Category Dashboard

📁 Threat Actors — category dashboard

2.7K indicators · avg threat 0.5 · intensity 51 (ELEVATED)

Indicators

2.7K
0 high-severity

Top ASNs

0
hosting this category

Parent orgs

0
grouped ownership

Countries

0
geo footprint

🌐 Top ASNs

No data.

🏢 Top Parent Orgs

No data.

🌎 Countries

No data.

🦠 Malware families

No data.

🔥 Top indicators (2.7K total, 200 shown)

⇩ Export
IndicatorTypeThreatSightingsASNCountryLast seen
adc5c8c1ddc9c8dec6edc8d9c9cc83c2df83d9c5 hash_sha1 1 2026-08-06 13:13:12
8ce4e9e0fce8e9ffe7cce9f8e8eda2e3fea2f8e4 hash_sha1 1 2026-08-06 13:13:12
https://twitter.com/etda_thailand url 1 2026-08-06 13:13:12
https://facebook.com/ETDA.Thailand url 1 2026-08-06 13:13:12
https://creativecommons.org/licenses/by-nc-sa/4.0/ url 1 2026-08-06 13:13:12
https://otx.alienvault.com/ url 1 2026-08-06 13:13:12
https://malpedia.caad.fkie.fraunhofer.de/ url 1 2026-08-06 13:13:12
https://attack.mitre.org/groups/ url 1 2026-08-06 13:13:12
https://attack.mitre.org/ url 1 2026-08-06 13:13:12
https://github.com/MISP/misp-galaxy/blob/master/clusters/threat-actor.json url 1 2026-08-06 13:13:12
tgc-tools.json domain 1 2026-08-06 13:13:12
tgc-actors.json domain 1 2026-08-06 13:13:12
getmisp.cgi domain 1 2026-08-06 13:13:12
https://www.circl.lu/doc/misp/galaxy/ url 1 2026-08-06 13:13:12
aptstats.cgi domain 1 2026-08-06 13:13:12
aptsearch.cgi domain 1 2026-08-06 13:13:12
listtools.cgi domain 1 2026-08-06 13:13:12
listgroups.cgi domain 1 2026-08-06 13:13:12
https://www.etda.or.th url 1 2026-08-06 13:13:12
http://www.w3.org/1999/xhtml url 1 2026-08-06 13:13:12
https://socradar.io/free-tools/ransomware-intelligence/groups/gammax url 1 2026-08-06 13:13:00
https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/booba-project url 1 2026-08-06 13:13:00
https://www.microsoft.com/en-us/security/blog/2026/07/31/captivecrunch-midnight-blizzard-targets-travelers-worldwide-for-malware-delivery-and-credential-theft/ url 1 2026-08-06 13:13:00
https://asec.ahnlab.com/en/94847/ url 1 2026-08-06 13:13:00
https://asec.ahnlab.com/en/94685/ url 1 2026-08-06 13:13:00
https://stealthmole-intelligence-hub.blogspot.com/2026/07/the-many-faces-of-modernstealer-tracing.html url 1 2026-08-06 13:13:00
https://cybersecuritynews.com/modernstealer-threat-actor/ url 1 2026-08-06 13:13:00
https://socradar.io/blog/dark-web-profile-exfilsquad/ url 1 2026-08-06 13:13:00
https://ransomfeed.it/index.php?page=post_details&id_post=34186 url 1 2026-08-06 13:13:00
https://ransomfeed.it/index.php?page=post_details&id_post=34211 url 1 2026-08-06 13:13:00
https://ransomfeed.it/index.php?page=post_details&id_post=34231 url 1 2026-08-06 13:13:00
https://ransomfeed.it/index.php?page=post_details&id_post=34219 url 1 2026-08-06 13:13:00
https://asec.ahnlab.com/en/94786/ url 1 2026-08-06 13:13:00
https://socradar.io/free-tools/ransomware-intelligence/groups/orova url 1 2026-08-06 13:13:00
https://therecord.media/microsoft-disrupts-fox-tempest-malware-signing-service url 1 2026-08-06 13:13:00
https://blogs.microsoft.com/on-the-issues/2026/05/19/disrupting-fox-tempest-a-cybercrime-service/ url 1 2026-08-06 13:13:00
https://www.microsoft.com/en-us/security/blog/2026/05/19/exposing-fox-tempest-a-malware-signing-service-operation/ url 1 2026-08-06 13:13:00
https://socfortress.medium.com/jadepuffer-the-dawn-of-agentic-ransomware-operations-003a59848007 url 1 2026-08-06 13:13:00
https://securereading.com/jadepuffer-ai-ransomware-autonomous-llm-attack/ url 1 2026-08-06 13:13:00
https://nsfocusglobal.com/ai-security-incident-jadepuffer-ransomware-leverages-ai-agent-to-automate-attacks/ url 1 2026-08-06 13:13:00
