Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
Like many other financial Trojans, the notorious Dridex malware keeps evolving and strengthening its presence.
First reported Feb 25, 2016 08:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordWe’re still thinking of Internet of Things devices as low risk when reality tells us exactly the opposite.
First reported Jul 15, 2019 19:32 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordPersonally identifiable information and user credentials are the primary nuggets attackers are after when they exploit known vulnerabilities in web applications.
First reported Oct 10, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordIn March, threat actors focused on targeting vulnerabilities released in the last few months. WordPress Easy SMTP Plugin Authentication Bypass vulnerability attacks had the most impact during that time frame.
First reported Apr 09, 2019 15:29 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordThreat actors shift focus away from cryptominers and back to remote code execution—this month with a new zero-day exploits.
First reported Oct 30, 2019 13:10 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordWith a growth rate of 1,473% in 2016, the hunt for vulnerable IoT devices rages on...
First reported May 10, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordJWT brings performance to identity assertion and is being widely adopted, but it’s also garnering the attention of cybercriminals.
First reported Sep 23, 2020 14:14 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordStop feeding attackers every piece of the puzzle they need to pull off their scams.
First reported Sep 28, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordA Mirai variant named Echobot appeared mid-2019. Echobot has been seen expanding its arsenal to 71 exploits, targeting SCADA systems and IoT devices.
First reported Dec 18, 2019 01:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordThese are the top threats you should know about this week.
First reported Aug 19, 2026 18:46 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordRental scams are getting more sophisticated and are making it harder for legitimate landlords and renters to find each other.
First reported Jul 26, 2018 07:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordAs Christmas quickly approaches, seasonal phishing trends once again show that attackers are taking advantage of increased online shopping. Fraudsters doubled their efforts in November attacking ecommerce giants such as Amazon. The real attacker focus, however, was cryptocurrency with fraudulent sites attempting to steal crypto-exchange credentials.
First reported Dec 17, 2021 01:39 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordJanuary threat actor activity focused heavily on exploiting a ThinkPHP remote code execution vulnerability and infecting vulnerable Oracle WebLogic systems with a Mirai variant.
First reported Feb 21, 2019 19:27 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordGood security is highly dependent on hospital staff being well trained and having the discipline to follow security processes—manual and otherwise—to the letter.
First reported Dec 05, 2017 08:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordInsights into Genesis Marketplace, a black market trading in digital identity.
First reported Nov 19, 2020 17:10 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordA newcomer to the malware scene, Golang-based malware has been seen installing cryptominers specifically targeting Moreno cryptocurrency.
First reported Jul 02, 2019 20:43 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordIn terms of attacker interest, it was more about continuity than change in June, with many of the same old CVEs being targeted.
First reported Jul 21, 2023 07:25 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordAn undercover interview of two infamous Russian hackers speak volumes about skills, passion, and motivation of some of the world’s most dangerous cybercriminals.
First reported Jun 21, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordDefinitive steps individuals and organizations can take today to deal with the impact of Cloudbleed.
First reported Feb 24, 2017 08:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordPanda malware is back in full force with three currently active campaigns that extend its targets beyond banking to new industries and organizations worldwide.
First reported May 09, 2018 07:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordBotPoke comes to the foreground yet again.
First reported Mar 21, 2025 17:08 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordCISOs who fail to prioritize security awareness training are putting their business and assets at serious risk.
First reported Nov 14, 2017 08:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordHow InfoSec leaders can build successful threat models by defining the threat landscape and its component resources, then asking simple, situational questions.
First reported Aug 23, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordFind out why we care so much about application security, how applications have grown into the weird beasts that they are today, and how our work fits into the bigger picture of securing and running an application.
First reported Jul 22, 2019 22:11 UTCCatalog metadata updated Oct 14, 2026 00:17 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.