Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

PFCloud · Bulletproof Hosting · Datacarry Ransomware

Datacarry ransomware is a malware threat linked to PFCloud bulletproof hosting infrastructure. It targets a broad range of sectors and uses multiple MITRE ATT&CK techniques such as T1190 (exploit public-facing application), T1059.001 (PowerShell), T1021.001 (remote desktop protocol), T1562.001 (disable or modify tools), T1497.001 (system checks), T1071.001 (web protocols), T1572 (protocol tunneling), T1041 (exfiltration over C2 channel), T1486 (data encrypted for impact), and T1567 (exfiltration over web service). The ransomware campaign is ongoing with no official patch or fix available. No confirmed exploits in the wild have been documented. The threat affects multiple countries and sectors, indicating a wide targeting scope.

Detailed information about PFCloud · Bulletproof Hosting · Datacarry Ransomware. Get real-time updates, technical details, and mitigation strategies.

PFCloud · Bulletproof Hosting · Datacarry Ransomware - Live Threat Intelligence - Threat Radar | OffSeq.com

Operation Cobalt Whisper: Threat Actor Targets Multiple Industries Across Hong Kong and Pakistan.

Operation Cobalt Whisper is a low-severity cyber threat campaign identified through open-source intelligence (OSINT) that targets multiple industries primarily in Hong Kong and Pakistan. The threat actor employs a multi-faceted attack approach leveraging spearphishing with malicious attachments (MITRE ATT&CK T1566.001), delivery of malicious files (T1204.002), and execution of Visual Basic scripts (T1059.005). Persistence is maintained through scheduled tasks (T1053.005), and the attacker uses portable executable injection techniques (T1055.002) to evade detection and maintain foothold. The campaign includes system owner/user discovery (T1033) to gather information about compromised environments and uses web protocols (T1071.001) for command and control communications. The targeted sectors are diverse, including academia, civil aviation, defense, electric and energy utilities, engineering, environmental organizations, IT security firms, pharmacy, and security actors, indicating a broad strategic interest in critical infrastructure and sensitive information. While no specific vulnerabilities or exploits have been identified, the campaign’s use of spearphishing and malicious file execution highlights the reliance on social engineering and user interaction to initiate compromise. The absence of patch availability and known exploits in the wild suggests this is an emerging or ongoing threat rather than a vulnerability with a known fix. The campaign’s low severity rating reflects limited impact or sophistication observed to date but does not preclude escalation or broader targeting in the future.

filename is a placeholder - do not use for detection

translates to “Attachment 2: Regulations on Scientific and Technological Awards of the China Electrotechnical Society (Revised April 2024)

Detailed information about Operation Cobalt Whisper: Threat Actor Targets Multiple Industries Across Hong Kong and Pakistan.. Get real-time updates, technical d

Operation Cobalt Whisper: Threat Actor Targets Multiple Industries Across Hong Kong and Pakistan. - Live Threat Intelligence - Threat Radar | OffSeq.com


PFCloud · Bulletproof Hosting · Datacarry Ransomware 0 PFCloud · Bulletproof Hosting · Datacarry Ransomware MediumMalwareBelgiumDenmarkFrance+9#misp-galaxy:ransomware="datacarry"#misp-galaxy:sector="civil aviation"#misp-galaxy:sector="education" Join the discussion	CIRCL OSINT Feed	02/18/2026, 00:00:00 UTC Added: 06/30/2026, 06:09:09 UTC
Operation Cobalt Whisper: Threat Actor Targets Multiple Industries Across Hong Kong and Pakistan. 0 Operation Cobalt Whisper: Threat Actor Targets Multiple Industries Across Hong Kong and Pakistan. LowUnknownGermanyFranceItaly+5#misp-galaxy:country="hong kong"#misp-galaxy:country="pakistan"#misp-galaxy:target-information="hong kong" Join the discussion	CIRCL OSINT Feed	10/24/2024, 00:00:00 UTC Added: 05/28/2025, 02:59:21 UTC

Threats Tagged 'misp-galaxy:sector="civil aviation"'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'misp-galaxy:sector="civil aviation"'

Lead Pen Test Professional