https://krypt3ia.wordpress.com/2026/07/13/threat-intelligence-report-jadepuffer-agentic-ransomware-and-automated-extortion/ url 1 2026-08-06 13:13:00
https://thehackernews.com/2026/07/new-encforge-ransomware-targets-ai.html url 1 2026-08-06 13:13:00
https://aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-react2shell-vulnerability-cve-2025-55182/ url 1 2026-08-06 13:13:00
https://blog.polyswarm.io/multiple-threat-actors-leveraging-cve-2025-55182-react2shell url 1 2026-08-06 13:13:00
https://blog.talosintelligence.com/uat-11795-deploys-novel-starland-rat-and-bespoke-wldr-c2-implant-in-financially-motivated-campaign/ url 1 2026-08-06 13:13:00
https://research.checkpoint.com/2026/cavern-manticore-exposing-iran-linked-modular-c2-framework/ url 1 2026-08-06 13:13:00
https://www.security.com/threat-intelligence/goddamn-ransomware-beast-rebrand url 1 2026-08-06 13:13:00
https://blog.talosintelligence.com/uat-7810/ url 1 2026-08-06 13:13:00
https://www.volexity.com/blog/2026/07/17/proxying-to-compromise-sonicwall-secure-mobile-access-0-day-exploitation/ url 1 2026-08-06 13:13:00
https://www.fireeye.com/blog/threat-research/2021/05/unc2529-triple-double-trifecta-phishing-campaign.html url 1 2026-08-06 13:13:00
https://www.resecurity.com/blog/article/trinity-of-chaos-the-lapsus-shinyhunters-and-scattered-spider-alliance-embarks-on-global-cybercrime-spree url 1 2026-08-06 13:13:00
https://www.levelblue.com/blogs/spiderlabs-blog/scattered-lapsuss-hunters-anatomy-of-a-federated-cybercriminal-brand url 1 2026-08-06 13:13:00
https://falconfeeds.io/blogs/scattered-lapsus-hunters-slsh-threat-intelligence-2025/ url 1 2026-08-06 13:13:00
https://pushsecurity.com/blog/scattered-lapsus-hunters/ url 1 2026-08-06 13:13:00
https://unit42.paloaltonetworks.com/scattered-lapsus-hunters/ url 1 2026-08-06 13:13:00
https://krebsonsecurity.com/2025/11/meet-rey-the-admin-of-scattered-lapsus-hunters/ url 1 2026-08-06 13:13:00
https://sosransomware.com/en/ransomware-groups/scattered-lapsus-hunters-the-cybercrime-alliance-that-will-shake-global-businesses-in-2025/ url 1 2026-08-06 13:13:00
https://www.picussecurity.com/resource/blog/scattered-lapsus-hunters-2025s-most-dangerous-cybercrime-supergroup url 1 2026-08-06 13:13:00
https://securelist.com/tr/armored-likho-apt-with-busysnake-stealer/120292/ url 1 2026-08-06 13:13:00
https://www.anomali.com/blog/anomali-cyber-watch-f5-breach-mysterious-elephant-apt-malicious-mcp-servers url 1 2026-08-06 13:13:00
https://securelist.com/mysterious-elephant-apt-ttps-and-tools/117596/ url 1 2026-08-06 13:13:00
https://www.techrepublic.com/article/news-novo-nordisk-1-3tb-theft-25m-demand-emea/ url 1 2026-08-06 13:13:00
https://blog.bushidotoken.net/2026/06/uk-cybercrime-journal-arup-group.html url 1 2026-08-06 13:13:00
https://www.resecurity.com/blog/article/cybercriminals-are-targeting-edtech-data-breaches-and-ransomware-attacks-on-the-rise url 1 2026-08-06 13:13:00
https://cloud.google.com/blog/topics/threat-intelligence/prc-targets-us-medical-research url 1 2026-08-06 13:13:00
https://thecyberexpress.com/cyberattacks-on-jordan/ url 1 2026-08-06 13:13:00
https://www.proofpoint.com/us/blog/threat-insight/ta4922-suspected-chinese-crime-group-going-global url 2 2026-08-06 13:13:03
https://teamt5.org/tw/posts/alert-exploitation-of-cve-2026-34197-in-apache-active-mq?utm_source=rss&tm_medium=rss url 1 2026-08-06 13:13:00
https://www.recordedfuture.com/research/latin-america-and-the-caribbean-cybercrime-landscape url 1 2026-08-06 13:13:00
https://intelinsights.substack.com/p/profiling-hacktivist-groupsalliances url 1 2026-08-06 13:13:00
