EudorIACyber Intelligence
Monitoraggio operativo Newsletter IT EN
SOCRadar equivalent · IOC radar

IOC Radar

Ricerca gli indicatori correlati già normalizzati nel catalogo, inclusi gli eventi MISP minimizzati con indicatori disponibili. Il valore grezzo non viene esposto al cliente.

Indicatori correlati23579conteggio dichiarato dalle fonti
Eventi restituiti100massimo 100 risultati
Periodo5yultimi 5 anni
MetodoCTIIOC conservati con provenienza e contesto
Indicator intelligence

Risultati radar

Classificazione automatica del termine
TipoEventoIndicatoriFonteAzioni
MISPPhishing with Cloudflare Workers: Transparent Phishing and HTML Smuggling-4183TLP:CLEARMISP EudorIAApri dettaglio
MISPEmotet coming in hot-2546TLP:CLEARMISP EudorIAApri dettaglio
MISPSQUIRRELWAFFLE Leverages malspam to deliver Qakbot, Cobalt Strike-1371TLP:CLEARMISP EudorIAApri dettaglio
MISPBanco Estado Chile REvil attack-1289TLP:CLEARMISP EudorIAApri dettaglio
MISPMars, a red-hot information stealer-599TLP:CLEARMISP EudorIAApri dettaglio
IOCNorth Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs-382CISA Cybersecurity AdvisoriesApri dettaglio
IOCUpdate: Destructive Malware Targeting Organizations in Ukraine-351CISA Cybersecurity AdvisoriesApri dettaglio
MISPThe Unintentional Leak: A glimpse into the attack vectors of APT37APT37 - G0067351TLP:CLEARMISP EudorIAApri dettaglio
MISPThe BlueNoroff cryptocurrency hunt is still on-326TLP:CLEARMISP EudorIAApri dettaglio
IOCRussian Military Cyber Actors Target US and Global Critical Infrastructure-293CISA Cybersecurity AdvisoriesApri dettaglio
MISPThe distinctive rattle of APT SideWinderSidewinder - G0121287TLP:CLEARMISP EudorIAApri dettaglio
MISPAA24-249A: Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure-276TLP:CLEARMISP EudorIAApri dettaglio
IOCThreat Actors Exploiting Ivanti EPMM Vulnerabilities-266CISA Cybersecurity AdvisoriesApri dettaglio
MISPAoqin Dragon | Newly-Discovered Chinese-linked APT Has Been Quietly Spying On Organizations For 10 Years-242TLP:CLEARMISP EudorIAApri dettaglio
IOC#StopRansomware: Blacksuit (Royal) RansomwareBlacksuit (Royal)238CISA Cybersecurity AdvisoriesApri dettaglio
IOC#StopRansomware: Black BastaBlack Basta234CISA Cybersecurity AdvisoriesApri dettaglio
IOC#StopRansomware: Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber ActivitiesRansomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities229CISA Cybersecurity AdvisoriesApri dettaglio
IOCIncreased Truebot Activity Infects U.S. and Canada Based Networks-221CISA Cybersecurity AdvisoriesApri dettaglio
MISPPORTAL KOMBAT A structured and coordinated pro-Russian propaganda network-219TLP:CLEARMISP EudorIAApri dettaglio
MISPFinancially motivated, dangerously activated: OPERA1ER APT in Africa-202TLP:CLEARMISP EudorIAApri dettaglio
IOC#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit VulnerabilityCL0P189CISA Cybersecurity AdvisoriesApri dettaglio
MISPTalos uncovers espionage campaigns targeting CIS countries, embassies and EU health care agency-189TLP:CLEARMISP EudorIAApri dettaglio
MISPMustang Panda deploys a new wave of malware targeting EuropeMustang Panda - G0129185TLP:CLEARMISP EudorIAApri dettaglio
MISPTargeted attack on industrial enterprises and public institutionsTA428185TLP:CLEARMISP EudorIAApri dettaglio
MISPAA24-207A North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime\'s Military and Nuclear Programs-180TLP:CLEARMISP EudorIAApri dettaglio
IOC#StopRansomware: Cuba RansomwareCuba178CISA Cybersecurity AdvisoriesApri dettaglio
MISPWhen Cats Fly: Suspected Iranian Threat Actor UNC1549 Targets Israeli and Middle East Aerospace and Defense SectorsTortoiseshell173TLP:CLEARMISP EudorIAApri dettaglio
IOC#StopRansomware: Akira RansomwareAkira164CISA Cybersecurity AdvisoriesApri dettaglio
MISPSweet QuaDreams A First Look at Spyware Vendor QuaDream’s Exploits, Victims, and Customers-164TLP:CLEARMISP EudorIAApri dettaglio
IOC#StopRansomware: Rhysida RansomwareRhysida161CISA Cybersecurity AdvisoriesApri dettaglio
MISPModifiedElephant APT and a Decade of Fabricating Evidence-161TLP:CLEARMISP EudorIAApri dettaglio
