Filter and explore the collected OSINT data
Showing 1–50 of 4725 total
| Severity | Title | Category | Source | Indicators | Tags | Published |
|---|---|---|---|---|---|---|
| critical | payload_delivery: undefined | threat-intel | threatfox | gif, PHP, webshell, WordPress, wp-admin, remcos, CLOUDHAZE, RAT, RUST, UNC7072, 5a4378fb90db39f09c7b18d1f314e645, c2, Remus, Vidar, Cloudflare, workers.dev, b89d843f29af2eed09805e9767a1165f, Loader, stealer, 4cb058222082b242d62fa7b3feb8b8e1, ec141392be2e474ab700bf353b3b9f2c, ClearFake, asyncrat, a48f948d92da7370f769ca840ec10cd1, mac-0x68dc, macOS, mac-0xdcf2, SmartApeSG, elf, IoT, Mozi, STRU, mac-0x0f14, botnet, cve-2026-96656, DDoS, plex, python, fake-movie, infostealer, torrent, ClickFix, etherhiding, MacSync, OffLoader, 6713982832fdd0efe07912b12c5c5b2b, valleyrat_s2, SilentNet, error524, fedex, PhaaS, smishing, btrf36, Coruna, DarkSword, ios, SocGholish, HadesStealer, HadeStealer, freight-lure, panel, historical, irc-bot, EtherHidingMagecart, 1718e0679220166cf123fbe6e40c635c, d852ede598d72f2b3a4050576466ec62, dead-drop, DHT, protokol, Mac, Kongtuke, Amos, Foxveil, ErrTraffic, Polygon, moobot, ZigClipper, quasar, Android, GhostBat, ghostx-panel, mParivahan, veltrix, apix, fake-git, powershell, IRC, k4_irc_bot, jar, minecraft, abe-bypass, com-hijacking, hermes, hermes-stealer, 379e62cc9396a8acb287a1e7d775797d, c7a50169dbc6d842a7e7d349513f88f1, Mirai, DCHOST, guloader, exe, RevStealer, codec-cache, miner, funrat, MaksRAT, PussyRAT, TON, auditpolcore, DLL-sideloading, OVH, DIVINEX, DvnX, WARDENStealer, YapStealer, ContagiousInterview, DPRK, fake-recruitment, RuntimeBroker, Websocket, garble, golang, minefox, ab0a59f4970a96fd6e8daa4f6f8e22cd, b9df72d092aeb25d8cb28d34cc4984de, fallback, go, legea, fabric, java, DGA, Amadey, SalatStealer, xmrig, dropped-by-OffLoader, gamaredon, GammaSteel, CobaltStrike, drb-ra, modat, d85b02740b9fbbe0bc098debbc5a5109, sepolia, AppSheet share.google zip PureRAT, runelure, validin, f7e0bdc53604a00d861131d2693a943c, huggingface, SpacesForRent, Stresser, Github, Stealc, RemusStealer, c1399bfb1be0a51415613edd6f0068c5, d42249d8b3409d0cd65c3cc7f8267ec0, 1ca8afc0e9497e2ea687b455ff40cf1e, zero stealer, cab, Certum, Dropper, EV-signed, payload-delivery, pycached, signed, socketio, skimming, victim, 5ecaf10790d5f89db8606b207b2143e4, compromised, etherhide, fakeupdates, PayloadDelivery, stager, malware, XWorm, cracked-software, staging, vscode, vscode-tasks-folderOpen, PLASMAGRID, GHOSTBLADE, supply-chain, web-drive-by, Mythic, MythicC2, Poseidon, ScreenConnect, msi, cowrie, dns-xor, honeypot, OpenNIC, tauri, fake-steam-client, phishing, Steam | 2026-10-20 | |
