Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A major cybercriminal operation called Rublevka Team has generated over $10 million through cryptocurrency theft since 2023. The group employs a network of social engineering specialists who direct victims to malicious pages impersonating legitimate crypto services. Using custom JavaScript scripts, they trick users into connecting wallets and authorizing fraudulent transactions. Rublevka Team's infrastructure is fully automated, offering affiliates access to tools for launching high-volume scams. Their model poses a growing threat to cryptocurrency platforms and brands, with potential for reputational and legal risks. The group's agility in rotating domains and targeting lower-cost chains like Solana undermines traditional fraud detection efforts.

The Rublevka Team is a Russian cybercriminal group specializing in cryptocurrency theft through a sophisticated phishing operation that has generated over $10 million since 2023. Their attack methodology centers on social engineering, where victims are directed to malicious websites impersonating legitimate cryptocurrency services. These fake sites deploy custom JavaScript scripts designed to deceive users into connecting their crypto wallets and authorizing fraudulent transactions, effectively draining funds. The group’s infrastructure is fully automated and supports an affiliate program, enabling high-volume scams with scalable operations. They primarily target lower-cost blockchain networks such as Solana, which are less scrutinized by traditional fraud detection systems. The frequent rotation of domains and use of brand impersonation techniques allow Rublevka Team to evade detection and maintain operational agility. This operation threatens the confidentiality and financial integrity of users’ crypto assets and exposes cryptocurrency platforms and brands to reputational damage and legal liabilities. The absence of known exploits in the wild suggests the threat is primarily driven by social engineering and user interaction rather than technical vulnerabilities. The group’s use of automated tools and affiliate networks indicates a mature, organized criminal operation with significant resources.

Detailed information about Anatomy of a Russian Crypto Drainer Operation. Get real-time updates, technical details, and mitigation strategies.

Anatomy of a Russian Crypto Drainer Operation - Live Threat Intelligence - Threat Radar | OffSeq.com

Anatomy of a Russian Crypto Drainer Operation

Threats Tagged 'javascript drainer'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'javascript drainer'

Lead Pen Test Professional