190 lines
No EOL
6 KiB
JSON
190 lines
No EOL
6 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "2",
|
|
"date": "2020-01-07",
|
|
"extends_uuid": "",
|
|
"info": "OSINT - Spam via mobile phone",
|
|
"publish_timestamp": "1578407441",
|
|
"published": true,
|
|
"threat_level_id": "3",
|
|
"timestamp": "1578407416",
|
|
"uuid": "5e149458-bdf4-4f6a-8e1c-8f1102de0b81",
|
|
"Orgc": {
|
|
"name": "CIRCL",
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#509f00",
|
|
"name": "circl:incident-classification=\"scam\""
|
|
},
|
|
{
|
|
"colour": "#004646",
|
|
"name": "type:OSINT"
|
|
},
|
|
{
|
|
"colour": "#0071c3",
|
|
"name": "osint:lifetime=\"perpetual\""
|
|
},
|
|
{
|
|
"colour": "#0087e8",
|
|
"name": "osint:certainty=\"50\""
|
|
},
|
|
{
|
|
"colour": "#ffffff",
|
|
"name": "tlp:white"
|
|
},
|
|
{
|
|
"colour": "#0088cc",
|
|
"name": "misp-galaxy:financial-fraud=\"Vishing\""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Financial fraud",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1578407043",
|
|
"to_ids": true,
|
|
"type": "phone-number",
|
|
"uuid": "5e149483-95c4-46dc-8175-4add02de0b81",
|
|
"value": "+4917071524639"
|
|
},
|
|
{
|
|
"category": "Financial fraud",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1578407049",
|
|
"to_ids": true,
|
|
"type": "phone-number",
|
|
"uuid": "5e149489-9f8c-4ed9-947c-4bb002de0b81",
|
|
"value": "+33606117967"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1578407087",
|
|
"to_ids": false,
|
|
"type": "link",
|
|
"uuid": "5e1494af-98cc-4fa7-b699-8f2202de0b81",
|
|
"value": "https://who-calls.me.uk/phone/08081896207"
|
|
},
|
|
{
|
|
"category": "Financial fraud",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1578407415",
|
|
"to_ids": true,
|
|
"type": "phone-number",
|
|
"uuid": "5e1495f7-7e3c-426a-ab56-460802de0b81",
|
|
"value": "+448081896207"
|
|
}
|
|
],
|
|
"Object": [
|
|
{
|
|
"comment": "",
|
|
"deleted": false,
|
|
"description": "Microblog post like a Twitter tweet or a post on a Facebook wall.",
|
|
"meta-category": "misc",
|
|
"name": "microblog",
|
|
"template_uuid": "8ec8c911-ddbe-4f5b-895b-fbff70c42a60",
|
|
"template_version": "10",
|
|
"timestamp": "1578407390",
|
|
"uuid": "5e14956e-c830-4caa-b8b3-46a802de0b81",
|
|
"ObjectReference": [
|
|
{
|
|
"comment": "",
|
|
"object_uuid": "5e14956e-c830-4caa-b8b3-46a802de0b81",
|
|
"referenced_uuid": "5e149483-95c4-46dc-8175-4add02de0b81",
|
|
"relationship_type": "includes",
|
|
"timestamp": "1578407343",
|
|
"uuid": "5e1495af-bb3c-4793-838e-4f8602de0b81"
|
|
},
|
|
{
|
|
"comment": "",
|
|
"object_uuid": "5e14956e-c830-4caa-b8b3-46a802de0b81",
|
|
"referenced_uuid": "5e149489-9f8c-4ed9-947c-4bb002de0b81",
|
|
"relationship_type": "includes",
|
|
"timestamp": "1578407365",
|
|
"uuid": "5e1495c5-5218-4c2b-8c12-8f2302de0b81"
|
|
},
|
|
{
|
|
"comment": "",
|
|
"object_uuid": "5e14956e-c830-4caa-b8b3-46a802de0b81",
|
|
"referenced_uuid": "5e1494af-98cc-4fa7-b699-8f2202de0b81",
|
|
"relationship_type": "includes",
|
|
"timestamp": "1578407390",
|
|
"uuid": "5e1495de-6114-4165-b860-8f2302de0b81"
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Other",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": true,
|
|
"object_relation": "type",
|
|
"timestamp": "1578407279",
|
|
"to_ids": false,
|
|
"type": "text",
|
|
"uuid": "5e14956f-8074-4f08-9427-46a802de0b81",
|
|
"value": "Twitter"
|
|
},
|
|
{
|
|
"category": "Other",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"object_relation": "post",
|
|
"timestamp": "1578407284",
|
|
"to_ids": false,
|
|
"type": "text",
|
|
"uuid": "5e149574-5d60-4fbc-aed0-46a802de0b81",
|
|
"value": "Weird stuff happening on my phone. Call from German number, then from a French number. Both left voice mails with a robot voice reading out some numbers.\r\n\r\nA phone number verification service?\r\n\r\nAnyone recognise them? \r\n\u00f0\u0178\u2021\u00a9\u00f0\u0178\u2021\u00aa +4917071524639\r\n\u00f0\u0178\u2021\u00ab\u00f0\u0178\u2021\u00b7 +33606117967"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"object_relation": "link",
|
|
"timestamp": "1578407284",
|
|
"to_ids": false,
|
|
"type": "link",
|
|
"uuid": "5e149574-e274-4c99-961a-46a802de0b81",
|
|
"value": "https://twitter.com/edent/status/1214494432046800896"
|
|
},
|
|
{
|
|
"category": "Other",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"object_relation": "verified-username",
|
|
"timestamp": "1578407284",
|
|
"to_ids": false,
|
|
"type": "text",
|
|
"uuid": "5e149574-d618-4224-84bf-46a802de0b81",
|
|
"value": "Verified"
|
|
},
|
|
{
|
|
"category": "Other",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": true,
|
|
"object_relation": "state",
|
|
"timestamp": "1578407284",
|
|
"to_ids": false,
|
|
"type": "text",
|
|
"uuid": "5e149574-6690-46ee-a413-46a802de0b81",
|
|
"value": "Informative"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
} |