threatintel
actor tracker
IOC pivot
ioc · domain

adobe-us-updatefiles[.]digital

RU · RussiaLockBitconfidence · high

Tool-download domain contacted by adobelib.dll POST requests in the LockBit 3.0 Citrix Bleed campaign; resolved to 172.67.129.176 and 104.21.1.180 as of November 16, 2023. Table 3 of AA23-325A.

family
LockBit
first seen
Nov 15, 2023
publisher
CISA
source citation