s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

Threats

689 threats catalogued · filter, sort and triage below.

All Threats · 689 TOTAL
All With remediations Without
Reset
ID ↕ Title ↕ Severity ↕ Category ↕ RefsRemediations Published ↕ Source updated ↕ APEX Update Time ↕
CVE-2026-107441 CVE-2026-107441 high cve 0 0
TF-2012167 Unknown malware: URL that delivers a malware payload https://celebritesbiographie.fr/ high Unknown malware 3 0
TF-2012165 Unknown malware: URL that delivers a malware payload https://ev99.world/ high Unknown malware 3 0
TF-2012166 Unknown malware: URL that delivers a malware payload https://educiruped.com/ high Unknown malware 3 0
TF-2012164 AMOS: SHA256 hash of a malware sample (payload) 1dffdfbda8c09dd397b1d65ef019202c1dd12c1b172a6f90e1f45918f3a9a4b7 high AMOS 3 0
TF-2012163 AMOS: SHA256 hash of a malware sample (payload) 08a5355940f391f82b95b87e76fabe60bb10ba4ca8627748917becfcd457a404 high AMOS 3 0
TF-2012162 AMOS: SHA256 hash of a malware sample (payload) 9f633733db4d5c8d085beb28c3ec145a7e0d0af6ea29f1092d410e3bbe833ac1 high AMOS 3 0
TF-2012161 AMOS: SHA256 hash of a malware sample (payload) 48b170f32c51d94fa7d9d2040b753500e8e3e23c934e3b900cad733b33687bc0 high AMOS 3 0
TF-2012160 AMOS: SHA256 hash of a malware sample (payload) c809ce0c610166d7cc7f0c7e91f0e7ce3a89b34c511db649e885e1547e0a21fc high AMOS 3 0
TF-2012159 php.shin_webshell: Domain name that delivers a malware payload ngknr71262.workers.dev medium php.shin_webshell 2 0
TF-2012158 AMOS: SHA256 hash of a malware sample (payload) 910e33613d9ed72442909f57564d8aba029b77422b1c3138deadb8732d882d4a high AMOS 3 0
TF-2012157 AMOS: SHA256 hash of a malware sample (payload) bd4fb920575b7fa5f2b856cc49af0e6f55f0062dc67bb378aa4cb36760118c3e high AMOS 3 0
TF-2012155 ClearFake: Domain name that delivers a malware payload walkinstabilitychamber.com high ClearFake 2 0
TF-2012156 ClearFake: Domain name that delivers a malware payload trade-mp.com high ClearFake 2 0
TF-2012154 ClearFake: Domain name that delivers a malware payload xaydunghoangdannguyen.com high ClearFake 2 0
TF-2012153 AMOS: SHA256 hash of a malware sample (payload) 46bcabf552548de2f2fb4f4c3781d10aa2cd8e3699be5b5616a6c4df1039f981 high AMOS 3 0
TF-2012152 Mirai: SHA256 hash of a malware sample (payload) 1466d0ad2cee6373d8cabce052e3cf35f57ccbc8b2f337526c80b61383ab14e1 high Mirai 3 0
TF-2012151 Mirai: URL that delivers a malware payload http://176.65.149.111/eclipse.arm7 high Mirai 3 0
TF-2012150 AMOS: SHA256 hash of a malware sample (payload) ae6a965e363eb206757d4b00741e2b7c0937f1efbb256df9007177421ded6962 high AMOS 3 0
TF-2012149 AMOS: SHA256 hash of a malware sample (payload) 937e0b01afe0b72a92d8b5cd0284f057240e833d783f5efb1385f9f5a600c320 high AMOS 3 0
TF-2012148 AMOS: SHA256 hash of a malware sample (payload) 85733cc2d4fc2697579777f402c154603fd6576921698ed601bd636420329fe4 high AMOS 3 0
TF-2012147 KongTuke: Domain name that delivers a malware payload azvvedo.lol high KongTuke 2 0
TF-2012146 CECbot: ip:port combination that is used for botnet Command&control (C&C) 196.251.102.89:10213 high CECbot 3 0
TF-2012145 php.shin_webshell: Domain name that delivers a malware payload 151.99.77.34.bc.googleusercontent.com medium php.shin_webshell 2 0
TF-2012144 Vidar: URL that is used for botnet Command&control (C&C) https://m.bola7.net/z/ high Vidar 2 0
TF-2012143 AdaptixC2: ip:port combination that is used for botnet Command&control (C&C) 68.183.231.242:8080 high AdaptixC2 2 0
TF-2012142 AdaptixC2: ip:port combination that is used for botnet Command&control (C&C) 68.183.231.242:80 high AdaptixC2 2 0
TF-2012141 AdaptixC2: ip:port combination that is used for botnet Command&control (C&C) 68.183.231.242:443 high AdaptixC2 2 0
TF-2012140 ClearFake: Domain name that delivers a malware payload www.zindobaresina.com high ClearFake 2 0
TF-2012139 ClearFake: Domain name that delivers a malware payload vozoll.com.tr high ClearFake 2 0
TF-2012138 ClearFake: Domain name that delivers a malware payload vegantraveltoolkit.com high ClearFake 2 0
TF-2012129 Unknown malware: URL that delivers a malware payload https://pallypattaya.net/ high Unknown malware 3 0
TF-2012115 Unknown malware: URL that delivers a malware payload https://www.stlghana.com/ high Unknown malware 3 0
TF-2012090 ClearFake: Domain name that delivers a malware payload www.valbellunameteo.it high ClearFake 2 0
TF-2012082 XMRIG: ip:port combination that delivery a malware payload 66.245.217.135:80 high XMRIG 2 0
TF-2012085 XMRIG: ip:port combination that is used for botnet Command&control (C&C) 141.94.96.195:80 high XMRIG 2 0
TF-2012040 IClickFix: Domain name that delivers a malware payload sureshwardargah.org medium IClickFix 2 0
TF-2012037 ClearFake: Domain name that delivers a malware payload f5rhckvo.bossbeyprimecenter.click high ClearFake 2 0
TF-2011986 IClickFix: Domain name that delivers a malware payload abogadoaccidentescercademi.com high IClickFix 2 0
TF-2011937 IClickFix: Domain name that delivers a malware payload theliverfoundation.org high IClickFix 2 0
TF-2011722 ClearFake: Domain name that delivers a malware payload l3reseaux.net high ClearFake 2 0
TF-2011716 ClearFake: Domain name that delivers a malware payload www.humanconnect.in high ClearFake 2 0
CVE-2026-115215 NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool high cve 0 0
TF-2011686 ClearFake: Domain name that delivers a malware payload invistrue.com high ClearFake 2 0
CVE-2026-120091 Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host high cve 0 0
CVE-2026-105475 CVE-2026-105475 high cve 0 0
CVE-2026-116768 Missing length validation in Absolute Secure Access high cve 0 0
CVE-2026-116767 Improper input handling in Secure Access servers high cve 0 0
CVE-2026-116766 Improper input handling in Secure Access server high cve 0 0
CVE-2026-116769 Authentication bypass in Secure Access Servers critical cve 0 0
Showing 1–50 of 689 threats (page 1 of 14).