MISPBeyond the Surface: the evolution and expansion of the SideWinder APT groupSidewinder - G0121145TLP:CLEARMISP EudorIAApri dettaglio
IOC#StopRansomware: Zeppelin RansomwareZeppelin144CISA Cybersecurity AdvisoriesApri dettaglio
MISPTA505 Group’s TeslaGun In-Depth AnalysisTA505 - G0092138TLP:CLEARMISP EudorIAApri dettaglio
IOCThreat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations-135CISA Cybersecurity AdvisoriesApri dettaglio
MISPUnwrapping Ursnifs Gifts - The DFIR Report-134TLP:CLEARMISP EudorIAApri dettaglio
MISPOperation Crimson Palace: Sophos threat hunting unveils multiple clusters of Chinese state-sponsored activity targeting Southeast Asian government-127TLP:CLEARMISP EudorIAApri dettaglio
MISP10 Things I Hate About Attribution: RomCom vs. TransferLoaderRomCom124TLP:CLEARMISP EudorIAApri dettaglio
MISPBackdoor Activator Malware Running Rife Through Torrents of macOS Apps-122TLP:CLEARMISP EudorIAApri dettaglio
IOC#StopRansomware: RansomHub RansomwareRansomHub121CISA Cybersecurity AdvisoriesApri dettaglio
IOC#StopRansomware: Phobos RansomwarePhobos119CISA Cybersecurity AdvisoriesApri dettaglio
MISPIoT devices and Linux-based systems targeted by OpenSSH trojan campaign-95TLP:CLEARMISP EudorIAApri dettaglio
MISPCyberattack on fuel supplier causes supply chain disruption-95TLP:CLEARMISP EudorIAApri dettaglio
MISPMAR-10382580.r1.v1: Unidentified RAT-94TLP:CLEARMISP EudorIAApri dettaglio
MISPInvestigating APT36 or Earth Karkaddan’s Attack Chain and Malware Arsenal-92TLP:CLEARMISP EudorIAApri dettaglio
IOCImpacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization-91CISA Cybersecurity AdvisoriesApri dettaglio
MISPEarth Preta Campaign Uses DOPLUGS to Target AsiaMUSTANG PANDA90TLP:CLEARMISP EudorIAApri dettaglio
MISPVoid Rabisu’s Use of RomCom Backdoor Shows a Growing Shift in Threat Actors’ Goals-87TLP:CLEARMISP EudorIAApri dettaglio
MISPCVE-2024-21412: Water Hydra Targets Traders With Microsoft Defender SmartScreen Zero-Day-86TLP:CLEARMISP EudorIAApri dettaglio
MISPPrometei botnet improves modules and exhibits new capabilities in recent updates-83TLP:CLEARMISP EudorIAApri dettaglio
IOCThreat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications-82CISA Cybersecurity AdvisoriesApri dettaglio
IOCIranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks-81CISA Cybersecurity AdvisoriesApri dettaglio
MISPScraper: Rising Tide: Chasing the Currents of Espionage in the South China Sea-81TLP:CLEARMISP EudorIAApri dettaglio
IOCRussian GRU Targeting Western Logistics Entities and Technology Companies-78CISA Cybersecurity AdvisoriesApri dettaglio
MISPAA24-290A Iranian Cyber Actors Brute Force and Credential Access Activity Compromises Critical Infrastructure Organizations-76TLP:CLEARMISP EudorIAApri dettaglio
IOCIranian Cyber Actors’ Brute Force and Credential Access Activity Compromises Critical Infrastructure Organizations-76CISA Cybersecurity AdvisoriesApri dettaglio
IOCTraderTraitor: North Korean State-Sponsored APT Targets Blockchain Companies-74CISA Cybersecurity AdvisoriesApri dettaglio
MISPSecuronix Threat Research Security Advisory: Analysis of Ongoing FROZEN#SHADOW Attack Campaign Leveraging SSLoad Malware and RMM Software for Domain Takeover-74TLP:CLEARMISP EudorIAApri dettaglio
IOC#StopRansomware: Snatch RansomwareSnatch71CISA Cybersecurity AdvisoriesApri dettaglio
MISPIn Pursuit of Optical Fibers and Troop Intel: Targeted Attack Distributes PlugX in Russia-71TLP:CLEARMISP EudorIAApri dettaglio
MISPAstaroth, Mekotio & Ousaban abusing Google Cloud Run in LATAM-focused malware campaigns-70TLP:CLEARMISP EudorIAApri dettaglio
MISPMalicious activities linked to the Nobelium intrusion setAPT29 - G001667TLP:CLEARMISP EudorIAApri dettaglio
MISPScraper: Talos WebsiteLazarus Group - G003267TLP:CLEARMISP EudorIAApri dettaglio
MISPMOD Netherlands uncovers COATHANGER, a stealthy Chinese FortiGate RAT-66TLP:CLEARMISP EudorIAApri dettaglio
IOCThreat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways-65CISA Cybersecurity AdvisoriesApri dettaglio
IOC#StopRansomware: Ghost (Cring) RansomwareGhost (Cring)65CISA Cybersecurity AdvisoriesApri dettaglio