https://outpost24.com/blog/hacktivist-cyber-operations-iran-israel/ url 1 2026-08-06 13:13:00
https://thehackernews.com/2025/06/us-agencies-warn-of-rising-iranian.html url 1 2026-08-06 13:13:00
sundhed.dk domain 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/26/e/banana-rat.html url 1 2026-08-06 13:13:00
https://www.f6.ru/blog/narketing163/?utm_referrer=https%3A//www.f6.ru/blog/narketing163/ url 1 2026-08-06 13:13:00
https://www.microsoft.com/en-us/security/blog/2026/05/18/storm-2949-turned-compromised-identity-into-cloud-wide-breach/ url 1 2026-08-06 13:13:00
https://hacknotice.com/2026/03/16/hualun-new-materials-suffers-massive-data-breach-by-snowsoul/ url 1 2026-08-06 13:13:00
https://dailydarkweb.net/guangdong-caiding-market-group-faces-data-breach-after-extortion/ url 1 2026-08-06 13:13:00
https://dailydarkweb.net/snowsoul-attack-hits-multiple-chinese-organizations/ url 1 2026-08-06 13:13:00
https://unit42.paloaltonetworks.com/windows-backdoor-for-novel-c2-communication/ url 1 2026-08-06 13:13:00
https://blog.qualys.com/qualys-insights/2026/06/02/hazybeacon-aws-lambda-function-url-command-control-abuse url 1 2026-08-06 13:13:00
https://labs.withsecure.com/publications/greyvibe url 1 2026-08-06 13:13:00
https://hackernoon.com/zeffsec-resurfaces-on-telegram-claims-breach-of-gozine2ir url 1 2026-08-06 13:13:00
https://unit42.paloaltonetworks.com/cl-unk-1068-targets-critical-sectors/ url 1 2026-08-06 13:13:00
https://www.wiz.io/blog/threat-actors-target-crypto-orgs url 1 2026-08-06 13:13:00
https://www.group-ib.com/blog/ghost-stadium-football-fraud/ url 1 2026-08-06 13:13:00
https://trojan-killer.net/drivesurge-clickfix-fake-browser-updates/ url 1 2026-08-06 13:13:00
https://raw.githubusercontent.com/microsoft/mstic/master/PublicFeeds/ThreatActorNaming/MicrosoftMapping.json url 1 2026-08-06 13:13:00
https://www.microsoft.com/en-us/security/blog/2026/03/12/storm-2561-uses-seo-poisoning-to-distribute-fake-vpn-clients-for-credential-theft/ url 1 2026-08-06 13:13:00
https://darkwebinformer.com/polish-eco-friendly-retailer-vegehome-suffers-data-breach-exposing-100k-customers/ url 1 2026-08-06 13:13:00
https://darkwebinformer.com/almaex-iranian-cryptocurrency-exchange-breach-allegedly-exposes-over-50-000-user-records/ url 1 2026-08-06 13:13:00
https://darkwebinformer.com/singapore-traditional-chinese-medicine-clinic-kin-teck-tong-allegedly-suffers-data-breach-exposing-150-000-patient-records/ url 1 2026-08-06 13:13:00
histories.Sample domain 1 2026-08-06 13:13:00
https://www.ibm.com/think/x-force/slopoly-start-ai-enhanced-ransomware-attacks url 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/26/d/inside-shadow-earth-053.html url 1 2026-08-06 13:13:00
https://blog.xlab.qianxin.com/mr_rot13-the-elusive-6-year-hacker-group-weaponizing-critical-cpanel-flaws-for-backdoor-deployment/ url 1 2026-08-06 13:13:00
https://news.sophos.com/en-us/2024/12/19/phishing-platform-rockstar-2fa-trips-and-flowerstorm-picks-up-the-pieces/ url 1 2026-08-06 13:13:00
https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/ url 1 2026-08-06 13:13:00
https://darkwebinformer.com/alleged-breach-of-chiles-ley-del-lobby-platform-exposes-250gb-of-government-lobbying-records-spanning-2018-to-2026/ url 1 2026-08-06 13:13:00
https://darkwebinformer.com/alleged-breach-of-chiles-servicio-civil-platform-exposes-110k-public-servant-records-with-full-names-and-user-ids/ url 1 2026-08-06 13:13:00
https://redpiranha.net/news/threat-intelligence-report-april-21-april-27-2026 url 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/25/j/premier-pass-as-a-service.html url 1 2026-08-06 13:13:00
