Filter and explore the collected OSINT data
Showing 1–50 of 5076 total
| Severity | Title | Category | Source | Indicators | Tags | Published |
|---|---|---|---|---|---|---|
| high | Price Request List #GSGPRO202600197.exe | malware | malware-bazaar | 911b4fe6d1761eed…, 3538ff52e4bd1fb7… | exe | 2026-10-20 |
| high | 80330f59bad607ce.js | malware | malware-bazaar | 80330f59bad607ce…, 41df9baa7e7384c2… | js | 2026-10-20 |
| critical | botnet_cc: undefined | threat-intel | threatfox | Vidar, AISURU, c2, Vshell, c7a50169dbc6d842a7e7d349513f88f1, Loader, stealer, ec141392be2e474ab700bf353b3b9f2c, njrat, remcos, REMOTEHOST, ac32fe0cdedaab512d4ba45a7cfcc26b, honeypot, f7e0bdc53604a00d861131d2693a943c, sliver c2, QuasarRAT, drb-ra, Mythic, Havoc, sliver, PureHVNC, PureRAT, RAT, CobaltStrike, JUNIO777, SERVER2405v2, GP, 332ps1Ago, Star-Baby-27, RatonRAT, RemcosRAT, ValleyRAT, valleyrat_s2, trum, 1718e0679220166cf123fbe6e40c635c, d85b02740b9fbbe0bc098debbc5a5109, moobot, Supershell, shodan, abe-bypass, ClickFix, com-hijacking, DesktopStreamClient, hermes, hermes-stealer, Hvnc, infostealer, loader-c2, Lold, MaaS, SyncService, exfil, FakeGit, LuaJIT, SmartLoader, Mirai, Remus, 373d420e3c3e68da3a553422caafc283, 1ca8afc0e9497e2ea687b455ff40cf1e, Adaptix, AdaptixC2, asyncrat, DinDoor, EvilGinx, EvilGoPhish, TRT UR BEST, XWorm, censys, exe, RevStealer, Android, GhostBat, mParivahan, veltrix, CantoIncognito, cryptomining, PoeLLM, Sektor7, elf, apix, fake-git, powershell, IRC, k4_irc_bot, onlycn, ROOTKIT, minefox, shellcode, stage2, fake-crack, Github, stager, IoT, Mozi, Romulus, ViriBack, 6713982832fdd0efe07912b12c5c5b2b, c1399bfb1be0a51415613edd6f0068c5, 5a4378fb90db39f09c7b18d1f314e645, 945c9f3c8cddcb7f33efce50a9a949ad, modat, murdoc, Covenant, Antidot, dcrat, b9df72d092aeb25d8cb28d34cc4984de, guloader, NSIS, XtremeRAT, NanoCore, Arechclient2, SectopRAT, default-cert, mtls, tofsee, Port$$, codec-cache, cve-2026-96656, miner, plex, Huatai007, CHAOS, Viper, cs-watermark-666666666, cs-watermark-987654321, Gafgyt, CheatSheet, dead-drop, gitlab, pastebin, DPRK, etherhiding, polinrider, backdoor, bot, Sh, dump-yuv, PM-5766, ErrTraffic, Polygon, 521048dd5a8917782e586ac60bc1eceb, WinWordl, botnet, CECbot, DDoS, host, go, legea, 369b7d35486e31c3854c6efc823ab439, sliverc2, d42249d8b3409d0cd65c3cc7f8267ec0, dotNET, fake-cheat, Qt5Widgets, sideloading, TeamSpeak, NUEVAS4001, airashi, Jackskid, rctea, MicroUpdate, apk, GoPhish, BruteRatel, adf0aff417ab94ddd17c189420efb165, ab0a59f4970a96fd6e8daa4f6f8e22cd, b89d843f29af2eed09805e9767a1165f, 379e62cc9396a8acb287a1e7d775797d, tor30fly, runelure, EyePyramid, f8358565e3d80fb9c69fcbe9d3349f1d, dongfeng, drifter, cryptominer, huggingface, MinerWars, GRIDTIDE, Stealc, potassium, woof, 5c07e21ca557de9ff0ce91d009c62e00, 5ecaf10790d5f89db8606b207b2143e4, 625f32b674143ce7827477f4a5675dfe, Meterpreter, d852ede598d72f2b3a4050576466ec62, hook, DanBot, SAVED