REPORT1 SOURCE
Analyzing React2Shell Threat Actors
Sensor Intel Series: December CVE-2025-55182 Trends
First reported Jan 16, 2026 17:00 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordÆ / PUBLIC MALWARE INTELLIGENCE
Follow the evidence.
Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
18 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Review source update dates and status
- intelligence_src_74dcea1e7d16bc2a75Partial refreshLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
REPORT1 SOURCE
Weekly Threat Bulletin – January 28th, 2026
These are the top threats you should know about this week.
First reported Jan 28, 2026 18:31 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
2018 Phishing and Fraud Report: Attacks Peak During the Holidays
Phishing attack? Absolutely. Success? Likely. Risk of incident? High. Breach costs? About $6.5 million.
First reported Nov 08, 2018 13:43 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Email Compromise with Credential Stuffing Attack Tools
How cybercriminals use credential stuffing attack tools OpenBullet and MailRanger to bypass CAPTCHA, compromise mailboxes, and reset passwords.
First reported Apr 22, 2021 06:09 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Phishing for Information, Part 3: How Attackers Gather Data About Your Organization
The Internet is full of information about your company that’s easily accessible to anyone and particularly useful to attackers.
First reported Aug 22, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Securing APIs in Banking with OAuth and PKCE
Exploring OAuth exchanges for financial-grade API security in banking and financial services applications and the threat of authorization code interception attacks
First reported Dec 03, 2020 17:16 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Regional Threat Perspectives: Europe
Attackers are using IP addresses in the Netherlands, United States, and China to target systems in Europe over SIP, Microsoft SMB, and SSH.
First reported Apr 17, 2019 14:05 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Looking at the SmarterMail API Vulnerability CVE-2026-24423
Sensor Intel Series: February 2026 CVE Trends
First reported Mar 12, 2026 21:14 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Digital Identity Is an Increasingly Popular Attack Vector for Cybercriminals
As cybercriminals continue trying to break into applications using legitimate channels, digital identity is a growing target. Learn what digital identity is and the attack methods fraudsters employ at every stage of the identity life cycle.
First reported Aug 13, 2020 22:00 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Banking Trojans: A Reference Guide to the Malware Family Tree
Learn about banking trojans, how they work, and how the various malware families continually evolve to remain virulent.
First reported Aug 09, 2019 16:36 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Exploited Memcached Servers Lead to Record-Setting 1.3Tbps DDoS Attack
Memcached is just one of many application infrastructure systems that could launch the same types of attacks if they were also misconfigured.
First reported Mar 02, 2018 08:00 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Fake Account Creation Bots – Part 2
Part two of a series investigating how automation is used to create fake accounts for fraud, disinformation, scams, and account takeover.
First reported Oct 12, 2023 14:46 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Default Passwords Are Not the Biggest Part of the IoT Botnet Problem
Providers and manufacturers could go a long way toward reducing the very real threat of IoT.
First reported Jun 06, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Trickbot Focuses on Wealth Management Services from its Dyre Core
As TrickBot evolves, we examine version 24, which heavily targets Nordic financial institutions, and we take a close look at the Dyre–TrickBot connection.
First reported Jul 27, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Tracking RondoDox: Malware Exploiting Many IoT Vulnerabilities
Over a dozen exploits were used to target IoT devices.
First reported Nov 24, 2025 17:47 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
“Cry ‘Havoc’ and Let Loose the Thingbots of War!”
Gray hats might have good intentions launching their “vigilante” botnets, but are they really helping us win the war against Death Star-sized thingbots?
First reported Aug 17, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Doxing, DoS, and Defacement: Today’s Mainstream Hacktivism Tools
Readily available hacking tools provide new ways for civil disobedience groups to antagonize their targets anonymously.
First reported Apr 12, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Sensor Intel Series: Top CVEs in January 2024
More IoT Targeting, plus a bunch of new CVEs! See what attackers went after in January 2024.
First reported Feb 20, 2024 07:07 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Apps Are Like Onions; They Have Layers
It’s critical for security professionals to understand all the components of modern web apps so they can be prepared to fend off attacks at multiple tiers.
First reported Aug 03, 2018 07:00 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Are Gen Z-ers More Security Savvy Online than Millennials?
An F5 Labs survey of Gen Z-ers revealed they are not much more security savvy online than Millennials.
First reported Feb 13, 2020 13:26 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Reaper: The Professional Bot Herder’s Thingbot
While Reaper might be considered an “object lesson” today, it should serve as a blistering warning that IoT security needs to be fixed now.
First reported Oct 26, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
Proposed Legislation Calls for Cleaning Up the IoT Security Mess
Legislation is a good first step toward persuading IoT manufacturers (who want to stay in business) to do the right thing when it comes to the security of their devices.
First reported Oct 03, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
The Bleak Reality and Hopeful Future of Security Automation
Security automation continues to be an enticing capability for security programs and while it delivers on many promises, it does not fully deliver the promised workforce economic benefit.
First reported Feb 02, 2023 21:37 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordREPORT1 SOURCE
BlackGuard Infostealer Malware: Dissecting the State of Exfiltrated Data
Your data is at risk. Are you equipped to combat the risks posed by BlackGuard?
First reported Aug 15, 2022 22:21 UTCCatalog metadata updated Oct 14, 2026 03:29 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.