v2.4.196
v2.4.196
First reported Aug 20, 2024 14:19 UTCCatalog metadata updated Oct 13, 2026 08:03 UTCOpen evidence recordPublished file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
2 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
v2.4.196
First reported Aug 20, 2024 14:19 UTCCatalog metadata updated Oct 13, 2026 08:03 UTCOpen evidence recordv2.4.190
First reported Apr 18, 2024 12:47 UTCCatalog metadata updated Oct 13, 2026 08:03 UTCOpen evidence recordv2.4.195
First reported Jul 26, 2024 14:18 UTCCatalog metadata updated Oct 13, 2026 08:03 UTCOpen evidence recordWhat's Changed add by @karenyousefi in #291 Update security-provider-blogpost list.json by @cudeso in #292 update by @karenyousefi in #293 Add s.ee by @showfom in #294 Update public-ipfs-gateways by @curbengh in #295 new: [github ip lists] IPv4 and IPv6 addresses by @jberkers42 in #297 Add google drive domain to google domain list by @Wachizungu in #301 Update list.json by @HiS3 in #302 add new list: List of Shadowserver IP-Ranges. by @HiS3 in #303 add: [parking] teaminternet.com parking server by @isec-easm in #306 add: [parking] godaddy parking servers by @isec-easm in #307 add: [parking] domainsalesform.com parking ranges by @isec-easm in #308 update by @karenyousefi in #309 Freshfromnetworktelescope by @Th4nat0s in #310 update by @karenyousefi in #313 Use recommended Zscaler list by @fabienmorelpro-cpu in #312 Adding Alpha Strike by @JanoutV in #311 Additions by @bartblaze in #314 update by @karenyousefi in #316 First test for nt scanners list by @Th4nat0s in #317 Add Onyphe, Modat Generator & Fix generation issues by @Th4nat0s in #320 add powershell.exe hash by @pettai in #322 Network Telescope Refresh Fev 26 by @Th4nat0s in #325 update by @karenyousefi in #327 Update scanner list - 2026 March by @Th4nat0s in #330 Add Palo Alto Networks Cortex Xpanse by @darses in #328 chg: [misp-warninglists] adding new Telegram IPs list by @rectifyq in #324 Added new script to fetch windows binary hashes and add them to warninglist by @akshayjain-1 in #323 New Contributors @curbengh made their first contribution in #295 @HiS3 made their first contribution in #302 @isec-easm made their first contribution in #306 @fabienmorelpro-cpu made their first contribution in #312 @JanoutV made their first contribution in #311 @darses made their first contribution in #328 @rectifyq made their first contribution in #324 @akshayjain-1 made their first contribution in #323 Full Changelog: 2024110...2026040
First reported Apr 05, 2026 19:25 UTCCatalog metadata updated Oct 13, 2026 08:03 UTCOpen evidence recordv2.4.194
First reported Jun 21, 2024 08:21 UTCCatalog metadata updated Oct 13, 2026 08:03 UTCOpen evidence recordv2.4.193
First reported Jun 06, 2024 13:12 UTCCatalog metadata updated Oct 13, 2026 08:03 UTCOpen evidence recordRelease Notes for MISP-WarningLists November 2024 Update New Additions and Changes: Zscaler Source Update: Added the missing script for Zscaler source generation, enhancing the capability to maintain updated and comprehensive warning lists. [Commit: 192534d] Apple IP Ranges Update: Updated the Apple IP ranges based on the latest ARIN allocation, ensuring the lists reflect the current state of Apple’s network allocations. Contributed by Xiufeng Guo. [Commits: 94fdbfd, 934175c] Living Off Trusted Sites (LOTS) Project: Integrated domains from the “Living Off Trusted Sites” project, expanding the warning lists to cover domains that could potentially be leveraged for trusted-based attacks. Initial work contributed by Goodlandsecurity. [Commits: 3f38437, ae6ad98, fc55112] General Updates: Multiple updates and improvements to various warning lists were made to ensure the data remains relevant and effective. [Commits: 018f958, bfbb9a8] Blogpost Link Update: Adjustments made to blogpost links to maintain up-to-date references for associated resources. [Commit: dfef76d] Contributors: Alexandre Dulaunoy Xiufeng Guo Goodlandsecurity Karen Yousefi Thanat0s These updates reflect ongoing efforts to maintain and enhance the MISP warning lists, providing better threat intelligence and context for users. Notes about the release Starting with this release, misp-warning-lists will be tagged using the %Y%m%d00 format for each new version. This change enables users to easily verify whether they are using the latest release. The versioning is now independent of the MISP core software, as the project is also utilized as a standalone tool in various other applications.
First reported Nov 11, 2024 08:05 UTCCatalog metadata updated Oct 13, 2026 08:03 UTCOpen evidence recordv2.4.192
First reported Apr 26, 2024 14:44 UTCCatalog metadata updated Oct 13, 2026 08:03 UTCOpen evidence recordNotorious hacker of Anonymous and LulzSec fame is challenged by rival hacker, The Jester, to reveal his identity.
First reported Apr 18, 2017 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordLegacy bugs continue to serve attackers.
First reported Dec 08, 2025 20:41 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordAs of March we are contributing our vulnerability targeting intelligence to FIRST’s Exploit Prediction Scoring System.
First reported Apr 01, 2023 10:03 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordDyre is one of the most sophisticated banking malware agents in the wild.
First reported Apr 12, 2015 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordSingapore saw a sharp rise in attacks targeting a variety of ports, from SIP clear-text (5060), Telnet, SQL, and host-to-host ports to those used for remote router management and proxy servers and caching.
First reported Jun 15, 2018 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordNearly 200,000 servers are still vulnerable to Heartbleed—and the organizations who own them might surprise you.
First reported Feb 02, 2017 08:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordAttackers continue to exploit old vulnerabilities, use new methods to kill competing crypto-miners, and survive removal by administrators.
First reported Mar 13, 2019 15:28 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordThe Australian threat landscape closely mirrored the threats we observed in Asia, with an added focus on NetBIOS port 139.
First reported Apr 02, 2020 22:09 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordWebinject crafting is a separate profession now. Hackers write webinjects and sell them to fraudsters, who use them to weaponize Trojans.
First reported May 26, 2016 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordThese are the top threats you should know about this week.
First reported Feb 03, 2026 18:25 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordKey lessons from martial arts translate to cyber-defense, including preparation, taking falls, proper stance, diligent practice, sparring, and continuous growth.
First reported Feb 13, 2019 17:25 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordOrganizations need to provide clear and specific guidance to employees who travel across national borders when it comes to giving up passwords and surrendering devices.
First reported Oct 12, 2017 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordIf you aren’t aware of Drupalgeddon 2, then you’ve either been living off the grid or don’t use the popular content management system (CMS).
First reported May 11, 2018 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordPrioritizing speed over security can jeopardize the safety of your applications and data.
First reported Jun 26, 2018 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordThese are the top threats you should know about this week.
First reported Aug 05, 2026 17:56 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordFar from a dying breed, cryptocurrencies are not only evolving but being accepted in countless new markets. CISOs need to know the ins and outs, pros and cons.
First reported Sep 26, 2017 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.