START, DIVINE, BL-Networks, cab, nginx, payload-delivery, pycached, operator-server, Aptos, blockchain-C2, ContagiousInterview, macOS, MacSync, Protrollzx, WIN, newfish, CK-099, c8ae9fc91602b6596ce53dffcd0c5146, 19ccb70dbc12ef919d5869277e598933, tag, cs-watermark-391144938, inject-2, 20473, Cobalt Strike, 25820, 210558, Oct-1-2026, RemcosAgent, Vjw0rm, WSHRAT, dc2e5904be10c1f064ddfc0f4cca6898, Nexus 31-08-2026, CLOUDHAZE, live-fire-detonation, UNC7072, newember, SUPERMARIO, quasar, Oct_Milli, e5c73f2f0e4a2909e7e914ac4e867b57, d813994ce1dbd4db71c3b48d6cf58bfc, shadowpad, 2debf41cd243fa04fa0d0ba1afd03826, real, ONETOUCH, 0f81469cc7638ba7c82eaddbd6b3c20a, staging, Oct-5-2026 exploit, Oct-14-2026 Frost, EMBER 64, WARDENStealer, injectus, Remcos32b, 4040, RUST, URL, tauri, DarkSword, panel, Coruna, ios, MythicC2, Poseidon, KoiLoader, KoiStealer, BridgeAgent, hidden-desktop, dropped-by-amadey, Electron-ASAR, ExFiles, flomo-abuse, cowrie, dns-xor, OpenNIC, 212317, 202412, botnet_cc, config-server, Wicked Kryptex Test, cveil, NetSupport, poshc2, nuevos 07, SalatStealer, TON, webrat, fake-steam-client, phishing, Steam, Pass2, 317106, Amadey, smokeloader, Cloudzy, fake-ai-tool, Melty, Bst, 4bc2877d1ad24788eb5675dd034f5bad, f1f28418d97a5af5ae1f0ae2e29d2056, 4039, BDmonies, Rem1, GomoRAT, Gh0stRAT, blizzard-net, 8560, NMUOnAPUAPU | 2026-10-20 | |
| medium | payload: undefined | threat-intel | threatfox | Loader, macho, SNOWLIGHT, elf, Vshell, Mirai, cowrie, honeypot, upx, x86, Gafgyt, etherhiding, freight-lure, NodeJS, RAT, VNC, Amos, ClickFix, Foxveil, frame97, macOS, frame, nova, haven, chant, willow, quill, exe, remcos, RemcosRAT, AgentTesla, ps1, Sh, IoT, AUR, CHAOS, DirtyBlanket, linux, systemd-fontd, 0xf00dbeef, CorePayloadManager, Coruna, ios, analystic, DarkSword, GHOSTBLADE, P7, salted-hash, Bashlite, Ngioweb, xorddos, ACR, ACRStealer, fake game, ROM, setup.exe, setup.py, fake game setup, js, QuasarRAT, masslogger, Formbook, asyncrat, cloaked, Dropper, MacSync, dll, Flame, SalatStealer, stealer, cve-2026-96656, miner, plex, Android, GhostBat, ghostx-panel, mParivahan, veltrix, caira, CLOUDHAZE, PageStone, QuartzLine, fake-git, Discord, encrypted, iraenc, gitlab, RUST, IRC, k4_irc_bot, onlycn, ROOTKIT, jar, minecraft, mod, Shell, doc8, python, wraith, RevStealer, HTA, codec-cache, Keylogger, VIPKeylogger, Alien, powershell, UNC7072, auditpolcore, DLL-sideloading, OVH, Python39.rar, DvnX, unpacked, WARDENStealer, YapStealer, rozena, GravityRAT, armv5, DDoS, go, legea, x86_64, MIPS, armv7, mips64, arm64, mipsle, sideloading, Qt5Widgets, TeamSpeak, bingads, Expiro, fba, pdf-suite, UnifyInstaller, dropped-by-OffLoader, acrobat, ppc_free_pdfsuite, puwaders, store-decoy, ChatGPT, CoinMiner, Amadey, FlyLegitBot, Vidar, DDoSAgent, Remus, P2PInfect, appk, sshdkit, SSHDoor, Bobik, clipbanker, 