{ "Event": { "analysis": "2", "date": "2020-01-07", "extends_uuid": "", "info": "OSINT - Spam via mobile phone", "publish_timestamp": "1578407441", "published": true, "threat_level_id": "3", "timestamp": "1578407416", "uuid": "5e149458-bdf4-4f6a-8e1c-8f1102de0b81", "Orgc": { "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "Tag": [ { "colour": "#4e9c00", "local": "0", "name": "circl:incident-classification=\"scam\"", "relationship_type": "" }, { "colour": "#004646", "local": "0", "name": "type:OSINT", "relationship_type": "" }, { "colour": "#0071c3", "local": "0", "name": "osint:lifetime=\"perpetual\"", "relationship_type": "" }, { "colour": "#0087e8", "local": "0", "name": "osint:certainty=\"50\"", "relationship_type": "" }, { "colour": "#ffffff", "local": "0", "name": "tlp:white", "relationship_type": "" }, { "colour": "#0088cc", "local": "0", "name": "misp-galaxy:financial-fraud=\"Vishing\"", "relationship_type": "" } ], "Attribute": [ { "category": "Financial fraud", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1578407043", "to_ids": true, "type": "phone-number", "uuid": "5e149483-95c4-46dc-8175-4add02de0b81", "value": "+4917071524639" }, { "category": "Financial fraud", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1578407049", "to_ids": true, "type": "phone-number", "uuid": "5e149489-9f8c-4ed9-947c-4bb002de0b81", "value": "+33606117967" }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1578407087", "to_ids": false, "type": "link", "uuid": "5e1494af-98cc-4fa7-b699-8f2202de0b81", "value": "https://who-calls.me.uk/phone/08081896207" }, { "category": "Financial fraud", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1578407415", "to_ids": true, "type": "phone-number", "uuid": "5e1495f7-7e3c-426a-ab56-460802de0b81", "value": "+448081896207" } ], "Object": [ { "comment": "", "deleted": false, "description": "Microblog post like a Twitter tweet or a post on a Facebook wall.", "meta-category": "misc", "name": "microblog", "template_uuid": "8ec8c911-ddbe-4f5b-895b-fbff70c42a60", "template_version": "10", "timestamp": "1578407390", "uuid": "5e14956e-c830-4caa-b8b3-46a802de0b81", "ObjectReference": [ { "comment": "", "object_uuid": "5e14956e-c830-4caa-b8b3-46a802de0b81", "referenced_uuid": "5e149483-95c4-46dc-8175-4add02de0b81", "relationship_type": "includes", "timestamp": "1578407343", "uuid": "5e1495af-bb3c-4793-838e-4f8602de0b81" }, { "comment": "", "object_uuid": "5e14956e-c830-4caa-b8b3-46a802de0b81", "referenced_uuid": "5e149489-9f8c-4ed9-947c-4bb002de0b81", "relationship_type": "includes", "timestamp": "1578407365", "uuid": "5e1495c5-5218-4c2b-8c12-8f2302de0b81" }, { "comment": "", "object_uuid": "5e14956e-c830-4caa-b8b3-46a802de0b81", "referenced_uuid": "5e1494af-98cc-4fa7-b699-8f2202de0b81", "relationship_type": "includes", "timestamp": "1578407390", "uuid": "5e1495de-6114-4165-b860-8f2302de0b81" } ], "Attribute": [ { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "type", "timestamp": "1578407279", "to_ids": false, "type": "text", "uuid": "5e14956f-8074-4f08-9427-46a802de0b81", "value": "Twitter" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "post", "timestamp": "1578407284", "to_ids": false, "type": "text", "uuid": "5e149574-5d60-4fbc-aed0-46a802de0b81", "value": "Weird stuff happening on my phone. Call from German number, then from a French number. Both left voice mails with a robot voice reading out some numbers.\r\n\r\nA phone number verification service?\r\n\r\nAnyone recognise them? \r\n\u00f0\u0178\u2021\u00a9\u00f0\u0178\u2021\u00aa +4917071524639\r\n\u00f0\u0178\u2021\u00ab\u00f0\u0178\u2021\u00b7 +33606117967" }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "link", "timestamp": "1578407284", "to_ids": false, "type": "link", "uuid": "5e149574-e274-4c99-961a-46a802de0b81", "value": "https://twitter.com/edent/status/1214494432046800896" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "verified-username", "timestamp": "1578407284", "to_ids": false, "type": "text", "uuid": "5e149574-d618-4224-84bf-46a802de0b81", "value": "Verified" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "state", "timestamp": "1578407284", "to_ids": false, "type": "text", "uuid": "5e149574-6690-46ee-a413-46a802de0b81", "value": "Informative" } ] } ] } }