https://blog.talosintelligence.com/uat-8302/ url 1 2026-08-06 13:13:00
https://www.sophos.com/en-us/blog/nickel-alley-strategy-fake-it-til-you-make-it url 1 2026-08-06 13:13:00
https://cloud.google.com/blog/topics/threat-intelligence/unc6692-social-engineering-custom-malware/ url 1 2026-08-06 13:13:00
https://expel.com/blog/inside-lazarus-how-north-korea-uses-ai-to-industrialize-attacks-on-developers/ url 1 2026-08-06 13:13:00
tasks.json domain 1 2026-08-06 13:13:00
https://web-assets.esetstatic.com/wls/en/papers/white-papers/gopherwhisper-burrow-full-malware.pdf url 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/26/a/shadow-aether-015-earth-preta-mitre.html url 1 2026-08-06 13:13:00
https://blog.talosintelligence.com/new-lua-based-malware-lucidrook/ url 1 2026-08-06 13:13:00
https://www.confiant.com/news/cashrewindo-investment-scam-unveiled url 1 2026-08-06 13:13:00
https://www.redpacketsecurity.com/krybit-ransomware-victim-fraper-com/ url 1 2026-08-06 13:13:00
https://www.redpacketsecurity.com/krybit-ransomware-victim-hacked-0apt/ url 1 2026-08-06 13:13:00
https://www.cyberdaily.au/security/13464-exclusive-krybit-hackers-claim-breach-of-new-zealand-it-services-provider url 1 2026-08-06 13:13:00
fraper.com domain 1 2026-08-06 13:13:00
asesoriauriel.com domain 1 2026-08-06 13:13:00
https://www.dataminr.com/resources/intel-brief/pro-iran-actor-ababil-of-minab-claims-cyberattack-on-la-metro/ url 1 2026-08-06 13:13:00
https://www.recordedfuture.com/research/graycharlie-hijacks-law-firm-sites-suspected-supply-chain-attack url 1 2026-08-06 13:13:00
https://businessinsights.bitdefender.com/coinbase-cartel-ransomware-group-extortion-tactics url 1 2026-08-06 13:13:00
https://cybelangel.com/blog/ruskinet-hacktivism-apt-threats/ url 1 2026-08-06 13:13:00
https://cert.gov.ua/article/6288047 url 1 2026-08-06 13:13:00
https://socprime.com/blog/uac-0255-distributing-agewheeze-rat/ url 1 2026-08-06 13:13:00
https://bi.zone/eng/expertise/blog/arcane-werewolf-vernulsya-s-obnovlennym-implantom-loki/ url 1 2026-08-06 13:13:00
https://blog.talosintelligence.com/uat-10608-inside-a-large-scale-automated-credential-harvesting-operation-targeting-web-applications/ url 1 2026-08-06 13:13:00
https://www.f6.ru/blog/bearlyfy/ url 1 2026-08-06 13:13:00
https://therecord.media/ransomware-ukraine-russia-bearlyfy url 1 2026-08-06 13:13:00
https://asec.ahnlab.com/en/92988/ url 1 2026-08-06 13:13:00
https://cstromblad.com/posts/threat-actor-profile-teampcp/ url 1 2026-08-06 13:13:00
https://flare.io/learn/resources/blog/teampcp-cloud-native-ransomware url 1 2026-08-06 13:13:00
https://www.crowdstrike.com/en-us/adversaries/altered-spider/ url 1 2026-08-06 13:13:00
https://tracebit.com/blog/detecting-cicd-supply-chain-attacks-with-canary-credentials url 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/26/c/inside-litellm-supply-chain-compromise.html url 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/26/c/teampcp-telnyx-attack-marks-a-shift-in-tactics.html url 1 2026-08-06 13:13:00
https://blog.talosintelligence.com/talos-developing-situation-in-the-middle-east/ url 1 2026-08-06 13:13:00
https://www.sophos.com/en-us/blog/hacktivist-campaigns-increase-as-united-states-iran-and-israel-conflict-intensifies url 1 2026-08-06 13:13:00
https://www.cyfirma.com/research/firewalls-and-frontlines-the-india-pakistan-cyber-battlefield-crisis/ url 1 2026-08-06 13:13:00
https://www.netscout.com/blog/asert/keymous-threat-actor-profile url 1 2026-08-06 13:13:00
