ThaiCERT    ETDA    MDES
Report
Search
Home > List all groups > List all tools > List all groups using tool scanbox

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: scanbox

Namesscanbox
CategoryMalware
TypeReconnaissance, Info stealer, Keylogger, Downloader
Description(Recorded Future) Scanbox is a reconnaissance framework that enables attackers to track visitors to compromised websites, performs keylogging, and harvests data that could be used to enable follow-on compromises. It has also been reported to have been modified in order to deliver secondary malware on targeted hosts. Written in Javascript and PHP, Scanbox deployment negates the need for malware to be downloaded onto the host device.
Information<https://www.recordedfuture.com/scanbox-framework-campaign/>
Malpedia<https://malpedia.caad.fkie.fraunhofer.de/details/js.scanbox>
AlienVault OTX<https://otx.alienvault.com/browse/pulses?q=tag:scanbox>

Last change to this tool card: 23 April 2020

Download this tool card in JSON format

All groups using tool scanbox

ChangedNameCountryObserved

APT groups

 Leviathan, APT 40, TEMP.PeriscopeChina2013-Jan 2020 

1 group listed (1 APT, 0 other, 0 unknown)

Thailand Computer Emergency Response Team (ThaiCERT)
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1234
E-mail report@thaicert.or.th
PGP Download PGP key