# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: FlowCloud, LookBack

# Reference: https://www.proofpoint.com/us/blog/threat-insight/ta410-group-behind-lookback-attacks-against-us-utilities-sector-returns-new
# Reference: https://otx.alienvault.com/pulse/5edf9678c760e3c7ca6fdf77

asce.email
ffca.caibi379.com
daveengineer.com
energysemi.com
powersafetraining.net
powersafetrainings.org

# Reference: https://threatpost.com/espionage-group-utilities-spy-tool/156425/

188.131.233.27:55555
188.131.233.27:55556
