We have developed TIPpers, which are incidents the ThreatConnect Research team flags for your awareness, so your organization can take decisive action.
TIPper: Adversary Obi Onyeka Spoofs Nigerian University
The website on the domain fintrustplc[.]com is a fake login page for Enugu State University of Science and Technology. (Enugu is the name of both a state in Nigeria and the capital city of that state.) The registrant, Obi Onyeka, uses the location “enugu N/A NIGERIA” on most of his domain registrations, which may suggest that he lives in the state (and maybe the city) of Enugu. This adversary is associated to the phishing group known as the Manipulaters Team.
For additional details, current ThreatConnect users can access this incident by selecting this LINK or search for incident “20160328A” in the ThreatConnect Platform.
If you do not have a ThreatConnect account, click HERE to access our Free Edition as well as 30-day access to our Subscriber Community. ThreatConnect’s Free Edition allows you to establish a basic threat intelligence practice, collaborate with your internal team, protect your organization with open source threat data, bulk import cyberthreat indicators, contribute to the ThreatConnect Community, and receive support and validation from outside researchers and analysts also using the platform. The Subscriber Community includes timely notification of threat incidents identified by the ThreatConnect Research team, an exclusive service offered at no additional charge to paying customers.