https://www.radware.com/security/threat-advisories-and-attack-reports/ddos-activity-following-operation-epic-fury-roaring-lion/ url 1 2026-08-06 13:13:00
https://www.rapid7.com/blog/post/tr-iran-cyber-playbook-escalating-regional-conflict/ url 1 2026-08-06 13:13:00
https://securitybrief.com.au/story/fake-captcha-scam-targets-2-353-wordpress-sites-warns-cybercx url 1 2026-08-06 13:13:00
https://cloud.google.com/blog/topics/threat-intelligence/threats-to-defense-industrial-base url 1 2026-08-06 13:13:00
https://www.picussecurity.com/resource/blog/how-noname05716-uses-ddosia-to-attack-nato-targets url 1 2026-08-06 13:13:00
https://www.intel471.com/blog/winter-olympics-2026-hacktivism-surges-ahead-of-protests-and-suspected-sabotage url 1 2026-08-06 13:13:00
https://socradar.io/blog/telegram-activity-timeline-iran-israel-us-war/ url 1 2026-08-06 13:13:00
https://cloud.google.com/security/report/resources/cloud-threat-horizons-report-h1-2026 url 1 2026-08-06 13:13:00
https://origin-unit42.paloaltonetworks.com/espionage-campaign-against-military-targets/ url 1 2026-08-06 13:13:00
https://attack.mitre.org/groups/G1052/ url 1 2026-08-06 13:13:00
https://www.microsoft.com/en-us/security/blog/2026/03/11/contagious-interview-malware-delivered-through-fake-developer-job-interviews/ url 1 2026-08-06 13:13:00
https://about.gitlab.com/blog/gitlab-threat-intelligence-reveals-north-korean-tradecraft/ url 1 2026-08-06 13:13:00
https://botcrawl.com/nippon-medical-school-musashi-kosugi-hospital-data-breach-claimed-by-netrunnerpr/ url 1 2026-08-06 13:13:00
https://www.group-ib.com/blog/gtfire-phishing-scheme/ url 1 2026-08-06 13:13:00
https://blog.talosintelligence.com/uat-9244/ url 1 2026-08-06 13:13:00
bloopencil.net domain 1 2026-08-06 13:13:00
https://blog.talosintelligence.com/uat-8616-sd-wan/ url 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/25/k/lumma-stealer-browser-fingerprinting.html url 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/25/j/the-impact-of-water-kurita-lumma-stealer-doxxing.html url 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/25/g/lumma-stealer-returns.html url 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/25/c/ai-assisted-fake-github-repositories.html url 1 2026-08-06 13:13:00
https://www.recordedfuture.com/research/from-castleloader-to-castlerat-tag-150-advances-operations url 1 2026-08-06 13:13:00
https://www.recordedfuture.com/research/graybravos-castleloader-activity-clusters-target-multiple-industries url 1 2026-08-06 13:13:00
https://nsfocusglobal.com/top-security-incidents-of-2025-the-emergence-of-the-chainedshark-apt-group/ url 1 2026-08-06 13:13:00
https://cloud.google.com/blog/topics/threat-intelligence/disrupting-gridtide-global-espionage-campaign/ url 1 2026-08-06 13:13:00
https://www.sprocketsecurity.com/blog/tracing-a-threat-actors-footprints-on-tor url 1 2026-08-06 13:13:00
https://www.cybereason.com/blog/the-gentlemen-ransomware url 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/25/i/unmasking-the-gentlemen-ransomware.html url 1 2026-08-06 13:13:00
https://socradar.io/blog/dark-web-profile-the-gentlemen-ransomware/ url 1 2026-08-06 13:13:00
https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit?linkId=59478481 url 1 2026-08-06 13:13:00
https://isovalent.com/blog/post/voidlink-cloud-malware-detection/ url 1 2026-08-06 13:13:00
https://blog.talosintelligence.com/voidlink/ url 1 2026-08-06 13:13:00
https://unit42.paloaltonetworks.com/new-windows-based-malware-family-airstalk/ url 1 2026-08-06 13:13:00
https://www.koi.ai/blog/whitecobra-vscode-cursor-extensions-malware url 1 2026-08-06 13:13:00
