Soc Prime Threat Bounty Digest – December 2024 Results
Thumbnail
This article discusses various cookies used on websites to collect anonymous data about user visits, including the number of visits, time spent, and pages loaded. These cookies serve purposes such as targeted advertising and user segmentation for marketing. Affected: websites, advertising platforms

Keypoints :

  • Cookies collect anonymous data related to user visits on websites.
  • Data collected includes the number of visits, average time spent, and pages loaded.
  • Cookies are used for targeted advertising and user segmentation.
  • Some cookies are specifically associated with Google reCAPTCHA.
  • Advertising platforms utilize cookies to determine visitor interests based on their actions.

MITRE Techniques :

  • TA0001 – Initial Access: Cookies collect data on user behavior to facilitate targeted advertising.
  • TA0002 – Execution: Cookies execute tracking mechanisms to analyze user interactions with the website.
  • TA0003 – Persistence: Cookies maintain user identification across sessions for targeted ads.
  • TA0004 – Privilege Escalation: Cookies segment users for customized marketing efforts based on demographics.
  • TA0005 – Defense Evasion: Use of anonymous data collection to avoid detection in user tracking.

Indicator of Compromise :

  • [domain] google.com
  • [domain] addthis.com
  • [tool name] Google reCAPTCHA
  • [file name] __utmx
  • [file name] __utmxx
  • Check the article for all found IoCs.


Full Research: https://socprime.com/blog/soc-prime-threat-bounty-digest-december-2024-results/