Attackers can use a subdomain of cloudwaysapps.com to host their phishing websites.
Command and Control
Attackers can use a subdomain of cloudwaysapps.com as their C&C server.
Attackers can add upload functionalities hosted on *.cloudwaysapps.com and exfiltrate data on there.
Malicious tools can be stored on *.cloudwaysapps.com and downloaded when required.
Last Update: 2021-11-10