AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations, indicators, and research history in one bounded catalog.

2,400+Reachable catalog records
21 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

3 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.

Review source update dates and status
  • intelligence_src_e03c0eb81ecbe60444Recent successful batchLast successful batch: Last attempt:
  • intelligence_src_e083aa81c609c3d0bcRecent successful batchLast successful batch: Last attempt:
  • intelligence_src_e0f5aac18586393a95Recent successful batchLast successful batch: Last attempt:

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.

Clear filters
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
REPORT1 SOURCE

XWorm RAT Evolves Into Surveillance Platform

Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions. The post XWorm RAT Evolves Into Surveillance Platform appeared first on SecurityWeek.

First reported Oct 13, 2026 11:13 UTCCatalog metadata updated Oct 13, 2026 16:23 UTCOpen evidence record
REPORT1 SOURCE

attack-navigator v4.9.4

4.9.4 - 29 February 2024 Fixes Fixed a bug with selecting techniques by data sources in the search & multi-select interface. See issue #622.

First reported Feb 29, 2024 14:28 UTCCatalog metadata updated Oct 13, 2026 16:21 UTCOpen evidence record
REPORT1 SOURCE

All Your Macs Are Belong To Us

This is our 100th blog post ...and it's a doozy! Here, we detail a bug that trivially bypasses many core Apple security mechanisms, leaving Mac users at grave risk!

First reported Apr 26, 2021 05:00 UTCCatalog metadata updated Oct 13, 2026 16:17 UTCOpen evidence record
REPORT1 SOURCE

It's Turtles All The Way Down

Yet more ransomware targeting macOS! In this post we analyze the newly discovered "Turtle" ransomware and provide both a decryptor and a method to procactively thwart it.

First reported Nov 30, 2023 05:00 UTCCatalog metadata updated Oct 13, 2026 16:17 UTCOpen evidence record
REPORT1 SOURCE

[0day] From Spotlight to Apple Intelligence

Malicious Spotlight plugins can leak bytes from TCC-protected files. And while the core bug was publicly disclosed almost a decade ago, it's still present in macOS 26!

First reported Sep 15, 2025 05:00 UTCCatalog metadata updated Oct 13, 2026 16:17 UTCOpen evidence record
REPORT1 SOURCE

The Mac Malware of 2020

Our annual report on all the Mac malware of the year - including samples for download, infection vectors, persistence mechanisms, payloads and more!

First reported Jan 01, 2021 05:00 UTCCatalog metadata updated Oct 13, 2026 16:17 UTCOpen evidence record
REPORT1 SOURCE

Low-Level Process Hunting on macOS

Parent-child relationships are one of the simplest and most effective ways to detect malicious activity at the host level ...however on macOS things can get a little complex. Luckily security researcher Jaron Bradley is here to explain exactly what is going on!

First reported Jul 19, 2020 05:00 UTCCatalog metadata updated Oct 13, 2026 16:17 UTCOpen evidence record
REPORT1 SOURCE

How Shlayer Hides its Configuration

The prolific adware known as Shlayer continues to evolve in creative ways! In this guest blog post, security researcher Taha Karim, details an unusual Shlayer sample that encrypts its configuration within the DMG file header structure.

First reported Dec 27, 2022 05:00 UTCCatalog metadata updated Oct 13, 2026 16:17 UTCOpen evidence record
REPORT1 SOURCE

OSX.EvilQuest Uncovered (part two)

OSX.EvilQuest is a new piece of malware targeting Mac users. In part two, we analyze the malware's viral infection capabilities, and detail its insidious capabilities.

First reported Jul 03, 2020 05:00 UTCCatalog metadata updated Oct 13, 2026 16:17 UTCOpen evidence record

The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.

A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.