| critical | botnet_cc: undefined | threat-intel | threatfox | 5a4378fb90db39f09c7b18d1f314e645, c2, Remus, Vidar, 369d758b340d46ac0c1a255a6eb00932, remcos, ec141392be2e474ab700bf353b3b9f2c, Loader, stealer, CobaltStrike, drb-ra, modat, 1d00fb4b29510e4b8d8d8b9945781bf9, c9fb6dca12e42250d8dd37f6e159359f, NanoCore, RAT, Vshell, 945c9f3c8cddcb7f33efce50a9a949ad, 9aa15979f4029b4124fbc2cb2aa32554, b78c711bb43e5b10ca0af4a1e9832e9e, AISURU, 369b7d35486e31c3854c6efc823ab439, 4cb058222082b242d62fa7b3feb8b8e1, 02cc1a69f9fc7c67cb03b80df1882fa3, 521048dd5a8917782e586ac60bc1eceb, 46ffc506f663afc29ff2cb6c97f94000, Mythic, 7b92032a6256fc026ba4b019d418584d, 0f81469cc7638ba7c82eaddbd6b3c20a, 625f32b674143ce7827477f4a5675dfe, 3be863dbba132baf5a22b74f7696febf, shodan, sliver, QuasarRAT, c7a50169dbc6d842a7e7d349513f88f1, botnet, cve-2026-96656, DDoS, plex, python, DinDoor, PureHVNC, PureRAT, asyncrat, AdaptixC2, dcrat, BianLian, REMOTEHOST, Port$$, B19M, fake-movie, infostealer, torrent, a48f948d92da7370f769ca840ec10cd1, Viper, Fadawk, honeypot, sliver c2, etherhiding, freight-lure, NodeJS, Downloader, Github, go, SalatStealer, Beacon, http, bashagent, powershell, ssh-backdoor, wsvc, TRT UR BEST, Loki, LOL, njrat, ac32fe0cdedaab512d4ba45a7cfcc26b, f7e0bdc53604a00d861131d2693a943c, 55001da20373e92a4261b69e9f1087ac, Havoc, JUNIO777, SERVER2405v2, GP, 332ps1Ago, Star-Baby-27, RatonRAT, RemcosRAT, ValleyRAT, valleyrat_s2, trum, 1718e0679220166cf123fbe6e40c635c, d85b02740b9fbbe0bc098debbc5a5109, moobot, Supershell, abe-bypass, ClickFix, com-hijacking, DesktopStreamClient, hermes, hermes-stealer, Hvnc, loader-c2, Lold, MaaS, SyncService, exfil, FakeGit, LuaJIT, SmartLoader, Mirai, 373d420e3c3e68da3a553422caafc283, 1ca8afc0e9497e2ea687b455ff40cf1e, Adaptix, EvilGinx, EvilGoPhish, XWorm, censys, exe, RevStealer, Android, GhostBat, mParivahan, veltrix, CantoIncognito, cryptomining, PoeLLM, Sektor7, elf, apix, fake-git, IRC, k4_irc_bot, onlycn, ROOTKIT, minefox, shellcode, stage2, fake-crack, stager, IoT, Mozi, Romulus, ViriBack, 6713982832fdd0efe07912b12c5c5b2b, c1399bfb1be0a51415613edd6f0068c5, murdoc, Covenant, Antidot, b9df72d092aeb25d8cb28d34cc4984de, guloader, NSIS, XtremeRAT, Arechclient2, SectopRAT, default-cert, mtls, tofsee, codec-cache, miner, Huatai007, CHAOS, cs-watermark-666666666, cs-watermark-987654321, Gafgyt, CheatSheet, dead-drop, gitlab, pastebin, DPRK, polinrider, backdoor, bot, Sh, dump-yuv, PM-5766, ErrTraffic, Polygon, WinWordl, CECbot, host, legea, sliverc2, d42249d8b3409d0cd65c3cc7f8267ec0, dotNET, fake-cheat, Qt5Widgets, sideloading, TeamSpeak, NUEVAS4001, airashi, Jackskid, rctea, MicroUpdate, apk, GoPhish, BruteRatel, adf0aff417ab94ddd17c189420efb165, ab0a59f4970a96fd6e8daa4f6f8e22cd, b89d843f29af2eed09805e9767a1165f, 379e62cc9396a8acb287a1e7d775797d, tor30fly, runelure, EyePyramid, f8358565e3d80fb9c69fcbe9d3349f1d, dongfeng, drifter, cryptominer, huggingface, MinerWars, GRIDTIDE, Stealc, potassium, woof, 5c07e21ca557de9ff0ce91d009c62e00, 5ecaf10790d5f89db8606b207b2143e4, Meterpreter, d852ede598d72f2b3a4050576466ec62, hook, DanBot, SAVED START, DIVINE, BL-Networks, cab, nginx, payload-delivery, pycached, operator-server, Aptos, blockchain-C2, ContagiousInterview, macOS, MacSync, Protrollzx, WIN, newfish, CK-099, c8ae9fc91602b6596ce53dffcd0c5146, 