Threat database

305 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Not rated	–		osint · ThreatFox IOCs for 2024-09-16 2024-09-16ThreatFox MISP Feed ThreatFox IOCs for 2024-09-16 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2024-09-16
Not rated	–		osint · OSINT - Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion 2024-09-04CIRCL OSINT Feed Earth Lusca, a threat actor linked to China, is reported to use the KTLVdoor backdoor for multiplatform intrusion. This backdoor enables persistent access across different operating systems, facilitating espionage or data exfiltration. Although no known exploits in the wild or patches are currently available, the threat actor's activity indicates targeted payload delivery. The severity is assessed as low based on current information, but the lack of patches and the multiplatform nature warrant attention. European organizations should be aware of potential indirect risks, especially those with ties to Chinese entities or operating in sensitive sectors. Mitigation should focus on enhanced monitoring for unusual backdoor activity and network segmentation. Countries with significant Chinese business presence or geopolitical interest in China-related cyber activities are more likely to be affected. Overall, defenders should prioritize threat intelligence integration and proactive detection mechanisms to mitigate potential future exploitation. Unknown type #type:osint #osint:lifetime="perpetual"Germany+6	CIRCL OSINT Feed	2024-09-04
Not rated	–		osint · VT collection - flubot via STIX 2.1 Bundle (bundle--931832a0-f7dc-4088-b0d0-9808ad05d585) and converted with the MISP-STIX import feature. 2024-08-30CIRCL OSINT Feed VT collection - flubot via STIX 2.1 Bundle (bundle--931832a0-f7dc-4088-b0d0-9808ad05d585) and converted with the MISP-STIX import feature. Unknown type #misp-galaxy:malpedia="flubot"#type:osint Netherlands+11	CIRCL OSINT Feed	2024-08-30
Not rated	–		osint · ThreatFox IOCs for 2024-08-25 2024-08-25ThreatFox MISP Feed ThreatFox IOCs for 2024-08-25 Indicator type #type:osint #tlp:white Germany+7	ThreatFox MISP Feed	2024-08-25
Not rated	–		osint · ThreatFox IOCs for 2024-08-11 2024-08-11ThreatFox MISP Feed ThreatFox IOCs for 2024-08-11 Indicator type #type:osint #tlp:white Germany+9	ThreatFox MISP Feed	2024-08-11
Not rated	–		osint · ThreatFox IOCs for 2024-07-31 2024-07-31ThreatFox MISP Feed ThreatFox IOCs for 2024-07-31 Indicator type #type:osint #tlp:white Germany+9	ThreatFox MISP Feed	2024-07-31
Not rated	–		osint · ThreatFox IOCs for 2024-07-28 2024-07-28ThreatFox MISP Feed ThreatFox IOCs for 2024-07-28 Indicator type #type:osint #tlp:white Germany+9	ThreatFox MISP Feed	2024-07-28
Not rated	–		osint · ThreatFox IOCs for 2024-07-16 2024-07-16ThreatFox MISP Feed ThreatFox IOCs for 2024-07-16 Indicator type #type:osint #tlp:white Germany+7	ThreatFox MISP Feed	2024-07-16
Not rated	–		osint · ThreatFox IOCs for 2024-07-04 2024-07-04ThreatFox MISP Feed ThreatFox IOCs for 2024-07-04 Indicator type #type:osint #tlp:white Germany+9	ThreatFox MISP Feed	2024-07-04
Not rated	–		osint · ThreatFox IOCs for 2024-06-08 2024-06-08ThreatFox MISP Feed ThreatFox IOCs for 2024-06-08 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2024-06-08
Not rated	–		osint · OSINT - Potential abuse by Lazarus group using LinkedIn to spread malware 2024-04-24CIRCL OSINT Feed OSINT - Potential abuse by Lazarus group using LinkedIn to spread malware Malware type #misp-galaxy:threat-actor="lazarus group"#type:osint United Kingdom+5	CIRCL OSINT Feed	2024-04-24
High	7.1	EPSS 0.3%	CVE-2024-32570Cornerstone · Cross-site Scripting High7.1EPSS 0.3%2024-04-18CVE Database V5CVE-2024-32570 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0. EPSS 0.3%Vulnerability Archetyped #cwe-79	CVE Database V5	2024-04-18
Not rated	–		osint · ThreatFox IOCs for 2024-04-10 2024-04-10ThreatFox MISP Feed ThreatFox IOCs for 2024-04-10 Indicator type #type:osint #tlp:white Germany+5	ThreatFox MISP Feed	2024-04-10
High	7.1	EPSS 0.4%	CVE-2024-28001Favicon Rotator · Cross-site Scripting High7.1EPSS 0.4%2024-03-28CVE Database V5CVE-2024-28001 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Favicon Rotator allows Reflected XSS.This issue affects Favicon Rotator: from n/a through 1.2.10. EPSS 0.4%Vulnerability Archetyped #cwe-79	CVE Database V5	2024-03-28
High	7.1	EPSS 0.4%	CVE-2024-28002Cornerstone · Cross-site Scripting High7.1EPSS 0.4%2024-03-28CVE Database V5CVE-2024-28002 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0. EPSS 0.4%Vulnerability Archetyped #cwe-79	CVE Database V5	2024-03-28
Not rated	–		osint · ThreatFox IOCs for 2023-12-21 2023-12-21ThreatFox MISP Feed ThreatFox IOCs for 2023-12-21 Indicator type #type:osint #tlp:white Germany+5	ThreatFox MISP Feed	2023-12-21
Not rated	–		osint · ThreatFox IOCs for 2023-11-15 2023-11-15ThreatFox MISP Feed ThreatFox IOCs for 2023-11-15 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2023-11-15
Not rated	–		osint · ThreatFox IOCs for 2023-10-28 2023-10-28ThreatFox MISP Feed ThreatFox IOCs for 2023-10-28 Indicator type #type:osint #tlp:white Germany+4	ThreatFox MISP Feed	2023-10-28
Not rated	–		osint · ThreatFox IOCs for 2023-10-06 2023-10-06ThreatFox MISP Feed ThreatFox IOCs for 2023-10-06 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2023-10-06
Not rated	–		osint · ThreatFox IOCs for 2023-09-08 2023-09-08ThreatFox MISP Feed ThreatFox IOCs for 2023-09-08 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2023-09-08

Showing 261–280 of 305 results