Uptime Hamster: 113d 11h 7mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
IntelTracker

Threat Intelligence Monitor

Victimas, actores, TTPs, CVEs, IOCs y referencias verificadas en una interfaz CTI indexable con filtros operativos.

10,901Incidentes
32Filtrados
1,119Actores
266IOCs visibles
Limpiar
Mapa
6
Paises afectados
Alertas
7
Amenazas recientes
Brechas
7
Filtraciones y victimas
Hackeos
7
Incidentes investigables

Actividad filtrada

TTPs principales

T15663

Actores

bushidouk6
x-cti3
name-11
akira1
cuba1
malwrhunterteam1
malware---tools1
heyoka1
apt-earthberberoka1
apt-hellhounds1

Paises

United States14
United Kingdom3
Brazil1
China1
France1
Spain1

Acciones rapidas

Mapa globalGraficosBrechasPanel clasico

Mapa de actividad

Abrir mapa completo →
United States14 incidentes United Kingdom3 incidentes Brazil1 incidentes China1 incidentes France1 incidentes Spain1 incidentes

Filtros directos

RansomwareBrechasCVEsPhishingIntelTracker
32 resultados · pagina 1/1Exportar CSV
Name 1 (Malware / Tools)2026-07-09
name-1referenceUnited States
Resumen no disponible. Abre la ficha para ver los detalles normalizados del incidente.
Ransomware Group: akira2026-06-29
akirathreat-actorUnknown
Perfil del grupo segun ransomware.anggipradana.com.
Ransomware Group: cuba2026-06-29
cubathreat-actorUnited States
Perfil del grupo segun ransomware.anggipradana.com.
Dark Web Informer: VRI Portal de Conteúdo dataset claim posted on a forum VRI Portal de Conteúdo is a Brazilian content portal focused on technical material in accounting, corporate, labor, and tax law areas. A forum user claims a dataset tied to VRI Portal de Conteúdo was exposed, allegedly containing 40K rows.2026-06-28
x-ctibreachBrazil
Dark web monitoring and threat intelligence feed on ransomware groups and data leak sites.
Daily Dark Web: Pinned: New Linux "pedit COW" Privilege Escalation Exploit Published Security researcher Massimiliano Oldani has released a public proof-of-concept (PoC) exploit, **packet_edit_meme**, for the Linux kernel vulnerability **CVE-2026-46331**, nicknamed **pedit COW**. * The flaw resides in Linux's **net/sched act_pedit** traffic control subsystem and allows an unprivileged local user to escalate privileges to **root** by corrupting shared page-cache memory.2026-06-28
x-ctivulnerabilityUnited States
Daily coverage of dark web activities, cybercrime forums and underground market intelligence.
Daily Dark Web: Clearcover Customer Data Allegedly Offered for Sale A threat actor claims to be selling a database allegedly belonging to U.S. auto insurer Clearcover. * According to the forum post, the dataset is dated **25 June 2026** and allegedly contains **448,603** records.2026-06-28
x-ctibreachUnknownT1566
Daily coverage of dark web activities, cybercrime forums and underground market intelligence.
MalwareHunterTeam: List of names: "CamScanner 19-06-2026 16.49.accdr" "Adv Int Course (Rome).accdr" "Expression of Interest (EOI).accdr" "Security Orientation Course-41.accdr" "001210.accdr" "Proposal for Area Admin Meeting - SLNS Barana.accdr" "UN-System-wide-Strategy-on-SSC-2026-2029.accdr" ‍2026-06-26
malwrhunterteamcampaignUnknown
Malware samples, IOCs and indicators of compromise distributed by the MalwareHunterTeam research group.
Name 12026-06-20
malware---toolsreferenceUnknown
Name 1 es un actor APT (Advanced Persistent Threat) perteneciente al grupo Malware / Tools, con una identidad multinivel y múltiples alias. Este tipo de actores suelen operar en entornos reg...
Heyoka indicators and references2026-06-18
heyokaiocUnited States
APTTrail mantiene indicadores publicos asociados a Heyoka. Aliases observados: Heyoka, Mongall, UNC94. Conteo por tipo: domain: 107, ipv4: 4, url: 3.
APT EARTHBERBEROKA indicators and references2026-06-18
apt-earthberberokaiocUnknown
APTTrail mantiene indicadores publicos asociados a APT EARTHBERBEROKA. Aliases observados: APT EARTHBERBEROKA. Conteo por tipo: domain: 55, ipv4: 3.
APT HELLHOUNDS indicators and references2026-06-18
apt-hellhoundsiocUnknown
APTTrail mantiene indicadores publicos asociados a APT HELLHOUNDS. Aliases observados: APT HELLHOUNDS. Conteo por tipo: domain: 36.
