Global Threat Search

Análise de Indicadores de Comprometimento

Identifique e analise ameaças com inteligência global

Middle East Malicious Infrastructure Report: 1,350+ C2 Servers Mapped Across 98 Providers

2026-05-21 23:03:18 AlienVault

acunetix aquilarat asyncrat ...

One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud 'Patriot Bait' Campaign

2026-05-21 23:03:17 AlienVault

ai-assisted credential theft cryptocurrency fraud ...

The Gentleman Ransomware | Defense Evasion TTPs Uncovered

2026-05-21 23:03:16 AlienVault

cve-2024-55591 defense evasion event log clearing ...

Cybercriminal VPN Dismantled in Crackdown

2026-05-21 23:03:15 AlienVault

cybercrime forums data theft europol ...

PureLogs: Delivery via PawsRunner Steganography

2026-05-21 15:39:24 AlienVault

.NET credential theft cryptocurrency wallets ...

Mini Shai-Hulud Hits TanStack npm Packages

2026-05-21 15:38:56 AlienVault

credential theft GitHub Actions Mini Shai-Hulud ...

SEO poisoning campaign leverages Gemini and Claude Code impersonation to deliver infostealer

2026-05-21 13:19:36 AlienVault

ai platform impersonation credential theft developer targeting ...

Ghost CMS Mass Compromised via CVE-2026-26980, Now Fueling ClickFix Attacks

2026-05-21 13:19:35 AlienVault

clickfix cloaking cve-2026-26980 ...

Politicians to Ditch Signal for Homegrown Apps

2026-05-21 08:39:24 AlienVault

diplomatic security encrypted communications european governments ...

Fresh mischief and digital shenanigans

2026-05-21 03:47:08 AlienVault

belarus cobalt strike cve-2023-38831 ...

Uncovering a Global Android Carrier Billing Fraud Campaign

2026-05-20 22:37:47 AlienVault

android carrier billing fraud otp interception ...

Misconfigured, Enrolled and Dormant: Anatomy of a P2Pinfect Kubernetes Compromise

2026-05-20 22:36:03 AlienVault

botnet cryptomining cve-2022-0543 ...

Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

2026-05-20 22:36:01 AlienVault

ci/cd credential theft data exfiltration ...

New burrowing techniques

2026-05-20 17:45:34 AlienVault

apt chainworm china-aligned ...

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

2026-05-20 13:07:00 AlienVault

anti-debugging chinese academia cobalt strike ...

Tracking TamperedChef Clusters via Certificate and Code Reuse

2026-05-20 12:51:13 AlienVault

appsuite pdf calendaromatic cl-cri-1089 ...

Volume Obfuscation Game: The Lead Data Brokers Out To Waste Your Time

2026-05-20 12:50:13 AlienVault

aiqianjin chang'an sleepless night chinese-speaking forums ...

Beyond Tax Returns: How Shared Malware Infrastructure Scales Brand Abuse In Indonesia

2026-05-20 12:33:54 AlienVault

banking trojan brand abuse Gigabud.RAT ...

Infostealer Campaign Using Trading App as Lure

2026-05-20 11:12:24 AlienVault

code signing abuse cryptocurrency DPRK-nexus ...

The Evolution of ClickFix: From Cleartext to Server Side Polymorphism

2026-05-20 11:12:22 AlienVault

Base64 obfuscation ClickFix DeerStealer ...

Popular node-ipc npm Package Infected with Credential Stealer

2026-05-20 11:12:14 AlienVault

credential stealer developer secrets harvesting DNS exfiltration ...

Inside a Tor Backed Supply Chain Worm

2026-05-20 11:12:11 AlienVault

credential theft cryptomining npm ...

APT Targets Azerbaijani Oil and Gas Industry

2026-05-20 11:10:34 AlienVault

Azerbaijan Chinese APT Deed RAT ...

Popular Go Decimal Library Targeted by Long-Running Typosquat with DNS Backdoor

2026-05-20 03:16:26 AlienVault

c2 channel decimal library dns backdoor ...

Latest PyPi Compromise

2026-05-19 22:26:56 AlienVault

aws ssm propagation credential theft durabletask ...