MISPArcaneDoor - New espionage-focused campaign found targeting perimeter network devices-60TLP:CLEARMISP EudorIAApri dettaglio
MISPDisrupting SEABORGIUM’s ongoing phishing operationsCallisto57TLP:CLEARMISP EudorIAApri dettaglio
MISPSecret Blizzard compromising Storm-0156 infrastructure for espionage / Snowblind: The Invisible Hand of Secret BlizzardTurla55TLP:CLEARMISP EudorIAApri dettaglio
MISPCloud Atlas targets entities in Russia and Belarus amid the ongoing war in UkraineCloud Atlas55TLP:CLEARMISP EudorIAApri dettaglio
IOC#StopRansomware: Play RansomwarePlay53CISA Cybersecurity AdvisoriesApri dettaglio
IOCRussian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally-53CISA Cybersecurity AdvisoriesApri dettaglio
IOC#StopRansomware: Medusa RansomwareMedusa52CISA Cybersecurity AdvisoriesApri dettaglio
IOCAPT Actors Exploiting CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus-51CISA Cybersecurity AdvisoriesApri dettaglio
MISPMagnet Goblin Targets Publicly Facing Servers Using 1-Day Vulnerabilities-50TLP:CLEARMISP EudorIAApri dettaglio
MISPUnder the hood of a Doppelgänger-50TLP:CLEARMISP EudorIAApri dettaglio
MISPIranian backed group steps up phishing campaigns against Israel, U.S.APT4249TLP:CLEARMISP EudorIAApri dettaglio
MISPAA23-347A Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally-49TLP:CLEARMISP EudorIAApri dettaglio
MISPUAC-0063: Cyber Espionage Operation Expanding from Central AsiaAPT28 - G000747TLP:CLEARMISP EudorIAApri dettaglio
MISPReturn of the Evilnum APT with updated TTPs and new targetsEvilnum - G012047TLP:CLEARMISP EudorIAApri dettaglio
MISPGaza Cybergang | Unified Front Targeting Hamas Opposition-46TLP:CLEARMISP EudorIAApri dettaglio
MISPChinese Threat Actors Targeting Europe in SmugX CampaignMustang Panda - G012946TLP:CLEARMISP EudorIAApri dettaglio
MISPCrowdStrike Falcon Platform Detects and Prevents Active Intrusion Campaign Targeting 3CXDesktopApp CustomersLazarus Group46TLP:CLEARMISP EudorIAApri dettaglio
IOCMalicious Actors Exploit CVE-2023-27350 in PaperCut MF and NG-45CISA Cybersecurity AdvisoriesApri dettaglio
IOCKnown Indicators of Compromise Associated with Androxgh0st Malware-43CISA Cybersecurity AdvisoriesApri dettaglio
IOCMalicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems-43CISA Cybersecurity AdvisoriesApri dettaglio
MISPNew data wiper malware used in Ukraine-43TLP:CLEARMISP EudorIAApri dettaglio
MISPEight Arms to Hold You: The Cuttlefish Malware-42TLP:CLEARMISP EudorIAApri dettaglio
MISPCampaigns abusing corporate trusted infrastructure hunt for corporate credentials on ICS networks-42TLP:CLEARMISP EudorIAApri dettaglio
MISPTA551 (Shathak) continues pushing BazarLoader, infections lead to Cobalt StrikeTA551 - G012742TLP:CLEARMISP EudorIAApri dettaglio
IOCIdentification and Disruption of QakBot Infrastructure-41CISA Cybersecurity AdvisoriesApri dettaglio
MISPGamaredon APT targets Ukrainian government agencies in new campaignGamaredon Group - G004741TLP:CLEARMISP EudorIAApri dettaglio
MISPFontOnLake: Previously unknown malware family targeting Linux-41TLP:CLEARMISP EudorIAApri dettaglio
MISPDivergent: "Fileless" NodeJS Malware Burrows Deep Within the Host-41TLP:CLEARMISP EudorIAApri dettaglio
MISPScrubCrypt Deploys VenomRAT with an Arsenal of Plugins-40TLP:CLEARMISP EudorIAApri dettaglio
IOCIranian Government-Sponsored APT Cyber Actors Exploiting Microsoft Exchange and Fortinet Vulnerabilities in Furtherance of Malicious Activities-40CISA Cybersecurity AdvisoriesApri dettaglio
IOCIranian State Actors Conduct Cyber Operations Against the Government of Albania-39CISA Cybersecurity AdvisoriesApri dettaglio
MISPICS Threat Analysis: New, Experimental Malware Can Kill Engineering Processes-39TLP:CLEARMISP EudorIAApri dettaglio
MISPAnalysis of Storm-0558 techniques for unauthorized email accessZIRCONIUM - G012839TLP:CLEARMISP EudorIAApri dettaglio
IOCMultiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475-38CISA Cybersecurity AdvisoriesApri dettaglio

Il Radar segnala correlazioni nel catalogo EudorIA; non dichiara che un indirizzo sia malevolo senza una fonte e una verifica indipendente.