Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Qilin ransomware is used for domain-wide encryption, and a ransom is then demanded for the decryption keys and/or to prevent the publication of the stolen data. Qilin affiliates are recruited from cybercrime forums to use the Qilin RaaS platform, which handles payload generation, the publication of stolen data, and ransom negotiations.

Qilin ransomware is a sophisticated Ransomware-as-a-Service (RaaS) operation that facilitates domain-wide encryption attacks by affiliates recruited from cybercrime forums. The RaaS platform automates key stages of the attack lifecycle: generating ransomware payloads, publishing stolen data on leak sites, and managing ransom negotiations. The ransomware encrypts entire domains, severely disrupting organizational operations and demanding ransom payments in cryptocurrency, typically Bitcoin, to restore access or prevent data leaks. The threat actors employ multiple tactics including phishing campaigns (MITRE T1566), supply chain attacks, and lateral movement techniques (T1176, T1090) to infiltrate and propagate within victim networks. The infrastructure includes Tor onion sites for anonymized communication and data leak publication, complicating attribution and takedown efforts. Although no active exploits are currently reported, the platform’s modular design and affiliate model increase the risk of rapid deployment and evolution. The presence of related ransomware families (Fin12, Alphv/BlackCat, Ryuk) suggests shared tactics and potential cross-actor collaboration or code reuse. Indicators of compromise include IP 31.41.244.100 (Russian ASN) and multiple onion domains used for command and control and leak sites. The threat’s medium severity reflects its capability to cause significant operational disruption and data exposure, balanced by the current lack of widespread active exploitation.

Detailed information about The Evolution of Qilin RaaS. Get real-time updates, technical details, and mitigation strategies.

The Evolution of Qilin RaaS - Live Threat Intelligence - Threat Radar | OffSeq.com

The Evolution of Qilin RaaS

Threats Tagged 'wikileaks'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'wikileaks'

Lead Pen Test Professional