Inside Banana RAT: From Build Server to Banking Fraud

2026-05-19 22:26:55 AlienVault

banana rat brazilian banking trojan casbaneiro ...

9 Year-Old PHP Vulnerability Keeps Swinging As One of the Most Targeted Vulnerabilities

2026-05-19 17:52:42 AlienVault

androxgh0st botnet campaigns cve-2017-9841 ...

Exposing Fox Tempest: A malware-signing service operation

2026-05-19 17:52:41 AlienVault

akira azure abuse blackbyte ...

The Worm That Keeps on Digging: Latest Wave

2026-05-19 12:45:26 AlienVault

backdoor persistence cicd compromise credential theft ...

Active Supply Chain Attack Compromises Packages on npm

2026-05-19 08:11:20 AlienVault

@antv packages ci/cd compromise credential theft ...

Copycat hits another npm package

2026-05-18 22:26:37 AlienVault

credential-theft cryptocurrency-theft ddos-botnet ...

Spring harvest - Leek Likho group's campaign to hunt for documents

2026-05-18 19:45:29 AlienVault

dropbox Likho messenger app ...

Chinese APT Campaign Targets Entities with Updated FDMTP Backdoor

2026-05-18 19:29:26 AlienVault

anomalous file apt chinese ...

Cato CTRL Threat Research: Suspected China-Linked Threat Actor Targets Global Manufacturer with Undocumented TencShell Malware

2026-05-18 19:23:51 AlienVault

cato ctrl china-linked go ...

GopherWhisper: A burrow full of malware

2026-04-23 14:37:50 AlienVault

boxoffriends china-aligned apt frienddelivery ...

DinDoor Backdoor: Deno Runtime Abuse and 20 Active C2 Servers

2026-04-23 14:16:02 AlienVault

caddy proxy castleloader deno runtime ...

Malicious Campaign Deploying AdaptixC2 Beacon and VS Code via Trojanized SumatraPDF

2026-04-23 08:30:50 AlienVault

adaptixc2 adaptixc2 beacon chinese targets ...

Unmasking DPRK Cyber Threat Actors: Fake IT Worker Infrastructure

2026-04-23 03:27:33 AlienVault

astrill vpn cryptocurrency fraud dprk ...

Beyond PowerShell: Analyzing the Multi-Action ClickFix Variant

2026-04-23 03:26:58 AlienVault

clickfix cmdkey lolbins ...

Malicious Artifacts Found in Official KICS Docker Repository and Code Extensions

2026-04-22 22:57:45 AlienVault

canister worm checkmarx kics ci/cd compromise ...

Untangling a Linux Incident With an OpenAI Twist (Part 2)

2026-04-22 22:57:09 AlienVault

ai-assisted remediation botnet credential harvesting ...

Dissecting FudCrypt: A Real-World Malware Crypting Service Analysis

2026-04-22 12:45:30 AlienVault

amsi-bypass azure-trusted-signing cmstplua-uac-bypass ...

TwizAdmin -- Multi-Stage Crypto Clipper, Infostealer & Ransomware Operation

2026-04-22 12:41:31 AlienVault

crpx0 crypto clipper cryptocurrency theft ...

Same packet, different magic: Hits India's banking sector and Korea geopolitics

2026-04-22 01:40:38 AlienVault

backdoor chm files dll sideloading ...

Mach-O Man Malware: What CISOs Need to Know

2026-04-22 01:40:36 AlienVault

browser stealing clickfix credential theft ...

New NGate variant hides in a trojanized NFC payment app

2026-04-21 16:32:32 AlienVault

ai-generated code brazil targeting fake lottery ...

AI-augmented threat actor accesses FortiGate devices at scale

2026-04-21 16:20:31 AlienVault

active directory compromise ai-augmented attacks backup infrastructure targeting ...

Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories

2026-04-21 12:09:43 AlienVault

beavertail blockchain infrastructure dev#popper rat ...

macOS ClickFix Campaign: AppleScript Stealers & New Terminal Protections

2026-04-21 02:05:08 AlienVault

applescript browser data exfiltration clickfix ...

Nightmare-Eclipse Tooling Seen in Real-World Intrusion

2026-04-20 20:28:22 AlienVault

beigeburrow bluehammer cve-2026-33825 ...