54e64e, dropped-by-amadey, LummaStealer, ZigClipper, dropped-by-RemusStealer, zeus, xmrig, MillenuimRAT, runelure, file-size-evasion, masquerading, terminalfix, token-impersonation, dll-sideloading-adjacent, njrat, arc, 317106, cred.dll, plugin, backdoor, x86-64, ssh-honeypot, shem, mipsel, RustyStealer, BlankGrabber, BlankStealer, Electron-ASAR, ExFiles, flomo-abuse, HijackLoader, infostealer, fake-ai-tool, jcef, crypto-targeting, persistence, token-theft, encrypted-payload, ARM, hajime, Downloader, botnet | 2026-10-20 | |
| high | export.php | malware | malware-bazaar | 5414de616cb7cad3…, 4e9b523f07c5e9ec… | ClickFix, Efimer, exe | 2026-10-20 |
| high | file | malware | malware-bazaar | 1a9d8635574518b8…, 8e309a612d2160d8… | dropped-by-Vidar, exe, f7e0bdc53604a00d861131d2693a943c, infostealer | 2026-10-20 |
| high | SecuriteInfo.com.Heur.10656.3336 | malware | malware-bazaar | 78d62fc5a747d68a…, 1def105adc234c84… | msi | 2026-10-20 |
| critical | payload_delivery: undefined | threat-intel | threatfox | Cloudflare, gif, PHP, webshell, WordPress, workers.dev, wp-admin, BSC, dead-drop, etherhiding, smart-contract, freight-lure, panel, RAT, NodeJS, Vidar, c2, ec141392be2e474ab700bf353b3b9f2c, Loader, stealer, ClearFake, ClickFix, EtherHidingMagecart, mac-0x68dc, macOS, HadesStealer, HadeStealer, elf, IoT, Mozi, 46ffc506f663afc29ff2cb6c97f94000, mac-0xdcf2, mac-0x0f14, AUR, CHAOS, DirtyBlanket, linux, onion, systemd-fontd, gitflic, wayback, SocGholish, 55001da20373e92a4261b69e9f1087ac, btrf36, Coruna, DarkSword, ios, SilentNet, SmartApeSG, error524, fedex, PhaaS, smishing, 1718e0679220166cf123fbe6e40c635c, d852ede598d72f2b3a4050576466ec62, DHT, protokol, Mac, Kongtuke, Amos, Foxveil, ErrTraffic, Polygon, remcos, moobot, asyncrat, Remus, MacSync, ZigClipper, quasar, Android, GhostBat, ghostx-panel, mParivahan, veltrix, apix, fake-git, powershell, IRC, k4_irc_bot, jar, minecraft, abe-bypass, com-hijacking, hermes, hermes-stealer, infostealer, 6713982832fdd0efe07912b12c5c5b2b, 379e62cc9396a8acb287a1e7d775797d, c7a50169dbc6d842a7e7d349513f88f1, Mirai, DCHOST, guloader, exe, RevStealer, OffLoader, codec-cache, cve-2026-96656, miner, plex, funrat, MaksRAT, PussyRAT, TON, auditpolcore, DLL-sideloading, OVH, CLOUDHAZE, UNC7072, DIVINEX, DvnX, WARDENStealer, YapStealer, ContagiousInterview, DPRK, fake-recruitment, RuntimeBroker, Websocket, DDoS, garble, golang, minefox, ab0a59f4970a96fd6e8daa4f6f8e22cd, b9df72d092aeb25d8cb28d34cc4984de, fallback, go, legea, fabric, java, DGA, Amadey, SalatStealer, xmrig, dropped-by-OffLoader, gamaredon, GammaSteel, CobaltStrike, drb-ra, modat, b89d843f29af2eed09805e9767a1165f, d85b02740b9fbbe0bc098debbc5a5109, sepolia, AppSheet share.google zip PureRAT, runelure, validin, valleyrat_s2, f7e0bdc53604a00d861131d2693a943c, huggingface, SpacesForRent, Stresser, Github, Stealc, RemusStealer, c1399bfb1be0a51415613edd6f0068c5, d42249d8b3409d0cd65c3cc7f8267ec0, 1ca8afc0e9497e2ea687b455ff40cf1e, zero