Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ESET collaborated with Microsoft and other partners in a global operation to disrupt Lumma Stealer, a prominent malware-as-a-service infostealer. ESET's contribution involved analyzing tens of thousands of malware samples to extract key data like C&C servers and affiliate identifiers. The operation targeted Lumma Stealer's infrastructure, aiming to render its exfiltration network nonoperational. Lumma Stealer had been actively developed and maintained by its operators, with regular updates to its code and network infrastructure. It employed various anti-analysis techniques and targeted a wide range of data, including credentials from browsers, cryptocurrency wallets, and other applications.

Lumma Stealer is a malware-as-a-service (MaaS) infostealer that has been actively developed and maintained by its operators, featuring regular updates to both its codebase and command-and-control (C&C) infrastructure. The malware specializes in credential theft, targeting a broad spectrum of sensitive data including browser-stored credentials, cryptocurrency wallets, and other application data. It employs various anti-analysis techniques to evade detection and hinder reverse engineering efforts, making it a persistent threat in the cybercrime ecosystem. The global operation, led by ESET in collaboration with Microsoft and other partners, focused on disrupting Lumma Stealer's infrastructure by analyzing tens of thousands of malware samples to extract critical intelligence such as C&C server addresses and affiliate identifiers. This intelligence was used to dismantle the exfiltration network, effectively rendering the malware's data theft capabilities nonoperational. The operation highlights the malware's reliance on a distributed affiliate model, where multiple actors leverage the Lumma Stealer platform to conduct credential theft campaigns. Although no known exploits in the wild are reported, the malware's continuous development and active use in credential theft campaigns pose ongoing risks to affected organizations and individuals. The disruption effort aims to significantly reduce the operational capacity of Lumma Stealer, but the threat remains relevant due to the potential for reconstitution or emergence of similar MaaS platforms.

Detailed information about Global operation disrupts Lumma Stealer. Get real-time updates, technical details, and mitigation strategies.

Global operation disrupts Lumma Stealer - Live Threat Intelligence - Threat Radar | OffSeq.com

Global operation disrupts Lumma Stealer

Threats Tagged 'disruption'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'disruption'

Lead Pen Test Professional