AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations, indicators, and research history in one bounded catalog.

10Reachable catalog records
1 / 1Current catalog page
24Maximum records per page
0Samples downloaded by this page

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.

Review source update dates and status
  • src_5a4fc0129fb4e8c640Collection status unverifiedLast successful batch: Unverified

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.

Clear filters
10 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
REPORT1 SOURCE

Privacy Policy Update (Effective October 13, 2026)

Criminal IP’s Privacy Policy will be revised effective October 13, 2026.This revision aims to clearly inform users about the disclosure of personal information to a third party and its transfer overseas as part of the G2 review submission process. Key Changes (v1.4) Third-Party Disclosure and Cross-Border Transfers of Personal Information: We have added details about [...] The post Privacy Policy

First reported Oct 06, 2026 08:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
REPORT1 SOURCE

Kiteworks’ Shutdown Advisory: Analyzing Internet-Exposed Infrastructure

Kiteworks is a secure data exchange platform that helps enterprises and government agencies share and transfer sensitive files and data. It brings together file sharing, managed file transfer (MFT), email, web forms, and other data exchange channels to manage access permissions and data movement.On September 25, 2026, Kiteworks advised customers to temporarily shut down their [...] The post Kitewo

First reported Oct 07, 2026 00:15 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
REPORT1 SOURCE

ScreenConnect Vulnerability CVE-2026-84869: Exploiting Active Remote Sessions

ConnectWise ScreenConnect is a remote management solution used by enterprises and managed service providers (MSPs) to access PCs and servers for technical support and system administration. Its remote sessions support capabilities such as file transfer and command execution, improving operational efficiency but also creating the potential for direct impact on managed systems if those permissions [

First reported Sep 28, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
REPORT1 SOURCE

Criminal IP at Security Days 2026 | October 21– 23

October 21–23, 2026 TAKANAWA GATEWAY Convention Center, Booth B20 1792540800 일 시간 분 초종료: Criminal IP to Exhibit at Security Days Fall 2026 Tokyo 1792540800 일 시간 분 초종료: Criminal IP will exhibit at Security Days Fall 2026 Tokyo, one of Japan’s largest cybersecurity events, taking place from Wednesday, October 21 to Friday, October 23, 2026, [...] The post Criminal IP at Security Days 2026 | October

First reported Sep 18, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
REPORT1 SOURCE

One Favicon Hash to a Carding C2: Dissecting “Olho de Deus”

One favicon hash in Criminal IP Asset Search led to two Contabo VPS nodes running a Brazilian operator console called Olho de Deus ("Eye of God"). Static analysis of its React frontend shows what it really is: a card track-data C2 with a general-purpose Windows RAT bolted on. Retail point-of-sale (PDV) machines are a plausible [...] The post One Favicon Hash to a Carding C2: Dissecting “Olho de De

First reported Oct 08, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
REPORT1 SOURCE

Asset Search & AI Overview Enhancements

This update introduces improvements to Asset Search, including more flexible search conditions, an updated keyword and filter interface, and enhancements to AI Overview. Maintenance Schedule v1.106.0: 2026.10.01 (05:00-10:00 UTC) Overview 📃 Asset Search in Criminal IP has been updated with expanded query support, an intuitive keyword and filter UI, and improved AI Overview presentation. Users can

First reported Oct 02, 2026 01:10 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
REPORT1 SOURCE

Strengthening External Threat Investigation Across Singapore’s Digital Environment

A government organization supporting a national digital ecosystem uses Criminal IP Threat Intelligence to investigate suspicious external infrastructure and gain broader context around IPs and domains. By looking beyond individual indicators, analysts can better understand the infrastructure, services, and threat signals behind suspicious activity and determine when deeper investigation is require

First reported Sep 28, 2026 02:19 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
REPORT1 SOURCE

Criminal IP Scheduled Maintenance and Service Unavailability Notice (October 20)

Hello from Criminal IP. Infrastructure maintenance and database server maintenance are scheduled to ensure service stability. Please review the schedule and service availability details below and plan accordingly. Maintenance Schedule Time ZoneDateMaintenance WindowUTCOctober 20, 2026 (Tuesday)15:00–18:00EDT (UTC−4, U.S. Eastern Time)October 20, 2026 (Tuesday)11:00–14:00PDT (UTC−7, U.S. Pacific Ti

First reported Oct 07, 2026 08:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
REPORT1 SOURCE

MikroTik RouterOS “MikroTrick” Attack Chain (CVE-2026-67276 · CVE-2026-86060) Analysis

In September 2026, an attack chain combining two vulnerabilities in MikroTik RouterOS, which is widely deployed at network edges, was found to be actively exploited in the wild, allowing attackers to fully compromise affected devices without authentication. Among six vulnerabilities discovered in RouterOS by a national cyber incident response team and disclosed in coordination with [...] The post

First reported Sep 22, 2026 00:30 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
REPORT1 SOURCE

Beyond the Login Event: Threat Intelligence for Digital Identity Services

A digital identity and trust services provider uses Criminal IP Threat Intelligence to gain additional context when investigating suspicious access activity across its digital services. By looking beyond individual login or access events, security teams can better understand the external infrastructure behind suspicious IPs and domains and determine when further investigation is needed. The Challe

First reported Sep 17, 2026 03:33 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record

A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.