Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

OSINT - Trojan.ElectrumDoSMiner -  a Trojan responsible for the denial of service attacks against Electrum bitcoin wallets.

Trojan.ElectrumDoSMiner is a malware threat identified as a Trojan that targets Electrum Bitcoin wallets by conducting denial of service (DoS) attacks. Electrum is a widely used lightweight Bitcoin wallet that allows users to manage their cryptocurrency holdings. The Trojan's primary function is to disrupt the availability of Electrum wallets, potentially preventing users from accessing their funds or conducting transactions. This malware does not appear to exploit a software vulnerability in Electrum itself but rather operates by overwhelming the wallet's network or service components, leading to service degradation or outages. The threat was reported by CIRCL in November 2019, with a low severity rating and no known exploits in the wild at the time of reporting. The certainty of the threat is moderate (50%), indicating some confidence but also a degree of uncertainty in the full scope or impact of the Trojan. The Trojan is associated with denial of service and distributed denial of service (DDoS) attack techniques, which primarily affect the availability aspect of cybersecurity. There are no specific affected versions or patches noted, suggesting that the Trojan's impact is more related to network-level disruptions rather than direct exploitation of software vulnerabilities. The technical details indicate a moderate threat level and analysis confidence, but the lack of detailed indicators or exploits limits the depth of technical understanding. Overall, Trojan.ElectrumDoSMiner represents a malware threat aimed at disrupting Electrum wallet availability through DoS attacks, potentially impacting users' ability to access or use their Bitcoin wallets during an attack.

Detailed information about OSINT - Trojan.ElectrumDoSMiner -  a Trojan responsible for the denial of service attacks against Electrum bitcoin wallets.. Get real

OSINT - Trojan.ElectrumDoSMiner -  a Trojan responsible for the denial of service attacks against Electrum bitcoin wallets. - Live Threat Intelligence - Threat Radar | OffSeq.com

OSINT - Tale of the Two Payloads â€“ TrickBot and Nitol

The provided information concerns two malware payloads, TrickBot and Nitol, referenced in an OSINT report titled 'Tale of the Two Payloads – TrickBot and Nitol.' TrickBot is a well-known modular banking Trojan that has evolved into a sophisticated malware platform used for credential theft, lateral movement, and deployment of additional payloads. Nitol is a malware family often associated with botnet activities and has been observed in various cybercrime campaigns. The report is from CIRCL and tagged with 'misp-galaxy:tool="trick bot"' and 'europol-incident:availability="dos-ddos",' indicating a possible link to denial-of-service or distributed denial-of-service (DDoS) activities. However, the severity is marked as low, and no known exploits in the wild are reported. The technical details show a threat level of 3 and analysis level of 2, suggesting moderate concern but limited immediate threat. The lack of affected versions or patch links implies this is an informational OSINT report rather than a newly discovered vulnerability or exploit. TrickBot’s modular nature allows it to adapt and deliver various malicious payloads, including those that can disrupt availability through DDoS attacks, which aligns with the Europol incident tag. Nitol’s inclusion suggests a comparative or complementary analysis of two malware strains with different operational focuses. Overall, this report highlights the presence and characteristics of these malware tools rather than a specific new threat or vulnerability.

Detailed information about OSINT - Tale of the Two Payloads â€“ TrickBot and Nitol. Get real-time updates, technical details, and mitigation strategies.

OSINT - Tale of the Two Payloads â€“ TrickBot and Nitol - Live Threat Intelligence - Threat Radar | OffSeq.com

OSINT - BlackNurse Denial of Service Attack

The BlackNurse Denial of Service (DoS) attack is a low-bandwidth, high-impact denial of service technique that exploits the ICMP Type 3 Code 3 (Destination Unreachable - Port Unreachable) messages to overwhelm target systems. Unlike traditional volumetric DDoS attacks that rely on massive traffic volumes, BlackNurse uses relatively low traffic rates to cause significant CPU load on firewalls and network devices, leading to service degradation or outages. The attack targets the availability of network infrastructure by exploiting how certain firewalls and routers process ICMP error messages, causing them to consume excessive resources and become unresponsive. This technique is notable for its efficiency, requiring less bandwidth to achieve disruption compared to typical flood attacks. The campaign was publicly documented around 2016, with no specific affected product versions identified, indicating a broad potential impact on network devices that inadequately handle ICMP error processing. Although no known exploits in the wild are reported, the threat remains relevant due to the fundamental nature of the ICMP protocol and the widespread use of vulnerable network equipment. The low severity rating reflects the attack's limited scope and the requirement for the attacker to send ICMP packets to the target network, but the potential for service disruption remains significant, especially for organizations relying heavily on affected firewall or router models.

Detailed information about OSINT - BlackNurse Denial of Service Attack. Get real-time updates, technical details, and mitigation strategies.

Title	Severity	Type	Source	Date

Threats Tagged 'europol-incident:availability="dos-ddos"'

Filter Threats

Threats Tagged 'europol-incident:availability="dos-ddos"'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility