Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This investigation delves into information operations conducted by Russian actors known as Doppelgänger, focusing on their activities from early June to late-July 2024. It examines their tactics, associated infrastructure, and motivations, particularly in relation to the unexpected snap general election in France during this period. The analysis reveals a persistent and complex effort to disseminate disinformation through social media, impersonating legitimate news websites and employing intricate redirection chains. The operations primarily target conservative and nationalist sentiments, aiming to destabilize Western democracies by exploiting existing societal and political divisions.

The Doppelgänger information operations campaign, attributed to Russian threat actors, represents a sophisticated disinformation effort targeting Western democracies, particularly in Europe and the US, during the mid-2024 period. This campaign coincided with the unexpected snap general election in France, indicating a strategic timing to maximize political disruption. The actors employ complex tactics including impersonation of legitimate news websites and the use of intricate redirection chains to disseminate false or misleading information. These operations primarily exploit social media platforms to amplify conservative and nationalist sentiments, aiming to deepen societal and political divisions. The campaign leverages a broad spectrum of tactics mapped to MITRE ATT&CK techniques such as social engineering (phishing), infrastructure manipulation, and use of compromised or spoofed accounts to propagate disinformation. The absence of direct malware or exploit usage indicates a focus on psychological and information warfare rather than traditional cyber intrusion. The actors’ infrastructure and methods demonstrate persistence and adaptability, making detection and mitigation challenging. The campaign’s complexity and targeting of election-related events underscore its intent to undermine democratic processes and public trust in institutions.

Detailed information about Mid-year Doppelganger information operations in Europe and the US. Get real-time updates, technical details, and mitigation strategie

Mid-year Doppelganger information operations in Europe and the US - Live Threat Intelligence - Threat Radar | OffSeq.com

Mid-year Doppelganger information operations in Europe and the US

Threats Tagged 'russian actors'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'russian actors'

Lead Pen Test Professional