Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Palo Alto Unit42 have uncovered a phishing kit named the IUAM ClickFix Generator that automates the creation of these attacks. The kit is designed to generate highly customizable phishing pages that lure victims by mimicking browser verification challenges often used to block automated traffic. It includes advanced features such as operating system detection and clipboard injection, enabling low-effort, cross-platform malware deployment.

The IUAM ClickFix Generator is a newly uncovered phishing kit designed to automate the creation of phishing pages that impersonate browser verification challenges, commonly used to block automated traffic such as bots. This deception technique, known as IUAM (I'm Under Attack Mode), is exploited to trick victims into believing they must complete a verification step, thereby increasing the likelihood of interaction. The kit supports advanced features including operating system detection, allowing it to tailor payloads or phishing content based on the victim’s platform, enhancing effectiveness across Windows, macOS, and potentially other systems. Clipboard injection is another sophisticated feature that enables the malware to silently insert malicious commands or data into the victim’s clipboard, facilitating stealthy malware deployment such as info stealers (e.g., DeerStealer) and remote access trojans (RATs). These capabilities reduce the effort required by attackers to conduct cross-platform attacks and increase the chances of successful infection. The phishing pages generated are highly customizable, enabling threat actors to adapt them to various targets and scenarios. Although no active exploits have been reported in the wild, the availability of such a kit lowers the barrier for attackers to launch phishing campaigns that can bypass automated defenses. The kit’s use of techniques mapped to MITRE ATT&CK tactics such as T1036 (Masquerading), T1102 (Web Service), T1059 (Command and Scripting Interpreter), T1055 (Process Injection), and T1115 (Clipboard Data) highlights its multi-faceted approach to evasion and infection. This threat represents a significant evolution in phishing toolkits by combining social engineering with technical evasion and malware delivery features.

CC=RU ASN=AS50340 ooo network of data-centers selectel

CC=BG ASN=AS8866 bulgarian telecommunications company plc.

