*.cloudwaysapps.com

Phishing Download Exfiltration C&C

Attackers can use a subdomain of cloudwaysapps.com to host their phishing websites.

Attackers can use a subdomain of cloudwaysapps.com as their C&C server.

Attackers can add upload functionalities hosted on *.cloudwaysapps.com and exfiltrate data on there.

Malicious tools can be stored on *.cloudwaysapps.com and downloaded when required.

https://www.joesandbox.com/analysis/196213/0/html