Attackers can use a customized subdomain of mybluehost.me to host their phishing websites.
Command and Control
Attackers can use a customized subdomain of mybluehost.me as their C&C server.
Attackers can add upload functionalities hosted on *.mybluehost.me and exfiltrate data on there.
Malicious tools can be stored on *.mybluehost.me and downloaded when required.
Last Update: 2022-03-27
Credits: Adithya Ravoori - @ravooriadithya