusonline.com
klaviyo-sso.com
arise-okta.com
rogers-rci.com
verizon-sso.net
taskus-sso.com
medailia-okta.com
quaifone.com
quaifon.com
t-moblle.org
iqor-sso.com
rogers-sso.net
tmo-sso.com
teleperformance-help.com
twilio-sso.com
rogers-help.net
twilio-help.com
tmoblle.co
t-moblie.help
twlilo.net
att-sso.net
coin-base-okta.com
rogers-sso.com
concentrlx.com
concentrix-sso.com
teleperformance-sso.com
transcom-help.com
atento-help.com
sykes-help.com
sitel-sso.com
mailchimp-help.com
sinch-sso.com
transcom-sso.com
hubspot-sso.com
mailchimp-sso.com
maiichlmp.com
att-sso.com
sitel-help.com
bandwidth-okta.com
cloudflare-okta.com
twilio-okta.com
iqor-helpdesk.com
ttec-help.com
vzw-corp.net
iqor-help.net
metropcs-edge.net
iqor-tmobile.com
iqor-help.com
sykes-vpn.com
startek-vpn.com
t-moblie-okta.com
att-uid.co
at-uid.com
att-ctx.com
activecampaign-okta.com
vzwcorp.co
tmoblle.org
t-mobiie.co
att-id.net
att-uid.net
uid-att.com
att-uid.com
intercom-vpn.com
sutherlandglobal-vpn.com
sitel-vpn.net
t-mobilers.com
tmoble.net
tp-update.com
tmoblle.net
teleperformance-usa.net
mytpusa.net
tmobiler.net
t-mobile-okta.net
t-moblier.org
att-opus.net
opus-att.com
t-mobile-okta.org
mytpusa.com
twit-vpn.com
epicgames-vpn.com
att-citrix.net
tpusa-citrix.com
att-citrix.com
okta-hubspot.com
mailchimp-okta.com
twitter-okta.com
infosys-vpn.com
ttec-vpn.com
taskus-vpn.com
tp-usa.net
tmoblie.net
t-mobiie.org
t-mobiie.net
okta-oath.com
okta-tmobiie.net
t-mobile-okta.com
t-mobile-okta.us
okta-tmo.org
okta-tmobile.org
tmo-okta.com
okta.tmobiie.net
okta-drop.com
loginxarth.tv
binance-okta.com
snap-okta.net
snap-okta.com
epicgames-okta.com
evernote-onelogin.com
riotgames-vpn.net
okta-riotgames.com
one-login.co
cb-okta.com
cb-okta.net
tmobile-okta.com
tmobile-okta.net
riotgames-okta.com
riotgames-vpn.com
customer-internal.com
alorica-vpn.com
concentrixhelp.com
att-vmware.com
att-vpn.org
corp-att.net
att-vpn.com
att-support.org
bestbuy-vpn.com
ttecvpn.com