s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

Threats

298847 threats catalogued · filter, sort and triage below.

All Threats · 298847 TOTAL
All With remediations Without
Reset
ID ↕ Title ↕ Severity ↕ Category ↕ RefsRemediations Published ↕ Source updated ↕ APEX Update Time ↕
TF-2013584 ClearFake: Domain name that delivers a malware payload bossbeyprimezone.click high ClearFake 2 10
TF-2013583 Vidar: URL that is used for botnet Command&control (C&C) https://pc.alexsi4d.org/t/ high Vidar 2 10
MB-5559a31954befeb77c5d22c7767dce7eb9a18c3e1695677aca6fdfc2165ec94e Mirai: main_x86_64 high Mirai 1 10
CVE-2026-22058 CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale) critical cve 0 0
TF-2013582 Vidar: URL that is used for botnet Command&control (C&C) https://pc.alexsi4d.org/uvx/ high Vidar 2 10
TF-2013581 AMOS: SHA256 hash of a malware sample (payload) 546a85c60d459abbae429932d0591a1ce4993f371cbf77a352a6fc6e7a21b399 high AMOS 3 10
TF-2013580 AMOS: SHA256 hash of a malware sample (payload) 1b71579cb8326cb33f0cdca9da93278867a2dd5d50e595c402992752209d0b8f high AMOS 3 10
TF-2013579 AMOS: SHA256 hash of a malware sample (payload) f9bf40b9c3f0b84768b131019765d936cf782358dfd76de712f48c77064601ef high AMOS 3 10
TF-2013578 AMOS: SHA256 hash of a malware sample (payload) 4a35dc30640bec0c53291ba68e1f18989c817d098fe1506f2697e06a3020e658 high AMOS 3 10
MB-755c02c4980de1020f688412091ec75856fbcf37c652b5ae3c3c0678b21dd29f WARDENStealer: eblantupoisyka.exe high WARDENStealer 1 10
TF-2013577 AMOS: SHA256 hash of a malware sample (payload) b7ff2e6d837975262fd98a86d439697913d1ebce17ea4fdc016e15a996d08d1f high AMOS 3 9
TF-2013576 Vidar: URL that is used for botnet Command&control (C&C) https://pc.alexsi4d.org/ca/ high Vidar 2 10
TF-2013575 AMOS: SHA256 hash of a malware sample (payload) b94aace3a39a04a355194ce2fe208b712e537189bc32820873f71199b78d85b7 high AMOS 3 10
TF-2013574 AMOS: SHA256 hash of a malware sample (payload) dc77598471da558a5fbfccdfa41b72a013c5cb6c0bb1c1719d0a28d6ee54e35a high AMOS 3 10
MB-9326248d57c85adb00920ef2402b7ef11799ad5adc605965be8132059fa0ffdd Mirai: bot-linux-386 high Mirai 1 10
TF-2013573 AMOS: SHA256 hash of a malware sample (payload) 5d26501b823fd7cb3dbd6c364e135709643960997c66efed4808ae0c028ec2a3 high AMOS 3 10
TF-2013572 AMOS: SHA256 hash of a malware sample (payload) 6466cb98f4ad6058dc348c38ae5612d25aac286ae1afc315005cfa5bce88d092 high AMOS 3 10
CVE-2026-97397 Remove Google Fonts <= 1.7 - Unauthenticated Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffer high wordpress-vulnerability 3 1
CVE-2026-104799 Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters high wordpress-vulnerability 3 1
TF-2013571 AMOS: SHA256 hash of a malware sample (payload) 9c13eda72a59574f28b37f728029617b7d9ebbd4decb0051937f9ab1cebd80c2 high AMOS 3 9
TF-2013569 Vidar: URL that is used for botnet Command&control (C&C) https://p.bob78.org/k/ high Vidar 2 10
TF-2013570 Vidar: URL that is used for botnet Command&control (C&C) https://pc.alexsi4d.org/xg/ high Vidar 2 10
TF-2013564 Unknown malware: URL that delivers a malware payload https://redmondjeffreyassociates.co.uk/ high Unknown malware 3 10
