bitbucket.org

Phishing Download Exfiltration C&C

Attackers can host malware on bitbucket.org and send phishing emails to have users download the malware.

bitbucket.org can be used to host C&C commands and have malware periodically fetch them.

Attackers can push data onto bitbucket.org repositories.

Attackers can host malicious files on bitbucket.org and when needed, the files can be downloaded.

https://www.joesandbox.com/analysis/401517/0/html