s2
--:--:--UTC

Searching APEX

Starting…

  1. Searching Threats, IOCs & Threat Intelligence locally
  2. Querying external providers
  3. Asking AI Forensic Validator
  4. Creating new entry from validated hit

0s elapsed

Threats

153534 threats catalogued · filter, sort and triage below.

All Threats · 153534 TOTAL
Reset
ID Title Severity Category RefsRemediations Published Source updated APEX Update Time
MB-3e6b5327d9d19cdcd8adf389b991cba090c49bd9f11d4909da89e19420c16b42 ValleyRAT: 83A191C82A700BD83128F7AD8576A1CD.dll high ValleyRAT 1 10
TF-1868538 ValleyRAT: ip:port combination that is used for botnet Command&control (C&C) 118.107.43.220:8080 high ValleyRAT 2 6
MB-a85a685e8753319479922d6098726906804dca6a518205ed70fd555c5289d743 DCRat: 0a3e2c2bd38771605cb2eeae9c8cbc62.exe high DCRat 1 10
TF-1868537 DCRat: URL that is used for botnet Command&control (C&C) http://ck077996.tw1.ru/L1nc0In.php high DCRat 2 10
MB-5d8b365ca864c693f967e2b087db0838dea3cb639325ae9be1df085b771f8796 RemcosRAT: Order Specicifications-request for AYB64537.J.js high RemcosRAT 1 10
TF-1868536 Remcos: ip:port combination that is used for botnet Command&control (C&C) 172.245.209.149:2414 high Remcos 2 10
MB-1f0ed64ac1128b10a54ad87cf10d1145bf56e7046b1eb7da1ff5162a0661dc8a Pony: FEE9A1FF4882BA692E235A8CE1E525B1.exe high Pony 1 10
TF-1868535 Vidar: URL that is used for botnet Command&control (C&C) https://psk.y8slot.net/ high Vidar 2 10
MB-93cfcf58ba02b6704041d8e036b4230a4ba9561723c5e7e8fdce681684864870 Pony: A06194A36273470E5BEDEBE9D313B951.exe high Pony 1 10
TF-1868534 Vidar: Domain that is used for botnet Command&control (C&C) psk.y8slot.net high Vidar 2 10
TF-1868533 Vidar: URL that is used for botnet Command&control (C&C) https://psk.sinism188.top/ high Vidar 2 10
TF-1868532 Vidar: Domain that is used for botnet Command&control (C&C) psk.sinism188.top high Vidar 2 10
TF-1868531 Pony: URL that is used for botnet Command&control (C&C) http://mainserver.com/gate.php high Pony 2 10
CVE-2026-45100 OpenSIPS: Buffer Overflow in Base64 Encode Transformation critical cve 0 0
MB-97b2a7b78f98521a1436c44adb0f717b84364f67f4444b22d544caa2eba8811b NanoCore: 23d82b604133932ba4391ae7fb344dd0.exe high NanoCore 1 10
TF-1868530 ClearFake: Domain name that delivers a malware payload ldtwsfb.quiltlegacy.net high ClearFake 2 10
TF-1868529 ClearFake: Domain name that delivers a malware payload quiltlegacy.net high ClearFake 2 10
MB-b481cc2e88ab19b63fca837aef5d80b961659621db8650ee307305062b4eeb41 Mirai: data_x86_64 high Mirai 1 10
MB-844b854d590e9ebe4ae09a7233125f473ce3b05312bce3374b5f05c7d50d123a Mirai: data_mipsel high Mirai 1 10
MB-6c65afb1eb421e192dd0b6ab9fa187b0973d43f10763279dd7f60098ec1acd69 Mirai: data_mips high Mirai 1 10
URLhaus-PL-404d41bd33709dcae130000cbc0317b3bdb632315e0245b82d465f0b0edac832 URLhaus payload: (html) 404d41bd33709dca… medium malware 2 10
TF-1868528 Mirai: ip:port combination that delivery a malware payload 45.38.249.148:1004 medium Mirai 2 10
URLhaus-PL-b481cc2e88ab19b63fca837aef5d80b961659621db8650ee307305062b4eeb41 URLhaus payload: Mirai (elf) b481cc2e88ab19b6… medium Mirai 2 10
