Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Reports
Structured intelligence from research labs, CERTs, and threat analysis platforms
Live
1,784reports indexed
IOC extraction is automated and may include false positives.
1,784 reports total
Filter by Malware / Threat Family
OT
ORKL Threat Library
THREAT FEED
Today9 IOCs
A Signed Pdf Viewer That Quietly Takes Orders: the Quartzline “zenith” Backdoor – Rogueauthority.org
Earth LuscaBRONZE UNIVERSITY
TLP:WHITEView report →
OT
ORKL Threat Library
THREAT FEED
Today12 IOCs
Uac 0056 Cyberattack on Ukrainian Authorities Using Graphsteel and Grimplant Malware
SaintBearEmber Bear
TLP:WHITEView report →
OT
ORKL Threat Library
THREAT FEED
Today6 IOCs
Why Are You Texting Me? Unc3944 Leverages Sms Phishing Campaigns for Sim Swapping, Ransomware, Extortion, and Notoriety
ALPHVBRONZE UNIVERSITYBlackCatImpacket
TLP:WHITEView report →
OT
ORKL Threat Library
THREAT FEED
Today3 IOCs
North Korea Linked Apt Attack Found Disguised as a Digital Asset Wallet Service Customer Center
KimsukyNICKEL KIMBALL
TLP:WHITEView report →
OT
ORKL Threat Library
THREAT FEED
Today72 IOCs
Warden Stealer: the Rapid Rise of an Infostealer with an Appetite for Ai Agent Data
Earth LuscaBRONZE UNIVERSITYVidar
TLP:WHITEView report →
OT
ORKL Threat Library
THREAT FEED
Today5 IOCs
Cti/runster/readme.md at Main · Cert Orangecyberdefense/cti
Earth LuscaBRONZE UNIVERSITY
TLP:WHITEView report →
RE
ReversingLabs
RESEARCH BLOG
Today57 IOCs
How RL mapped a Midnight Blizzard-linked campaign from two hashes
APT29Cobalt StrikeMETA Stealer
TLP:WHITEView report →
RE
ReversingLabs
RESEARCH BLOG
Today2 IOCs
The Next MOVEit May Already Be in Your File Transfer Queue
APT29Cl0pCl0pMETA Stealer
TLP:WHITEView report →
AH
AhnLab
RESEARCH BLOG
Yesterday6 IOCs
Analysis of the Infrastructure of ARTEX, a Chinese AI Penetration Testing Tool #4 – The Birth of Copy Cat
APT37PlayMETA StealerPlay
TLP:WHITEView report →
NS
NSFOCUS Security Labs
RESEARCH BLOG
Today1 IOC
GitLab Remote Code Execution Vulnerability (CVE-2026-97229) Notice
TLP:WHITEView report →
CY
Cyble
RESEARCH BLOG
Today2 IOCs
The GhostX Ecosystem: Forged in Transit, Licensed to Deceive
PlayGh0st RATPlay
TLP:WHITEView report →
SO
SOCRadar
RESEARCH BLOG
Yesterday2 IOCs
Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in Chained Attacks
TLP:WHITEView report →
SO
SOCRadar
RESEARCH BLOG
Today5 IOCs
Cisco Secure Email & PAN-OS Zero-Days Exploited
TLP:WHITEView report →
SO
SOCRadar
RESEARCH BLOG
Yesterday22 IOCs
October 2026 Patch Tuesday: 1,413 Flaws, 3 Zero-Days
TLP:WHITEView report →
SO
SOCRadar
RESEARCH BLOG
Yesterday13 IOCs
Top RCE Vulnerabilities
TLP:WHITEView report →
SO
SOCRadar
RESEARCH BLOG
Yesterday1 IOC
CVE-2026-105445: Docker Hub PAT Reassignment Flaw
TLP:WHITEView report →
SO
SOCRadar
RESEARCH BLOG
Yesterday5 IOCs
CVE-2026-89111: Critical SAP Cloud SDK SSRF
TLP:WHITEView report →
MA
Malwarebytes
RESEARCH BLOG
Today3 IOCs
Update Chrome: Google fixes 37 security flaws, including seven critical bugs
PlayPlay
TLP:WHITEView report →
SA
Sansec
RESEARCH BLOG
Yesterday3 IOCs
BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849)
META Stealer
TLP:WHITEView report →
SY
Symantec
RESEARCH BLOG
Today20 IOCs
Aoki: Infostealer Targets AI Coding Assistant Credentials
AkiraBlack BastaAkiraBlack Basta
TLP:WHITEView report →
IN
Infoblox
RESEARCH BLOG
Today29 IOCs
Inside Help TDS: Hotejka, Cloudflare Pages, and Predictive Detection
TLP:WHITEView report →
PT
Proofpoint Threat Insight
RESEARCH BLOG
Yesterday5 IOCs
Disruption Targets Major Chinese-Language Phishing Kits with Japanese Focus
TLP:WHITEView report →
WI
Wiz
RESEARCH BLOG
Yesterday1 IOC
ASPM in the AI Era Part 1: Unified Visibility Across Your Stack
PlayMETA StealerPlay
TLP:WHITEView report →
HU
Huntress
RESEARCH BLOG
Yesterday1 IOC
Passkeys Raise the Bar. Here’s Where Attackers Can Still Get In.
Cl0pPlayCl0pCobalt Strike
TLP:WHITEView report →