TF-2013565 Unknown malware: URL that delivers a malware payload https://rahu.ir/ high Unknown malware 3 10
TF-2013566 Unknown malware: URL that delivers a malware payload https://makedonias.gr/ high Unknown malware 3 10
TF-2013567 Unknown malware: URL that delivers a malware payload https://buckymotter.com/ high Unknown malware 3 10
TF-2013568 Unknown malware: URL that delivers a malware payload https://tuoitresamco.vn/ high Unknown malware 3 10
TF-2013563 AMOS: SHA256 hash of a malware sample (payload) 5652e3f16f84d7b945b96f5ea1b2f48e9110c73659c576127658337a87a454f3 high AMOS 3 10
TF-2013562 AMOS: SHA256 hash of a malware sample (payload) a32843ce4410d25a4613f207a2a6935965da80c477778671161152147f48fc80 high AMOS 3 10
MB-dce9083c32af5f26ff1a723df33366da58854beda7e674bce3b0507e628a8164 Mirai: arm7 high Mirai 1 10
TF-2013561 Vidar: URL that is used for botnet Command&control (C&C) https://pc.alexsi4d.org/mh/ high Vidar 2 10
TF-2013560 Vidar: URL that is used for botnet Command&control (C&C) https://pc.alexsi4d.org/ze/ high Vidar 2 10
CVE-2026-120554 Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save high wordpress-vulnerability 3 1
TF-2013559 Vidar: URL that is used for botnet Command&control (C&C) https://pc.alexsi4d.org/f9y/ high Vidar 2 10
MB-60c3986439f423123eeb6e04e04dac447883863fe79dd8b664283cc4d20ec96d Mirai: main_arm7 high Mirai 1 10
MB-5fcdce737607b557d9a0328c92f085bccb609fbf2ffbe08fc963613550c34e4a Mirai: xnxnxnxnxnxnxnxnmipsxnxn high Mirai 1 10
CVE-2026-115498 Slim Jetpack <= 2.7.0.1 - Unauthenticated Stored Cross-Site Scripting via Contact Form 'Website' Field high wordpress-vulnerability 3 1
TF-2013558 Vidar: URL that is used for botnet Command&control (C&C) https://pc.alexsi4d.org/ru/ high Vidar 2 10
TF-2013557 ClearFake: Domain name that delivers a malware payload kul2gqhg.bossbeyprimeworld.click high ClearFake 2 10
TF-2013556 ClearFake: Domain name that delivers a malware payload govrobczxc.cc high ClearFake 2 10
TF-2013555 Vidar: URL that is used for botnet Command&control (C&C) https://pc.alexsi4d.org/bc/ high Vidar 2 10
CVE-2026-119084 Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters critical cve 0 0
CVE-2026-112354 Etrel INCH AC Charging Station Hard-coded Default Credentials critical cve 0 0
TF-2013554 ClearFake: Domain name that delivers a malware payload bossbeyprimeworld.click high ClearFake 2 0
TF-2013553 ClearFake: Domain name that delivers a malware payload env-hamiltonjankecomau-staging2.kinsta.cloud high ClearFake 2 10
CVE-2026-121621 Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configuration high cve 0 0
TF-2013551 Vidar: URL that is used for botnet Command&control (C&C) https://p.bob78.org/w/ high Vidar 2 10
TF-2013552 Vidar: URL that is used for botnet Command&control (C&C) https://w9.alexsi4d.org/j3/ high Vidar 2 10
CVE-2026-111751 Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR) high cve 0 0
TF-2013550 Mirai: SHA256 hash of a malware sample (payload) 5a10ed35c77ace0f64d150d54d00bce7c3bab7c1022f57315ce25a9097339df3 high Mirai 2 10
Showing 201–250 of 298847 threats (page 5 of 5977).