Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An investigation using Silent Push's Traffic Origin and residential proxy data revealed a suspicious Chinese VPN provider. The analysis focused on IP address 205.198.91.155, which showed unusual traffic from Russia, China, Myanmar, Iran, and Venezuela. This IP was linked to the domain lvcha.in, hosting a Chinese-language VPN. Further investigation uncovered nearly 50 related domains promoting the same VPN, suggesting attempts to bypass country-level firewalls. The VPN's infrastructure was found to use residential proxies and had connections to various high-risk countries. This case study demonstrates the importance of verifying physical and technical behaviors of connections to protect against fraud and state-sponsored actors using stolen identities and spoofed locations.

This threat involves a suspicious Chinese VPN provider identified through a combined analysis of Silent Push Traffic Origin data and residential proxy intelligence. The investigation centered on IP address 205.198.91.155, linked to the domain lvcha.in, which hosts a Chinese-language VPN service. Nearly 50 additional domains promoting the same VPN were discovered, suggesting a coordinated effort to circumvent country-level firewalls and censorship. The VPN infrastructure leverages residential proxies, which are IP addresses assigned to ordinary consumer devices, to mask its true origin and evade detection. Traffic analysis revealed unusual patterns originating from high-risk countries such as Russia, China, Myanmar, Iran, and Venezuela, indicating potential use by state-sponsored threat actors or fraudsters employing geolocation spoofing and stolen identities. The campaign aligns with tactics including T1090 (proxy), T1133 (external remote services), T1584 (compromise infrastructure), and T1608 (state-sponsored). Although no direct exploits or malware have been observed, the use of residential proxies and multiple domains complicates attribution and detection. This case underscores the necessity for organizations to verify both physical and technical connection attributes to defend against sophisticated evasion techniques and fraud. The threat does not target specific software versions and lacks known exploits in the wild, but its infrastructure could facilitate future malicious activities.

Detailed information about Silent Push Traffic Origin Data Combined with Residential Proxy Data Uncovers Suspicious Chinese VPN. Get real-time updates, technica

Silent Push Traffic Origin Data Combined with Residential Proxy Data Uncovers Suspicious Chinese VPN - Live Threat Intelligence - Threat Radar | OffSeq.com

Silent Push Traffic Origin Data Combined with Residential Proxy Data Uncovers Suspicious Chinese VPN

Threats Tagged 'geolocation spoofing'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'geolocation spoofing'

Lead Pen Test Professional