APT ICEFOG indicators and references2026-06-18
apt-icefogiocUnknown
APTTrail mantiene indicadores publicos asociados a APT ICEFOG. Aliases observados: APT ICEFOG. Conteo por tipo: domain: 49, ipv4: 1.
famoussparrow indicators and references2026-06-18
famoussparrowiocChina
Resumen no disponible. Abre la ficha para ver los detalles normalizados del incidente.
BackdoorDiplomacy indicators and references2026-06-18
backdoordiplomacyiocUnited StatesT1566
APTTrail mantiene indicadores publicos asociados a BackdoorDiplomacy. Aliases observados: BackdoorDiplomacy, Quarian, Turian. Conteo por tipo: domain: 67.
HeaderTip indicators and references2026-06-18
headertipiocUnited Kingdom
APTTrail mantiene indicadores publicos asociados a HeaderTip. Aliases observados: HeaderTip, cosmicbeetle, scarab, spacecolon. Conteo por tipo: domain: 55, ipv4: 1, url: 3.
BushidoUK ToolMatrix CommunityReports: CR-012-Qilin-April-20232026-06-18
bushidoukreportUnited Kingdom
Recurso del BushidoUK Ransomware Tool Matrix - CommunityReports.
BushidoUK ToolMatrix CommunityReports: CR-013-Qilin-June-20222026-06-18
bushidoukreportUnited Kingdom
Recurso del BushidoUK Ransomware Tool Matrix - CommunityReports.
BushidoUK ToolMatrix CommunityReports: CR-014-Qilin-May-20242026-06-18
bushidoukreportUnited States
Recurso del BushidoUK Ransomware Tool Matrix - CommunityReports.
BushidoUK ToolMatrix CommunityReports: CR-021-DRAGONFORCE-APR-20252026-06-18
bushidoukreportUnited States
Recurso del BushidoUK Ransomware Tool Matrix - CommunityReports.
BushidoUK ToolMatrix CommunityReports: CR-023-DRAGONFORCE-AUG-20242026-06-18
bushidoukreportUnited States
Recurso del BushidoUK Ransomware Tool Matrix - CommunityReports.
BushidoUK ToolMatrix CommunityReports: Community_Report_Template2026-06-18
bushidoukreportFrance
Recurso del BushidoUK Ransomware Tool Matrix - CommunityReports.
Ransomware Victim: Nintendo Company (Nintendo.com) (shadowbyt3$)2026-06-12
shadowbyt3sransomwareUnited States
Victima de ransomware reportada en el dashboard de shadowbyt3$.
462af0a3a9094d44c30cc65544ec1171a62365cff09e67f5e87e061a3d604bd02026-06-10
iocUnited States
462af0a3a9094d44c30cc65544ec1171a62365cff09e67f5e87e061a3d604bd0 es un observable de ciberseguridad asociado al grupo observable. Este registro se relaciona con el OTX feed=Collection: user_...
IP: 83.48.102.1192026-05-25
iocSpainT1566
83.48.102.119 es un indicador de compromiso asociado a un endpoint deVPN vpn.[Redacted].es. Este IP fue identificado en el contexto de una actividad maliciosa, con patrones de tráfico sospec...
OTX feed=Collection: user_AlienVault, pulse_name=PureLogs: Delivery via PawsRunner Steganography2026-05-21
iocUnited States
Hash SHA-1: 49cbdd4973bbbe1e36b1d76e6290ca86f04ac620Hash SHA-1: d4cd0dabcf4caa22ad92fab40844c786Dominio: duckduckgo.com
OTX feed=Collection: user_AlienVault, pulse_name=Poisoning the well: AI supply chain attacks on Hugging Face and OpenClaw2026-05-11
iocUnknown
Hash MD5: 41f581f7d2c09ab0edfea850b9db506f
CVE-2018-253032026-04-29
vulnerabilityUnited States
Resumen no disponible. Abre la ficha para ver los detalles normalizados del incidente.
CVE-2018-253152026-04-29
vulnerabilityUnited States
No hay Indicadores de Compromiso publicos disponibles.
CVE-2026-72192026-04-28
vulnerabilityUnited States
CVE-2026-7219 es una vulnerabilidad en el dispositivo Totolink N300RT versión 3.4.0-B20250430, relacionada con un problema de buffer overflow en la función desconocida del archivo /boafrm/fo...
CVE-2026-69992026-04-25
vulnerabilityUnknown
CVE-2026-6999 es un漏洞 reportada en el componente BIVOCOM TR321 21.1.1.50, relacionada con la funcionalidad de configuración inalámbrica. La vulnerabilidad permite a un atacante realizar una ...
CVE-2026-69952026-04-25
vulnerabilityUnknown
CVE-2026-6995 es un vulnerabilidad de seguridad reportada en el componente "New User Page" de la aplicación BDCOM P3310D 0.4.2 10.1.0F Build 86345. La falla permite a atacantes ejecutar códi...
CVE-2026-70012026-04-25
vulnerabilityUnknown
CVE-2026-7001 es un漏洞 relacionado con el componente Ethernet Configuration Page del dispositivo Datacom DM4100 versión 1.3.6.1.4.1.3709. La vulnerabilidad permite a un atacante realizar cros...