19ccb70dbc12ef919d5869277e598933, tag, cs-watermark-391144938, inject-2, 20473, Cobalt Strike, 25820, 210558, Oct-1-2026, RemcosAgent, Vjw0rm, WSHRAT, dc2e5904be10c1f064ddfc0f4cca6898, Nexus 31-08-2026, CLOUDHAZE, live-fire-detonation, UNC7072, newember, SUPERMARIO, quasar, Oct_Milli, e5c73f2f0e4a2909e7e914ac4e867b57, d813994ce1dbd4db71c3b48d6cf58bfc, shadowpad, 2debf41cd243fa04fa0d0ba1afd03826, real, ONETOUCH, staging, Oct-5-2026 exploit, Oct-14-2026 Frost, EMBER 64, WARDENStealer, injectus, Remcos32b, 4040, RUST, URL, tauri, DarkSword, panel, Coruna, ios, MythicC2, Poseidon, KoiLoader, KoiStealer, BridgeAgent, hidden-desktop, dropped-by-amadey, Electron-ASAR, ExFiles, flomo-abuse, cowrie, dns-xor, OpenNIC, 212317, 202412, botnet_cc, config-server, Wicked Kryptex Test, cveil, NetSupport, poshc2, nuevos 07, TON, webrat, fake-steam-client, phishing, Steam, Pass2 | 2026-10-20 | |
| medium | payload: undefined | threat-intel | threatfox | Amos, ClickFix, Foxveil, frame97, macOS, Mirai, Sh, wraith, exe, Hupigon, frame, nova, haven, chant, willow, quill, elf, asyncrat, upx, STRU, Bashlite, Gafgyt, botnet, cve-2026-96656, DDoS, plex, python, SalatStealer, stealer, fake-movie, infostealer, torrent, cowrie, ssh-honeypot, MacSync, Loader, script, macho, SNOWLIGHT, hajime, RustyStealer, salat, zip, Formbook, 0xf00dbeef, analystic, Coruna, ios, salted-hash, DarkSword, GHOSTBLADE, P7, CorePayloadManager, AUR, CHAOS, DirtyBlanket, linux, systemd-fontd, etherhiding, freight-lure, NodeJS, RAT, VNC, go, irc-bot, honeypot, Vshell, x86, remcos, RemcosRAT, AgentTesla, ps1, IoT, Ngioweb, xorddos, ACR, ACRStealer, fake game, ROM, setup.exe, setup.py, fake game setup, js, QuasarRAT, masslogger, cloaked, Dropper, dll, Flame, miner, Android, GhostBat, ghostx-panel, mParivahan, veltrix, caira, CLOUDHAZE, PageStone, QuartzLine, fake-git, Discord, encrypted, iraenc, gitlab, RUST, IRC, k4_irc_bot, onlycn, ROOTKIT, jar, minecraft, mod, Shell, doc8, RevStealer, HTA, codec-cache, Keylogger, VIPKeylogger, Alien, powershell, UNC7072, auditpolcore, DLL-sideloading, OVH, Python39.rar, DvnX, unpacked, WARDENStealer, YapStealer, rozena, GravityRAT, armv5, legea, x86_64, MIPS, armv7, mips64, arm64, mipsle, sideloading, Qt5Widgets, TeamSpeak, bingads, Expiro, fba, pdf-suite, UnifyInstaller, dropped-by-OffLoader, acrobat, ppc_free_pdfsuite, puwaders, store-decoy, ChatGPT, CoinMiner, Amadey, FlyLegitBot, Vidar, DDoSAgent, Remus, P2PInfect, appk, sshdkit, SSHDoor, Bobik, clipbanker, 54e64e, dropped-by-amadey, LummaStealer, ZigClipper, dropped-by-RemusStealer, zeus, xmrig, MillenuimRAT, runelure, file-size-evasion, masquerading, terminalfix, token-impersonation, dll-sideloading-adjacent, njrat, arc, 317106, cred.dll, plugin, backdoor, x86-64, shem, mipsel, BlankGrabber, BlankStealer, Electron-ASAR, ExFiles, flomo-abuse, HijackLoader | 2026-10-20 | |
