Reddit NetSec

CVE Database V5

AlienVault OTX General

Exploit-DB RSS Feed

Reddit InfoSec News

CIRCL OSINT Feed

ThreatFox MISP Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Turla Nautilus Implant is a malware component attributed to the Turla threat actor group, known for sophisticated cyber-espionage campaigns. The implant is part of a broader campaign identified through open-source intelligence (OSINT) and reported by CIRCL. Turla is a well-documented advanced persistent threat (APT) group that targets government, military, and diplomatic entities, often leveraging custom malware tools to maintain stealthy access and exfiltrate sensitive information. The Nautilus implant is believed to be a backdoor or remote access tool used to establish persistence and control over compromised systems. Although specific technical details about the implant's capabilities, infection vectors, or affected software versions are not provided, the association with Turla suggests a focus on espionage and targeted intrusions. The threat level is indicated as moderate (3 on an unspecified scale), with a low severity rating assigned by the source. No known exploits in the wild have been reported, and no direct indicators of compromise (IOCs) or patch information are available. The implant is tagged with references to the Turla intrusion set and the Wipbot tool, which may be related components or frameworks used by the group. Overall, the Nautilus implant represents a targeted espionage threat rather than a widespread vulnerability or mass exploitation campaign.

Detailed information about OSINT - Turla Nautilus Implant. Get real-time updates, technical details, and mitigation strategies.

OSINT - Turla Nautilus Implant - Live Threat Intelligence - Threat Radar | OffSeq.com

OSINT - Turla Nautilus Implant

OSINT phishing sites and php kits - February 2016 - Part 1 by TechHelpList

The provided information pertains to a low-severity phishing threat involving OSINT (Open Source Intelligence) phishing sites and PHP kits, as reported by TechHelpList in February 2016. Phishing attacks typically involve the creation of fraudulent websites or email campaigns designed to deceive users into divulging sensitive information such as credentials, financial data, or personal details. In this case, the threat centers around phishing sites and PHP kits, which are pre-built or customizable PHP scripts used by attackers to facilitate phishing campaigns. These kits often automate the process of capturing user input and can be deployed rapidly to target victims. The mention of OSINT suggests that attackers may be leveraging publicly available information to tailor phishing campaigns, increasing their effectiveness by making them more convincing or targeted. However, the threat is categorized as low severity, with no known exploits in the wild at the time of reporting, and no specific affected versions or products identified. The technical details indicate a moderate threat level (4) and analysis score (2), but the overall credibility and reliability of the source information are moderate to low, as indicated by the Admiralty scale tags. Given the age of the report (2016) and the lack of detailed technical indicators or exploits, this threat appears to be more informational about phishing tactics rather than an active, high-risk vulnerability or exploit.

Detailed information about OSINT phishing sites and php kits - February 2016 - Part 1 by TechHelpList. Get real-time updates, technical details, and mitigation 

OSINT phishing sites and php kits - February 2016 - Part 1 by TechHelpList - Live Threat Intelligence - Threat Radar | OffSeq.com

OSINT Phishing sites and exploit kits december 2015 - part 2 by TechHelpList

The provided information refers to a report titled "OSINT Phishing sites and exploit kits December 2015 - part 2 by TechHelpList," which appears to be a collection or analysis of open-source intelligence (OSINT) related to phishing sites and exploit kits active around December 2015. The data is sourced from CIRCL, a known cybersecurity research entity. However, the details are sparse, with no specific vulnerabilities, affected software versions, or exploit mechanisms described. The threat is categorized as low severity, with no known exploits in the wild and no patches or mitigations explicitly linked. The tags indicate that the information is OSINT-based, with a white traffic light protocol (TLP) classification, and the admiralty scale ratings suggest moderate source reliability and information credibility. The technical details mention a threat level of 4 and an analysis rating of 2, but without further context, these metrics are difficult to interpret precisely. Overall, this appears to be an informational report summarizing the landscape of phishing sites and exploit kits at that time rather than a direct vulnerability or active threat vector.

Detailed information about OSINT Phishing sites and exploit kits december 2015 - part 2 by TechHelpList affecting type osint. Get real-time updates, technical d

OSINT Phishing sites and exploit kits december 2015 - part 2 by TechHelpList - Live Threat Intelligence - Threat Radar | OffSeq.com

OSINT phishing sites and php kits - January 2016 - Part 1  by TechHelpList

The provided information pertains to a security threat involving OSINT (Open Source Intelligence) phishing sites and PHP kits as reported in January 2016 by TechHelpList and sourced from CIRCL. Phishing sites are fraudulent websites designed to mimic legitimate ones to deceive users into divulging sensitive information such as login credentials, financial data, or personal details. PHP kits refer to pre-built or easily customizable PHP-based scripts that facilitate the rapid deployment of phishing websites. These kits often include features such as credential harvesting, email notification, and sometimes rudimentary obfuscation to evade detection. The report categorizes this threat as phishing-related, with a low severity rating and no known exploits in the wild at the time of publication. The threat level is indicated as 4 on an unspecified scale, with limited analysis (score 2), suggesting that the information is somewhat preliminary or not deeply detailed. The absence of affected versions or specific product vulnerabilities implies that this threat is more about the availability and use of phishing infrastructure rather than a direct software vulnerability. The tags and reliability scores indicate moderate credibility and open sharing (TLP: white), meaning the information is intended for broad dissemination. Overall, this threat highlights the ongoing risk posed by phishing campaigns leveraging OSINT techniques to identify targets and deploy PHP-based phishing sites, which remain a common vector for credential theft and social engineering attacks.

Detailed information about OSINT phishing sites and php kits - January 2016 - Part 1  by TechHelpList. Get real-time updates, technical details, and mitigation 

Title	Severity	Type	Source	Date

Threats Tagged 'admiralty-scale:source-reliability="f"'

Filter Threats