8af777d0f92cef2d9040a634527c3753669235589c23129f09855ad0ebe10c6f
GoogleUpdateSetup.exe
Guys. 'googleupdatesetup.exe' has been spread by a actor that uses Snakekeylogger. I suspect this certificate to be abused.
Tag Cert Abuse Specialist into this post please.
#Tycoon#Phishing
Got more domains with the help of @g0njxa 571 domains linked to Tycoon.
Here’s a list of domains+subdomains+full path, hosting Outlook/Gmail phishing pages:
https://t.co/kX73ISVgPc
A few of them are waiting for API renew (TA's didn't pay the bill 😂)