In this post I'll provide actionable intelligence on the infrastructure behind the campaign and discuss in-depth the tactics techniques and procedures of the individuals behind it.
hxxp://ababil.org - Email: eric12shia@gmail.com; samirnet2@gmail.com; ababil.org; nassim@ababil.org - 185.51.8.92; 109.234.166.134; 104.28.15.191; 104.28.14.191
Related domains known to have participated in the campaign:
hxxp://ahtribune.com
hxxp://al-ahd.net
hxxp://al-naba.net
hxxp://albabylon.com
hxxp://aleppospace.com
hxxp://alghadeer.tv
hxxp://alharakah.net
hxxp://alhiwaraldini.com
hxxp://awdnews.com
hxxp://criticalstudies.org
hxxp://darinews.com
hxxp://elintelecto.com
hxxp://farhang-press.com
hxxp://harkarmusulunci.org
hxxp://iircenter.net
hxxp://iuvm-sy.net
hxxp://iuvmpixel.com
hxxp://jordan-times.com
hxxp://kelkeen.com
hxxp://kurdrudaw.com
hxxp://mediaadil.com
hxxp://roushd.com
hxxp://rpfront.com
hxxp://siampublic.com
hxxp://studiesaf.com
hxxp://syria-victory.com
hxxp://voiceofwadi.com
hxxp://yemenpress.org
Related domains known to have participated in the campaign:
hxxp://aftruth.com
hxxp://alhadathps.com
hxxp://alhadba.net
hxxp://almejlis.org
hxxp://almultaqaa.com
hxxp://altanzil.net
hxxp://bashiqa.com
hxxp://hindkhabar.com
hxxp://j-babel.com
hxxp://ksastudies.net
hxxp://hxxp://kurdestantimes.com
hxxp://libyaalmokhtar.com
hxxp://maghrebiyon.com
hxxp://masralkenana.com
hxxp://mediaadil.com
hxxp://voiceofwadi.com
Related emails known to have participated in the campaign:
abdullatifmansour@hotmail.com
aminbaik88@gmail.com
m.h.memo1992@gmail.com
walasr5@yahoo.com
moosavi.2010@gmail.com
iuvmdev@gmail.com
moosavi.2010@gmail.com
aminbaik88@gmail.com
jeddoub_21@yahoo.com
Related domains known to have participated in the campaign:
hxxp://adalah.com
hxxp://ababil.org
hxxp://aden-alyoum.com
hxxp://adentimes.net
hxxp://aftruth.com
hxxp://ageofpakistan.com
hxxp://ahtribune.com
hxxp://al-ahd.net
hxxp://al-hadath24.com
hxxp://al-naba.net
hxxp://al-sufia.com
hxxp://albabylon.com
hxxp://aleppospace.com
hxxp://alghadeer.tv
hxxp://alharakah.net
hxxp://alhiwaraldini.com
hxxp://almasirahpress.com
hxxp://almasirahtv.com
hxxp://alnaba.net
hxxp://alsudanalyoum.com
hxxp://altanzil.net
hxxp://atlaniccouncil.org
hxxp://awdnews.com
hxxp://beritadunia.net
hxxp://criticalstudies.org
hxxp://darinews.com
hxxp://elintelecto.com
hxxp://en.alghadeer.tv
hxxp://farhang-press.com
hxxp://gahvare.com
hxxp://getpanel.ir
hxxp://haghighah.com
hxxp://harkarmusulunci.org
hxxp://hindkhabar.com
hxxp://historiadepalestina.com
hxxp://hpiiran.com
hxxp://iircenter.net
hxxp://institutomanquehue.org
hxxp://iraqnewsservice.com
hxxp://irpowerweb.com
hxxp://iuvm-sy.net
hxxp://iuvm.org
hxxp://iuvmdaily.com
hxxp://iuvmdaily.net
hxxp://iuvmpixel.com
hxxp://iuvmpress.com
hxxp://iuvmsy.net
hxxp://iuvmtech.com
hxxp://iuvmtv.com
hxxp://jamekurdi.com
hxxp://jordan-times.com
hxxp://kelkeen.com
hxxp://kurdrudaw.com
hxxp://libertyfrontpress.com
hxxp://libyaalmokhtar.com
hxxp://mediaadil.com
hxxp://nilenetonline.com
hxxp://niletenonline.com
hxxp://nthnews.net
hxxp://pasargad.irandns.com
hxxp://pergiustizia.com
hxxp://puketnews.com
hxxp://qudspal.com
hxxp://raitunisia.com
hxxp://riolattj.com
hxxp://risolattj.com
hxxp://roushd.com
hxxp://rpfront.com
hxxp://rpfront.org
hxxp://rpfront.us
hxxp://sachtimes.com
hxxp://sepehrict.ir
hxxp://siampublic.com
hxxp://studiesaf.com
hxxp://syria-scope.com
hxxp://syria-victory.com
hxxp://theleadersnews.com
hxxp://usjournal.net
hxxp://voiceofwadi.com
hxxp://whatsupic.com
hxxp://yemaniate.net
hxxp://yemenpress.org
Stay tuned!
