Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

AdaptixC2, an open-source post-exploitation and adversarial emulation framework, has been observed being used in real-world attacks. This versatile tool allows threat actors to execute commands, transfer files, and perform data exfiltration on compromised systems. Its open-source nature enables easy customization, making it highly flexible and dangerous. The framework supports sophisticated tunneling capabilities, modular design with extenders, and various beacon agent formats. Two infection scenarios were analyzed: one using social engineering via Microsoft Teams, and another likely involving AI-generated scripts. The increasing prevalence of AdaptixC2 in attacks, including its use alongside ransomware, highlights the growing trend of attackers leveraging customizable frameworks to evade detection.

AdaptixC2 is an open-source post-exploitation and adversarial emulation framework that has recently been observed in real-world cyberattacks. This framework provides threat actors with a versatile toolkit to execute a wide range of malicious activities on compromised systems, including command execution, file transfer, and data exfiltration. Its open-source nature allows attackers to easily customize and extend its capabilities, making it highly adaptable and difficult to detect. Key technical features include sophisticated tunneling capabilities that enable covert communication channels, a modular design with extenders to add or modify functionality, and support for various beacon agent formats to maintain persistent and stealthy presence within victim networks. Two primary infection vectors have been identified: one leveraging social engineering tactics via Microsoft Teams to trick users into executing malicious payloads, and another involving AI-generated scripts that automate and enhance the infection process. The framework’s increasing use in conjunction with ransomware campaigns underscores a growing trend where attackers utilize customizable frameworks to evade traditional detection mechanisms and escalate their attacks. Indicators of compromise include multiple file hashes, YARA rules, and a set of suspicious domains associated with command and control infrastructure. The framework’s tactics align with numerous MITRE ATT&CK techniques such as process injection, credential dumping, tunneling, and persistence mechanisms, highlighting its comprehensive post-exploitation capabilities. Although no CVE or known exploits in the wild are reported, the active use of AdaptixC2 in targeted campaigns demonstrates its operational threat status.

Detailed information about AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks. Get real-time updates, technical details, and mitigation stra

AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks - Live Threat Intelligence - Threat Radar | OffSeq.com

AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks

Threats Tagged 'foggyweb'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'foggyweb'

Lead Pen Test Professional