https://www.humansecurity.com/learn/blog/satori-threat-intelligence-alert-slopads-covers-fraud-with-layers-of-obfuscation/ url 1 2026-08-06 13:13:00
https://www.bleepingcomputer.com/news/security/italian-university-la-sapienza-goes-offline-after-cyberattack/ url 1 2026-08-06 13:13:00
https://www.proofpoint.com/us/blog/threat-insight/access-granted-phishing-device-code-authorization-account-takeover url 1 2026-08-06 13:13:00
https://flare.io/learn/resources/blog/paytool-targets-canadians-traffic-scams url 1 2026-08-06 13:13:00
https://www.cloudsek.com/blog/pivoting-from-paytool-tracking-various-frauds-and-e-crime-targeting-canada url 1 2026-08-06 13:13:00
https://harfanglab.io/insidethelab/redkitten-ai-accelerated-campaign-targeting-iranian-protests/ url 1 2026-08-06 13:13:00
https://unit42.paloaltonetworks.com/shadow-campaigns-uncovering-global-espionage/ url 1 2026-08-06 13:13:00
https://ics-cert.kaspersky.com/publications/reports/2025/12/01/apt-and-financial-attacks-on-industrial-organizations-in-q3-2025/ url 1 2026-08-06 13:13:00
https://www.oligo.security/blog/shadowray-2-0-attackers-turn-ai-against-itself-in-global-campaign-that-hijacks-ai-into-self-propagating-botnet url 1 2026-08-06 13:13:00
https://www.trendmicro.com/en_us/research/25/l/SHADOW-VOID-042.html url 1 2026-08-06 13:13:00
https://cert.gov.ua/article/6286219 url 1 2026-08-06 13:13:00
https://www.recordedfuture.com/research/drat-v2-updated-drat-emerges-tag-140s-arsenal url 1 2026-08-06 13:13:00
https://cloud.google.com/blog/topics/threat-intelligence/expansion-shinyhunters-saas-data-theft/ url 1 2026-08-06 13:13:00
https://blog.checkpoint.com/research/amaranth-dragon-targeted-cyber-espionage-campaigns-across-southeast-asia/ url 1 2026-08-06 13:13:00
https://rewterz.com/threat-advisory/apt-ung0002-expands-cyber-espionage-campaigns-across-asia-active-iocs url 1 2026-08-06 13:13:00
https://www.seqrite.com/blog/ung0002-espionage-campaigns-south-asia/ url 1 2026-08-06 13:13:00
https://therecord.media/sedgwick-cyber-incident-ransomware url 1 2026-08-06 13:13:00
https://www.fortinet.com/blog/threat-research/unveiling-the-weaponized-web-shell-encystphp url 1 2026-08-06 13:13:00
https://unit42.paloaltonetworks.com/digium-phones-web-shell/ url 1 2026-08-06 13:13:00
https://research.checkpoint.com/2020/inj3ctor3-operation-leveraging-asterisk-servers-for-monetization/ url 1 2026-08-06 13:13:00
CVE-2021-45461 cve 1 2026-08-06 13:13:00
https://www.welivesecurity.com/en/eset-research/bladedfeline-whispering-dark/ url 1 2026-08-06 13:13:00
https://catalyst.prodaft.com/public/report/lucid/overview#paragraph-1055|388 url 1 2026-08-06 13:13:00
https://www.sgdsn.gouv.fr/publications/analyse-du-mode-operatoire-informationnel-russe-storm-1516 url 1 2026-08-06 13:13:00
https://www.defense.gouv.fr/actualites/storm-1516-dessous-dune-operation-dinfluence-russe url 1 2026-08-06 13:13:00
https://www.recordedfuture.com/research/stimmen-aus-moskau-russian-influence-operations-target-german-elections url 1 2026-08-06 13:13:00
https://www.recordedfuture.com/research/russian-influence-assets-converge-on-moldovan-elections url 1 2026-08-06 13:13:00
https://www.recordedfuture.com/research/copycop-deepens-its-playbook-with-new-websites-and-targets url 1 2026-08-06 13:13:00
https://www.proofpoint.com/us/blog/threat-insight/10-things-i-hate-about-attribution-romcom-vs-transferloader url 1 2026-08-06 13:13:00
Aggregates are cached (30 min; refresh) and capped, so this dashboard stays fast even when the category spans millions of indicators. Every ASN / org / country / family is a pivot to its own dashboard.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php