indicatordomain
outlook[.]office365[.]com
- First seen
- 2026-05-13
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- APT28 exploit routers to enable DNS hijacking operations
Targeted domain redirected to AitM infrastructure for credential harvesting.