stealer, cab, Certum, Dropper, EV-signed, payload-delivery, pycached, python, signed, socketio, skimming, victim, 5ecaf10790d5f89db8606b207b2143e4, compromised, etherhide, fakeupdates, PayloadDelivery, stager, botnet, malware, XWorm, cracked-software, RUST, staging, vscode, vscode-tasks-folderOpen, PLASMAGRID, GHOSTBLADE, supply-chain, web-drive-by, Mythic, MythicC2, Poseidon, ScreenConnect, msi, cowrie, dns-xor, honeypot, OpenNIC, tauri, fake-steam-client, phishing, Steam, Magecart, fake-ai-tool, Overlord, SloppyRAT, GomoRAT, GhostRAT, Gh0stRAT, FakeLogin, YoungLotus, applescript, ValleyRAT, dcrat | 2026-10-20 | |
| high | 570e354d.ps1 | malware | malware-bazaar | 570e354d5ba56a24…, edf8fc2c9371c31a… | etherhiding, freight-lure, miner, powershell, telegram | 2026-10-20 |
| high | vnc_bootstrap.ps1 | malware | malware-bazaar | 9165aca66a9d89b7…, 4b4d4981cced0609… | etherhiding, freight-lure, nodejs, rat, vnc | 2026-10-20 |
| high | main_v4.js | malware | malware-bazaar | 696fc814fa188e91…, 389b294da604ae04… | etherhiding, freight-lure, nodejs, rat, vnc | 2026-10-20 |
| high | main_v3.js | malware | malware-bazaar | c946dc76e0b39974…, 6fa465d81afee23c… | etherhiding, freight-lure, nodejs, rat, vnc | 2026-10-20 |
| high | main_v2.js | malware | malware-bazaar | 11410cdf29bc1f1d…, 5f3890d0e1a671e5… | etherhiding, freight-lure, nodejs, rat, vnc | 2026-10-20 |
| high | main_v1.js | malware | malware-bazaar | 4c56e9af087b0264…, 0fe4c5d41336b604… | etherhiding, freight-lure, nodejs, rat, vnc | 2026-10-20 |
| high | hello.hta | malware | malware-bazaar | 3913a1f77203ebb9…, 11e67c1d8c74edef… | etherhiding, freight-lure, nodejs, rat, vnc | 2026-10-20 |
| high | 0e814f4d934e4a57.bin | malware | malware-bazaar | 0e814f4d934e4a57…, 16c7a146c567d4e1… | macho, snowlight | 2026-10-20 |
| high | 884c70bde746092d.bin | malware | malware-bazaar | 884c70bde746092d…, d7ed538dd1824c4a… | macho | 2026-10-20 |
| high | 48e9eab9bb48d75b.bin | malware | malware-bazaar | 48e9eab9bb48d75b…, 0735c9468434e0ac… | elf, gafgyt, mirai, botnet | 2026-10-20 |
| high | 05ca064a34061e79.bin | malware | malware-bazaar | 05ca064a34061e79…, 49b5f14740c549ec… | macho | 2026-10-20 |
| high | 92e1930e6de81598.bin | malware | malware-bazaar | 92e1930e6de81598…, 11743b0b6d35319e… | elf, Mirai, vshell, botnet | 2026-10-20 |
| high | 085dc35f07a9b087.bin | malware | malware-bazaar | 085dc35f07a9b087…, 7f0aa27ca68fd034… | elf, Snowlight, vshell | 2026-10-20 |
| unknown | CVE-2026-75753 — Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby… | vulnerability | nvd | CVE-2026-75753 | 2026-10-20 | |
| unknown | CVE-2026-17518 — Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenti… | vulnerability | nvd | CVE-2026-17518 | 2026-10-20 | |
| high | CVE-2026-105299 — Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream reques… | vulnerability | nvd | CVE-2026-105299 | 2026-10-20 | |
