value:  Mustang Panda have acquired C2 domains prior to operations. ;; Sandworm Team has registered domain names and created URLs that are often designed to mimic or spoof legitimate websites such as email login pages online file sharing and storage websites and password reset pages. ;; Silent Librarian has acquired domains to establish credential harvesting pages often spoofing the target organization and using free top level domains .TK .ML .GA .CF and .GQ. ;; UNC2452 has acquired C2 domains through resellers. ;; ZIRCONIUM has purchased domains for use in targeted campaigns.
name: Acquire Infrastructure: Domains