|
| Description: |
Hello,
We are writing to inform you of a security incident that was recently identified relating to the following domain : mail[.]xwiki[.]org
Malicious urls were identified by a Vade's security component.
Currently, malicious threat actors are leveraging this domain for attacking third-party stakeholders.
It seems that attackers have overtaken an expirated CNAME of mail[.]xwiki[.]org
Based on our findings, we are notifying you of a security incident in order for you to remediate this issue.
Example of malicious URLs :
* [ http://mail[.]xwiki[.]org ] /nvIN.dx?putdkywtnzvrti=vxylvwizeknserMjh0Z2J3eDAwaWZiajAwMjM2MTB3MDRnMGMwNTE5NTE5Mjk5OQ==
* [ http://mail[.]xwiki[.]org/nvIN.dx?ifvsgqwztuphtk=jumxmljdskwtwfMzh0Z2J3eDAwaWZiajAwMjM2MTB3MDRnMGMwNTE5NTE5Mjk5OQ== ]
Kind regards,
PS : Sorry if we created this issue in the wrong project.
!https://sendertool.vadesecure.com/static/images/vade_logo.jpg! |
| Attachment: |
Screenshot from 2024-12-24 09-57-29.png |
|