| unknown | CVE-2026-102438 — An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execut… | vulnerability | nvd | CVE-2026-102438 | 2026-10-20 | |
| critical | Malicious IP: 103.216.145.2 | ip-reputation | abuse-ipdb | 103.216.145.2 | 2026-10-20 | |
| critical | Malicious IP: 106.13.95.198 | ip-reputation | abuse-ipdb | 106.13.95.198 | 2026-10-20 | |
| critical | Malicious IP: 43.135.144.81 | ip-reputation | abuse-ipdb | 43.135.144.81 | 2026-10-20 | |
| critical | Malicious IP: 14.51.12.142 | ip-reputation | abuse-ipdb | 14.51.12.142 | 2026-10-20 | |
| critical | Malicious IP: 13.140.80.140 | ip-reputation | abuse-ipdb | 13.140.80.140 | 2026-10-20 | |
| critical | Malicious IP: 185.223.235.46 | ip-reputation | abuse-ipdb | 185.223.235.46 | 2026-10-20 | |
| critical | Malicious IP: 109.160.32.123 | ip-reputation | abuse-ipdb | 109.160.32.123 | 2026-10-20 | |
| critical | Malicious IP: 57.131.50.86 | ip-reputation | abuse-ipdb | 57.131.50.86 | 2026-10-20 | |
| critical | Malicious IP: 135.119.91.34 | ip-reputation | abuse-ipdb | 135.119.91.34 | 2026-10-20 | |
| critical | Malicious IP: 151.243.11.150 | ip-reputation | abuse-ipdb | 151.243.11.150 | 2026-10-20 | |
| critical | Malicious IP: 77.239.124.77 | ip-reputation | abuse-ipdb | 77.239.124.77 | 2026-10-20 | |
| critical | Malicious IP: 2.57.217.229 | ip-reputation | abuse-ipdb | 2.57.217.229 | 2026-10-20 | |
| critical | Malicious IP: 122.170.99.195 | ip-reputation | abuse-ipdb | 122.170.99.195 | 2026-10-20 | |
| critical | Malicious IP: 172.212.203.117 | ip-reputation | abuse-ipdb | 172.212.203.117 | 2026-10-20 | |
| critical | Malicious IP: 186.122.177.140 | ip-reputation | abuse-ipdb | 186.122.177.140 | 2026-10-20 | |
| critical | Malicious IP: 210.91.153.182 | ip-reputation | abuse-ipdb | 210.91.153.182 | 2026-10-20 | |
| critical | Malicious IP: 172.209.208.96 | ip-reputation | abuse-ipdb | 172.209.208.96 | 2026-10-20 | |
| critical | Malicious IP: 43.172.117.23 | ip-reputation | abuse-ipdb | 43.172.117.23 | 2026-10-20 | |
| critical | Malicious IP: 115.178.75.242 | ip-reputation | abuse-ipdb | 115.178.75.242 | 2026-10-20 | |
| critical | Malicious IP: 45.115.26.61 | ip-reputation | abuse-ipdb | 45.115.26.61 | 2026-10-20 | |
| high | file | malware | malware-bazaar | 0a7271ec4b47e3f4…, ead24d772b15a770… | B, dropped-by-GCleaner, exe, MIX8.file | 2026-10-20 |
| high | SecuriteInfo.com.Heur.9029.26114 | malware | malware-bazaar | f189bdd403dd6058…, e7926f9d96c07198… | msi | 2026-10-20 |
| unknown | CVE-2026-86981 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac… | vulnerability | nvd | CVE-2026-86981 | 2026-10-20 | |
| unknown | CVE-2026-86979 — A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An… | vulnerability | nvd | CVE-2026-86979 | 2026-10-20 | |
| unknown | CVE-2026-86977 — An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS… | vulnerability | nvd | CVE-2026-86977 | 2026-10-20 |