| high | 3675e2afe6625d5f.js | malware | malware-bazaar | 3675e2afe6625d5f…, 7ca96adcb3be90e7… | js | 2026-10-20 |
| high | 25412f42d1838599.js | malware | malware-bazaar | 25412f42d1838599…, 79aac7a49687a478… | js | 2026-10-20 |
| high | 0868f8cc3d681956.js | malware | malware-bazaar | 0868f8cc3d681956…, 64300814e2cd6399… | js | 2026-10-20 |
| high | newisbest.exe | malware | malware-bazaar | f33d741507b7debf…, 24a68790d33528fa… | dropped-by-OffLoader, exe | 2026-10-20 |
| high | file | malware | malware-bazaar | 69857aa8e797f7d2…, 58e6ad8ea690d4f8… | BB3.file, dropped-by-GCleaner, exe, F | 2026-10-20 |
| high | dupe donut smp.jar | malware | malware-bazaar | 1548539288915511…, 1f9562ef6fcbe6c4… | jar, java, python, silentnet | 2026-10-20 |
| high | c302978da2e06096d88ee757aeb8784015b4e041c500ff6c944516d0d5704f3b.exe | malware | malware-bazaar | c302978da2e06096…, ea66013e9a080df9… | exe, Zombie | 2026-10-20 |
| high | 0bff391e97b121f14816f59284afdc7b97950058d5af4c60ee004559f2c74dca.exe | malware | malware-bazaar | 0bff391e97b121f1…, cc7ded4437b441a2… | exe | 2026-10-20 |
| high | file | malware | malware-bazaar | 4f9f871611eb33f3…, f9e1266da39be089… | BB1.file, dropped-by-GCleaner, exe, F | 2026-10-20 |
| high | d2b056a34c4b346c.bin | malware | malware-bazaar | d2b056a34c4b346c…, ce4fe79c2d288eb1… | elf, gafgyt, Mirai, botnet | 2026-10-20 |
| unknown | Upstream oil and gas: Securing operations across distance, remoteness and harsh environments | advisory | vendor-blogs | 2026-10-20 | ||
| high | RFQ Fabrics.exe | malware | malware-bazaar | b0860714c103ef1b…, 68d09f3ec478cd87… | exe, GuLoader, signed | 2026-10-20 |
| high | Packing List, Commercial Invoice and Bill Of Lading.JS | malware | malware-bazaar | dc4b07aae15a5977…, 6c74f584d91733f5… | js | 2026-10-20 |
| high | f5b95b44a68582a7ff38b9e51786fc9f50d137d910d3b48b618a49dbac96847b.exe | malware | malware-bazaar | f5b95b44a68582a7…, 45e94bdbee7670a8… | exe, signed | 2026-10-20 |
| medium | CVE-2026-96582 — A HID report descriptor is a sequence of items, each declaring in its header how many data bytes fol… | vulnerability | nvd | CVE-2026-96582 | 2026-10-20 | |
| medium | CVE-2026-96406 — A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTo… | vulnerability | nvd | CVE-2026-96406 | 2026-10-20 | |
| unknown | CVE-2026-93446 — Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermitte… | vulnerability | nvd | CVE-2026-93446 | 2026-10-20 | |
| high | CVE-2026-91041 — Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap… | vulnerability | nvd | CVE-2026-91041 | ransomware | 2026-10-20 |
| unknown | CVE-2026-88041 — Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous req… | vulnerability | nvd | CVE-2026-88041 | 2026-10-20 | |
| unknown | CVE-2026-80353 — Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix… | vulnerability | nvd | CVE-2026-80353 | 2026-10-20 | |
| high | Enquiry PM-H24008.js | malware | malware-bazaar | b85cf17f8ee8e183…, ad66ca5fe11954ab… | exe, js, RemcosRAT | 2026-10-20 |
