## hosts-blocklists ## blocklists-tag # https://blog.google/threat-analysis-group/ # https://blog.google/threat-analysis-group/internet-explorer-0-day-exploited-by-north-korean-actor-apt37/ ms-office.services ms-offices.com openxmlformat.org template-openxml.com word-template.net # https://blog.google/threat-analysis-group/initial-access-broker-repurposing-techniques-in-targeted-attacks-against-ukraine/ activecitizens.in.ua aprize.com.ua baiden.top baidenfree.com blinkin.top donaldtr.com gov.uz.ua kirbi.top kompromatua.info lviv.uz.ua microsoftua.com starlinkua.info # https://blog.google/threat-analysis-group/continued-cyber-activity-in-eastern-europe-observed-by-tag/ cache-pdf.com cyberazov.com # https://blog.google/threat-analysis-group/countering-hack-for-hire-groups/ account-noreply3.xyz account-noreply8.info account-server.xyz apl.onl aws-amazon.app.ink clik.sbs dtiwa.app.link go-gl.io goolge.help goolge.ltd id-apl.info kcynvd-mail.com kcynve-mail.com loading.sbs login-cloud-myaccount-mail.ru login-my-oauth-mail.ru mail-goolge.com mipim.app.link my-oauth-accounts-mail.ru myaccounts-auth.ru myproject-login.shop mysite-log.shop oauth-login-accounts-mail.ru preference-community-place.ru processs.app.link requestservice.live rnanage-icloud.com safe-place-experience.ru safe-place-smartlink.ru security-my-account.ru share-team.app.link source-place-preference.ru supp-help.me unt-log.com userprofile.live webtech-portal.com # https://blog.google/threat-analysis-group/italian-spyware-vendor-targets-users-in-italy-and-kazakhstan/ 119-tim.info 133-tre.info 146-fastweb.info 155-wind.info 159-windtre.info comtencentmobileqq-6ffb5.appspot.com comxdjajxclient.appspot.com fb-techsupport.com fintur-a111a.appspot.com ho-mobile.online iliad.info kena-mobile.info mobilepays.info my190.info poste-it.info project1-c094e.appspot.com safekeyservice-972cd.appspot.com # https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/ contents-domain.com getupdatesnow.xyz redirecting.page s.bit-li.com shorten.fi # https://blog.google/threat-analysis-group/update-on-cyber-activity-in-eastern-europe/ cache-dns.com docs-shared.com documents-forwarding.com documents-preview.com facebook.com-validation.top jadlactnato.webredirect.org lt-facebook.com-verification.top lt-meta.com-verification.top lt-microsoftgroup.serure-email.online microsoftonline.email-verify.top noreply.accountsverify.top protection-link.online webresources.live wkoinfo.webredirect.org # https://blog.google/threat-analysis-group/tracking-cyber-activity-eastern-europe/ drive-share.live login-verification.top login-verify.top protect-link.online protection-office.live proton-viewer.com secure-ua.space secure-ua.top ua-login.top # https://blog.google/threat-analysis-group/countering-threats-north-korea/ blockchainnews.vip chainnews-star.com colasprint.com disneycareers.net financialtimes365.com find-dreamjob.com fireblocks.vip gatexpiring.com gbclabs.com giantblock.org humingbot.io indeedus.org onlynova.org options-it.com teenbeanjs.com tradingtechnologies.com varietyjob.com ziprecruiters.org # https://blog.google/threat-analysis-group/exposing-initial-access-broker-ties-conti/ al-ghurair.us amevida.us avrobio.co awsblopharma.com belcolnd.com brightlnsight.co conlfex.com craneveyor.us elemblo.com faustel.us kvnational.us lagauge.us lsoplexis.com missionbio.us modernmeadow.co opontia.us phxmfg.co prmflltration.com revergy.us richllndmetals.com # https://blog.google/threat-analysis-group/update-threat-landscape-ukraine/ accounts.secure-ua.website consumerspanel.frge.io hatdfg-rhgreh684.frge.io i.ua-passport.top id-unconfirmeduser.frge.io login.creditals-email.space post.mil-gov.space ua-consumerpanel.frge.io verify.rambler-profile.site # https://blog.google/threat-analysis-group/disrupting-glupteba-operation/ anuanage.info evocterm.com iceanedy.com ninhaine.com nisdably.com retoti.com runmodes.com trumops.com yturu.com # https://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits/ amnestyhk.org apple-webservice.com appleid-server.com # https://blog.google/threat-analysis-group/phishing-campaign-targets-youtube-creators-cookie-theft-malware/ anypon.online awaken1337.xyz bragi-studio.com dizzify.me downloadnature.com downloadnature.space fast-redirect.host fenzor.com peoplep.site pixelka.fun playerupbo.xyz plplme.site pro-swapper.com rainway-gaming.com roudar.com spaceditor.space universe-photo.com user52406.majorcore.space voneditor.tech vontex.tech vortex-cloudgaming.com yourworld.site zeneditor.tech # https://blog.google/threat-analysis-group/countering-threats-iran/ accessverification.online cdsa.xyz communication-shield.site continuetogo.me customers-verification-identifier.site digital-email-software.great-site.net filetransfer.club identifier-service-review.site nco2.live recovery-activity-identification.site recovery-service-activity.site reset-service-identity-mail.42web.io review-session-confirmation.site service-activity-session.online service-manager-notifications.info service-reset-password-moderate-digital.rf.gd summit-files.com verify-service-activity.site # https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/ armenpress.org armlur.org armradio.org armtimes.net armtimes.org asbares.com db-control-uplink.com hetq.org hraparak.org kidone.xyz lioiamcount.com lragir.org supportcdn.web.app vegmobile.com wordzmncount.com workaj.com # https://blog.google/threat-analysis-group/update-campaign-targeting-security-researchers/ bestwing.org codebiogblog.com coldpacific.com cutesaucepuppy.com devguardmap.org hireproplus.com hotelboard.org mediterraneanroom.org redeastbay.com regclassboard.com securielite.com spotchannel02.com wileprefgurad.net # https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/ angeldonationblog.com blog.br0vvnn.io codevexillium.org colasprint.com dronerc.it edujikim.com fabioluciani.com investbooking.de krakenfolio.com opsonew3org.sg transferwiser.io transplugin.io trophylab.com