AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations, indicators, and research history in one bounded catalog.

380Reachable catalog records
15 / 16Current catalog page
24Maximum records per page
0Samples downloaded by this page

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.

Review source update dates and status
  • src_029e2f07006b78ebcbCollection status unverifiedLast successful batch: Unverified

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.

Clear filters
380 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
INDICATOR1 SOURCE

DOMAIN x.jsp

Indicator published by the cited source.

First reported Sep 25, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence record
REPORT1 SOURCE

ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

Introduction As an update to the June 2026 post, ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit, Mandiant and Google Threat Intelligence Group (GTIG) have identified renewed mass exploitation of CVE-2026-35273 by UNC6240 (ShinyHunters), along with expanded global targeting across multiple sectors. In June, the threat actor exploited this vulnerability as a zero-day predominan

First reported Sep 25, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence record
INDICATOR1 SOURCE

DOMAIN s.zip

Indicator published by the cited source.

First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence record
INDICATOR1 SOURCE

DOMAIN s.exe

Indicator published by the cited source.

First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence record
INDICATOR1 SOURCE

DOMAIN u.jsp

Indicator published by the cited source.

First reported Sep 25, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence record
INDICATOR1 SOURCE

DOMAIN r.exe

Indicator published by the cited source.

First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence record
REPORT1 SOURCE

Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia

Written by: Gabby Roncone, Wesley Shields Overview Google Threat Intelligence Group (GTIG) is tracking three distinct suspected Russian cyber espionage threat clusters abusing legitimate authentication flows to target individuals working in academia, aerospace and defense, governments and think tanks across Europe, as well as academia and think tanks within the United States. Examples of these tec

First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence record
REPORT1 SOURCE

Financially Motivated Threat Actor BREEZE COMET Targets Brazil

Introduction Beginning in 2024 Mandiant investigated a string of compromises affecting Brazilian financial services, retail, and eCommerce organizations. Google Threat Intelligence Group (GTIG) tracks this activity as BREEZE COMET (formerly UNC5669), a financially motivated threat actor specializing in manipulating payment systems and banking software in Brazil to conduct fraudulent transfers. Thi

First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence record

A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.