| critical | Malicious IP: 2a0c:b641:b0:a1a1:21c4::1 | ip-reputation | abuse-ipdb | 2a0c:b641:b0:a1a1:21c4::1 | 2026-10-20 | |
| critical | Malicious IP: 80.94.92.234 | ip-reputation | abuse-ipdb | 80.94.92.234 | 2026-10-20 | |
| critical | Malicious IP: 41.173.43.34 | ip-reputation | abuse-ipdb | 41.173.43.34 | 2026-10-20 | |
| critical | Malicious IP: 91.191.209.46 | ip-reputation | abuse-ipdb | 91.191.209.46 | 2026-10-20 | |
| critical | Malicious IP: 219.159.79.61 | ip-reputation | abuse-ipdb | 219.159.79.61 | 2026-10-20 | |
| critical | Malicious IP: 154.16.44.122 | ip-reputation | abuse-ipdb | 154.16.44.122 | 2026-10-20 | |
| critical | Malicious IP: 77.239.124.61 | ip-reputation | abuse-ipdb | 77.239.124.61 | 2026-10-20 | |
| critical | Malicious IP: 106.227.75.197 | ip-reputation | abuse-ipdb | 106.227.75.197 | 2026-10-20 | |
| unknown | CVE-2026-74049 — Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: fro… | vulnerability | nvd | CVE-2026-74049 | 2026-10-20 | |
| unknown | CVE-2026-74048 — Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListene… | vulnerability | nvd | CVE-2026-74048 | 2026-10-20 | |
| critical | Malicious IP: 165.154.151.207 | ip-reputation | abuse-ipdb | 165.154.151.207 | 2026-10-20 | |
| critical | Malicious IP: 34.176.237.25 | ip-reputation | abuse-ipdb | 34.176.237.25 | 2026-10-20 | |
| critical | Malicious IP: 150.241.244.61 | ip-reputation | abuse-ipdb | 150.241.244.61 | 2026-10-20 | |
| high | CVE-2026-113396 — A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is t… | vulnerability | nvd | CVE-2026-113396 | 2026-10-20 | |
| high | CVE-2026-113395 — A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element… | vulnerability | nvd | CVE-2026-113395 | 2026-10-20 | |
| high | CVE-2026-113394 — A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function… | vulnerability | nvd | CVE-2026-113394 | 2026-10-20 | |
| critical | Malicious IP: 64.62.156.184 | ip-reputation | abuse-ipdb | 64.62.156.184 | 2026-10-20 | |
| critical | Malicious IP: 169.58.111.93 | ip-reputation | abuse-ipdb | 169.58.111.93 | 2026-10-20 | |
| critical | Malicious IP: 222.107.156.227 | ip-reputation | abuse-ipdb | 222.107.156.227 | 2026-10-20 | |
| critical | Malicious IP: 5.249.179.171 | ip-reputation | abuse-ipdb | 5.249.179.171 | 2026-10-20 | |
| critical | Malicious IP: 50.4.215.199 | ip-reputation | abuse-ipdb | 50.4.215.199 | 2026-10-20 | |
| critical | Malicious IP: 125.88.225.11 | ip-reputation | abuse-ipdb | 125.88.225.11 | 2026-10-20 | |
| medium | CVE-2026-113393 — A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some u… | vulnerability | nvd | CVE-2026-113393 | 2026-10-20 | |
| critical | Malicious IP: 45.148.10.141 | ip-reputation | abuse-ipdb | 45.148.10.141 | 2026-10-20 | |
| critical | Malicious IP: 165.245.250.118 | ip-reputation | abuse-ipdb | 165.245.250.118 | 2026-10-20 | |
| critical | Malicious IP: 67.250.130.142 | ip-reputation | abuse-ipdb | 67.250.130.142 | 2026-10-20 |