URLhaus-PL-844b854d590e9ebe4ae09a7233125f473ce3b05312bce3374b5f05c7d50d123a URLhaus payload: Mirai (elf) 844b854d590e9ebe… medium Mirai 2 10
URLhaus-PL-6c65afb1eb421e192dd0b6ab9fa187b0973d43f10763279dd7f60098ec1acd69 URLhaus payload: Mirai (elf) 6c65afb1eb421e19… medium Mirai 2 10
MB-b19eb2605a969acda3bd284d2376acc657c3a556d4c81ce17eaaabe39d48b990 CoinMiner: file high CoinMiner 1 10
TF-1868527 ClearFake: Domain name that delivers a malware payload c4nrz428.gregoryschreiercabinetmaker.com high ClearFake 2 10
CVE-2026-45084 OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type state high cve 0 0
TF-1868526 ClearFake: Domain name that delivers a malware payload g5u8gksz.federationofpbos.org high ClearFake 2 10
MB-0d298a65db890328d0357b2fb39ea7352645a994a601f430c38450769635f957 RemusStealer: file high RemusStealer 1 10
CVE-2026-70619 Odysseus Missing Admin Authorization via Embedding Endpoint Routes high cve 0 0
MB-b7db32e16aa207e3643f6f9a1b076e7b8ffdb8166ff5e76fe966ae0c94638ac0 Mirai: boatnet.mips high Mirai 1 10
MB-6e7d98f590da5a91bf0285d31002b80fb373a88aa1c355e63da5f6a4bd8f46c1 Mirai: boatnet.arm7 high Mirai 1 10
MB-668ecef78b39f2b1b602b54d4701546dfb5c6b0701449bb3d8282fc845b4e029 Mirai: boatnet.arm high Mirai 1 10
MB-111c0e6222dfb48fa9cb3e4b9f89f7ca8d610c5ef8dd337e6f810d06a1217b77 Mirai: boatnet.ppc high Mirai 1 10
MB-45d4f75e7486a914b9f9125b87e427dd62eb4c9c8acb1b2f8cfb5ffbb7577ed1 Mirai: boatnet.x86_64 high Mirai 1 10
MB-3252b9d9d57615060976d4b3bed8684dd59539a0d0cc5616564f132859cb2b5e Mirai: boatnet.arm5 high Mirai 1 10
MB-ae4525d81a9b2b1ba4e53b778344f1e412c1ead8ddc3eec317bbf41c18514680 Mirai: boatnet.mips high Mirai 1 10
MB-5a9589968d81f208848a2bbf9d701f99b27ae151876be0fa79fa1809cf5a538b Mirai: boatnet.arm7 high Mirai 1 10
MB-aabfd94ac3d68386aa56acff0742e2578bc5f39a2f0a75691c5123afc188765c Mirai: boatnet.arm high Mirai 1 10
MB-23f3ae269c70ab194b6d41e797d4f06b22d7a480e31e24c99586445820944e13 Mirai: boatnet.sh4 high Mirai 1 10
MB-477900af6dd3d8bb0d344336107c2a7f82461e0c7215709071693bf33480b757 Mirai: boatnet.ppc high Mirai 1 10
MB-d011b612bea1fd0f2c0ebc85b31fe32e7402727156a8bde880d74f2b3ba0f1e2 Mirai: boatnet.m68k high Mirai 1 10
MB-799c0a87c8d9cabf94caca9234e3fb9922d96e7b2dbe517cb3f2240766c32be6 Mirai: boatnet.arc high Mirai 1 10
MB-ba68dbe66c6f0819300ccdb4f5cc5110591047bbdc01ae165f5b220dbbfc7252 Mirai: boatnet.spc high Mirai 1 10
MB-9e79a7f08996cfcfe734bf6e18bfde8381660f09a4d8c3b950657f5bfd808e84 Mirai: boatnet.x86_64 high Mirai 1 10
MB-f4a3ad5d24d34f68844cdcb9928fe2ab9cedc958ecf178064409350e0e921bf2 Mirai: boatnet.arm5 high Mirai 1 10
CVE-2026-18814 H3C NX15 esps reload.reload_config command injection high cve 0 0
URLhaus-PL-ae4525d81a9b2b1ba4e53b778344f1e412c1ead8ddc3eec317bbf41c18514680 URLhaus payload: Mirai (elf) ae4525d81a9b2b1b… medium Mirai 2 10
URLhaus-PL-5a9589968d81f208848a2bbf9d701f99b27ae151876be0fa79fa1809cf5a538b URLhaus payload: Mirai (elf) 5a9589968d81f208… medium Mirai 2 10
Showing 101–150 of 153534 threats (page 3 of 3071).