Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

CNCERT and Microstep Online jointly detected a cyberattack campaign launched by the "Black Cat" criminal gang. This gang uses search engine SEO (Search Engine Optimization) techniques to push meticulously crafted phishing websites to the top of search engine keyword results. After visiting these high-ranking phishing pages, users are lured by carefully designed download pages, attempting to download software installation packages bundled with malicious programs. Once installed, the program implants a backdoor Trojan without the user's knowledge, leading to the theft of sensitive data from their host computer by attackers.

The Black Cat gang has launched a cyberattack campaign leveraging search engine optimization (SEO) to promote phishing websites that impersonate legitimate Notepad++ download pages. By manipulating search engine results, these malicious sites appear at the top of keyword searches, increasing the likelihood of user visits. Once a user visits these sites, they are presented with carefully crafted download pages offering software installation packages that are bundled with backdoor Trojans. When installed, these backdoors provide attackers with remote control over the victim's system, enabling the theft of sensitive data without the user's knowledge. This attack vector does not rely on exploiting software vulnerabilities but rather on social engineering and supply chain compromise through counterfeit software distribution. The campaign is notable for its use of SEO to increase reach and effectiveness, making it a sophisticated phishing approach. Although no specific affected software versions or CVEs are identified, the threat is significant due to the stealthy nature of the backdoor and the potential for data exfiltration. The campaign was detected by CNCERT and Microstep Online, with no known exploits in the wild beyond this campaign. The attack requires user interaction to download and install the malicious software, and it targets users searching for popular software downloads, exploiting trust in search engine rankings and legitimate software brands.

MD5 of b94c54290015ed751c84d0a9bfa6e63481c72c0d7528b4b65a2816f72ea5c994

SHA1 of b94c54290015ed751c84d0a9bfa6e63481c72c0d7528b4b65a2816f72ea5c994

Detailed information about CNCERT: Risk Warning Regarding the "Black Cat" Gang's Use of Search Engines to Spread Counterfeit Notepad++ Download Remote Control B

CNCERT: Risk Warning Regarding the "Black Cat" Gang's Use of Search Engines to Spread Counterfeit Notepad++ Download Remote Control Backdoors - Live Threat Intelligence - Threat Radar | OffSeq.com

CNCERT: Risk Warning Regarding the "Black Cat" Gang's Use of Search Engines to Spread Counterfeit Notepad++ Download Remote Control Backdoors

Threats Tagged 'notepad'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'notepad'

Lead Pen Test Professional