>samit_hota
Back to IOCs

Indicators of Compromise

5 INDICATORSosx.cloudsyncd

CloudSyncD — Indicators of Compromise

Samit Hota·
#ioc#cloudsyncd

Overview

Indicators of compromise associated with CloudSyncD. 5 indicators listed below.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
urlhttps://187.77.134.200:8080/index.html/v1/enterprise/administration/assessment/scheduler/combine/jquery-3.3.2.min.jsNovember 4, 202675%
urlhttps://187.124.23.99:8080/index.html/v5/enterprise/infrastructure/decryption/editor/categorize/jquery-3.3.2.min.jsNovember 4, 202675%
urlhttps://dodiihome.com/macos/jquery.jsNovember 4, 202685%
urlhttps://187.124.82.117:8080/index.html/v2.3/enterprise/security/alerting/service/execute/jquery-3.3.2.min.jsNovember 4, 202675%
urlhttps://ecl.zs-catch.com:443/index.html/rc1/enterprise/manufacturing/serialization/parser/query/jquery-3.3.2.min.jsNovember 4, 202675%

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call