MD5 of cd78a77d40682311fd30d74462fb3e614cbc4ea79c3c0894ba856a01557fd7c0

MD5 of 7765e5e0a7622ff69bd2cee0a75f2aae05643179b4dd333d0e75f98a42894065

MD5 of d81cc9380673cb36a30f2a84ef155b0cbc7958daa6870096e455044fba5f9ee8

MD5 of 029a5405bbb6e065c8422ecc0dea42bb2689781d03ef524d9374365ebb0542f9

MD5 of 397ee604eb5e20905605c9418838aadccbbbfe6a15fc9146442333cfc1516273

MD5 of 9090385242509a344efd734710e60a8f73719130176c726e58d32687b22067c8

MD5 of 081921671d15071723cfe979633a759a36d1d15411f0a6172719b521458a987d

MD5 of 3aee8ad1a30d09d7e40748fa36cd9f9429e698c28e2a1c3bcf88a062155eee8c

MD5 of 8ed8880f40a114f58425e0a806b7d35d96aa18b2be83dede63eff0644fd7937d

MD5 of ba5305e944d84874bde603bf38008675503244dc09071d19c8c22ded9d4f6db4

MD5 of 2b74674587a65cfc9c2c47865ca8128b4f7e47142bd4f53ed6f3cb5cf37f7a6b

MD5 of 816bf9ef902251e7de73d57c4bf19a4de00311414a3e317472074ef05ab3d565

MD5 of 7881a60ee0ad02130f447822d89e09352b084f596ec43ead78b51e331175450f

MD5 of f2a068164ed7b173f17abe52ad95c53bccf3bb9966d75027d1e8960f7e0d43ac

MD5 of 9c5920fa25239c0f116ce7818949ddce5fd2f31531786371541ccb4886c5aeb2

MD5 of 966108cf5f3e503672d90bca3df609f603bb023f1c51c14d06cc99d2ce40790c

MD5 of fe8b1b5b0ca9e7a95b33d3fcced833c1852c5a16662f71ddea41a97181532b14

MD5 of d375bb10adfd1057469682887ed0bc24b7414b7cec361031e0f8016049a143f9

MD5 of ead6b1f0add059261ac56e9453131184bc0ae2869f983b6a41a1abb167edf151

MD5 of 82b73222629ce27531f57bae6800831a169dff71849e1d7e790d9bd9eb6e9ee7

MD5 of 039f82e92c592f8c39b9314eac1b2d4475209a240a7ad052b730f9ba0849a54a

MD5 of 00c953a678c1aa115dbe344af18c2704e23b11e6c6968c46127dd3433ea73bf2

MD5 of 72633ddb45bfff1abeba3fc215077ba010ae233f8d0ceff88f7ac29c1c594ada

MD5 of d110059f5534360e58ff5f420851eb527c556badb8e5db87ddf52a42c1f1fe76

MD5 of 6e4119fe4c8cf837dac27e2948ce74dc7af3b9d4e1e4b28d22c4cf039e18b993

MD5 of 7a8250904e6f079e1a952b87e55dc87e467cc560a2694a142f2d6547ac40d5e1

SHA1 of 816bf9ef902251e7de73d57c4bf19a4de00311414a3e317472074ef05ab3d565

SHA1 of 7881a60ee0ad02130f447822d89e09352b084f596ec43ead78b51e331175450f

SHA1 of 9c5920fa25239c0f116ce7818949ddce5fd2f31531786371541ccb4886c5aeb2

SHA1 of 2b74674587a65cfc9c2c47865ca8128b4f7e47142bd4f53ed6f3cb5cf37f7a6b

SHA1 of 081921671d15071723cfe979633a759a36d1d15411f0a6172719b521458a987d

SHA1 of fe8b1b5b0ca9e7a95b33d3fcced833c1852c5a16662f71ddea41a97181532b14

SHA1 of 72633ddb45bfff1abeba3fc215077ba010ae233f8d0ceff88f7ac29c1c594ada

SHA1 of 00c953a678c1aa115dbe344af18c2704e23b11e6c6968c46127dd3433ea73bf2

SHA1 of 966108cf5f3e503672d90bca3df609f603bb023f1c51c14d06cc99d2ce40790c

SHA1 of d110059f5534360e58ff5f420851eb527c556badb8e5db87ddf52a42c1f1fe76

SHA1 of f2a068164ed7b173f17abe52ad95c53bccf3bb9966d75027d1e8960f7e0d43ac

SHA1 of 3aee8ad1a30d09d7e40748fa36cd9f9429e698c28e2a1c3bcf88a062155eee8c

SHA1 of 397ee604eb5e20905605c9418838aadccbbbfe6a15fc9146442333cfc1516273

SHA1 of 029a5405bbb6e065c8422ecc0dea42bb2689781d03ef524d9374365ebb0542f9

SHA1 of 6e4119fe4c8cf837dac27e2948ce74dc7af3b9d4e1e4b28d22c4cf039e18b993

SHA1 of cd78a77d40682311fd30d74462fb3e614cbc4ea79c3c0894ba856a01557fd7c0

SHA1 of 7765e5e0a7622ff69bd2cee0a75f2aae05643179b4dd333d0e75f98a42894065

SHA1 of 82b73222629ce27531f57bae6800831a169dff71849e1d7e790d9bd9eb6e9ee7

SHA1 of d81cc9380673cb36a30f2a84ef155b0cbc7958daa6870096e455044fba5f9ee8

SHA1 of 039f82e92c592f8c39b9314eac1b2d4475209a240a7ad052b730f9ba0849a54a

SHA1 of ead6b1f0add059261ac56e9453131184bc0ae2869f983b6a41a1abb167edf151

SHA1 of 8ed8880f40a114f58425e0a806b7d35d96aa18b2be83dede63eff0644fd7937d

SHA1 of ba5305e944d84874bde603bf38008675503244dc09071d19c8c22ded9d4f6db4

SHA1 of 9090385242509a344efd734710e60a8f73719130176c726e58d32687b22067c8

SHA1 of 7a8250904e6f079e1a952b87e55dc87e467cc560a2694a142f2d6547ac40d5e1

SHA1 of d375bb10adfd1057469682887ed0bc24b7414b7cec361031e0f8016049a143f9

CC=AT ASN=AS60781 leaseweb netherlands b.v.

CC=US ASN=AS207710 sia singularity telecom

Detailed information about The ClickFix Factory: First Exposure of IUAM ClickFix Generator. Get real-time updates, technical details, and mitigation strategies.

Threats Tagged 'clipboard'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'clipboard'

Lead Pen Test Professional