Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

HUMAN's Satori team uncovered and partially disrupted BADBOX 2.0, a complex fraud operation targeting over 1 million low-cost consumer devices worldwide. The scheme involves a backdoor pre-installed on devices or distributed through unofficial app marketplaces, allowing threat actors to conduct various fraudulent activities. These include selling residential proxy services, ad fraud through hidden ads and WebViews, and click fraud. Four main threat actor groups were identified: SalesTracker, MoYu, Lemon, and LongTV. The operation affects Android Open Source Project devices in 222 countries, with Brazil being the most impacted. Disruption efforts involved collaboration with Google and other partners to mitigate the threat's impact.

BADBOX 2.0 is a sophisticated fraud campaign uncovered by HUMAN's Satori team that targets over one million low-cost consumer devices globally, primarily those running on the Android Open Source Project (AOSP). The threat actors behind BADBOX 2.0 leverage a backdoor that is either pre-installed on devices during manufacturing or distributed through unofficial app marketplaces. This backdoor enables multiple fraudulent activities, including the sale of residential proxy services, ad fraud via hidden advertisements and WebViews, and click fraud. The operation is orchestrated by at least four distinct threat actor groups named SalesTracker, MoYu, Lemon, and LongTV. The campaign's reach is extensive, affecting devices in 222 countries, with Brazil identified as the most impacted region. The backdoor facilitates covert control and communication with command and control servers, enabling the execution of various tactics such as proxy service abuse (T1071.001), ad fraud (T1608, T1608.001), and botnet activities (T1104). The disruption efforts involved collaboration between HUMAN, Google, and other partners to mitigate the threat's impact, including domain takedowns and blocking malicious infrastructure. Despite the disruption, the campaign highlights the risks associated with low-cost consumer devices that may lack robust supply chain security and the dangers of unofficial app marketplaces. BADBOX 2.0 exemplifies how compromised consumer devices can be weaponized for large-scale fraud operations, leveraging the scale and diversity of IoT and Android ecosystems.

Detailed information about Threat Intelligence Disruption: BADBOX 2.0 Targets Consumer Devices with Multiple Fraud Schemes. Get real-time updates, technical det

Threat Intelligence Disruption: BADBOX 2.0 Targets Consumer Devices with Multiple Fraud Schemes - Live Threat Intelligence - Threat Radar | OffSeq.com

Threat Intelligence Disruption: BADBOX 2.0 Targets Consumer Devices with Multiple Fraud Schemes

Threats Tagged 'consumer devices'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'consumer devices'

Lead Pen Test Professional