Threat Intelligence
Curated intelligence from the front lines
Live threat research and hand-picked analysis curated by the NivX intel team — searchable across 421 reports.
NivX Counter Adversary Operations
Know your adversary. Stop the breach.
Unified threat intelligence, malware analysis and IOC hunting — powered by 7 integrated OSINT feeds and refreshed daily from the front lines.
198,495
IOCs tracked
54,640 hashes · 4,651 domains · 106,751 IPs
0
Named adversaries
—
2
Malware families
AsyncRAT
05:35 PM
OTX last sync
50 pulses · 456 updated
Adversary Intelligence
Track named threat actors and campaigns from continuously refreshed OSINT pulses and analyst-curated intel.
Malware Analysis
Hybrid Analysis + VirusTotal detonation ratios, malware family attribution and sandbox verdicts.
Digital Risk Protection
URLScan live page previews, domain impersonation checks and Shodan attack-surface signals.
Curated IOC Database
444+ indicators aggregated daily from AlienVault OTX with severity scoring and analyst notes.
Top adversaries
Named actors from active pulses
No named adversary attribution in current IOCs
Top malware families
Grouped by IOC frequency
AsyncRAT539
Generic.AsyncRAT.Marte.B501
Intelligence sources
Where your intel comes from
AbuseIPDB Blacklist59112
CINS Army45400
Malwarebytes37169
URLhaus31531
AlienVault OTX11466
Hybrid Analysis11312
Emerging Threats compromised-ips1597
MalwareBazaar875
Recent IOCs on your radar
high
61.108.143.233IP AddressCINS Army bad-actor IPhigh
60.25.68.93IP AddressCINS Army bad-actor IPhigh
60.226.205.99IP AddressCINS Army bad-actor IPhigh
60.226.174.203IP AddressCINS Army bad-actor IPhigh
60.208.179.233IP AddressCINS Army bad-actor IPhigh
60.208.177.209IP AddressCINS Army bad-actor IPhigh
60.166.82.88IP AddressCINS Army bad-actor IPhigh
59.50.185.61IP AddressCINS Army bad-actor IPTop active campaigns
1AbuseIPDB confidence 10059112 IOCs
2CINS Army bad-actor IP45400 IOCs
3malware_download31531 IOCs
4Hybrid Analysis submission8479 IOCs
5Emerging Threats compromised-ips entry1597 IOCs
6Trusting your kids online isn't enough (Lock and Code S07E14)516 IOCs
OSINT · IOC Analysis
Investigate indicators in one click
Jump straight to the industry's leading OSINT platforms to enrich and validate IOCs — hashes, URLs, IPs and domains.
VirusTotal
Files, URLs, hashes & domains across 70+ engines
Open urlscan.io
Sandbox & analyze suspicious URLs
Open AbuseIPDB
Check IP reputation & abuse reports
Open Cisco Talos
IP/domain reputation & threat intel
Open IBM X-Force Exchange
Threat intelligence sharing platform
Open Shodan
Search exposed hosts, ports & services on the internet
Open Censys
Attack-surface & internet asset discovery
Open CyberChef
Decode, decrypt & transform data — the cyber Swiss-army knife
Open MITRE ATT&CK
Adversary tactics, techniques & procedures (TTPs) knowledge base
Open MITRE D3FEND
Countermeasure & defensive technique knowledge graph
Open Threat Intel · IOC Database
Our curated indicator database
Newly discovered indicators are catalogued here and automatically flagged inside the analyzer above whenever a match is found.
IOC Database (198495 indicators)
65226 critical126281 high3065 medium3923 low
| Indicator | Type | Threat | Severity | Tags | Source | |
|---|---|---|---|---|---|---|
61.108.143.233 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
60.25.68.93 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
60.226.205.99 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
60.226.174.203 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
60.208.179.233 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
60.208.177.209 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
60.166.82.88 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.50.185.61 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.50.185.214 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.49.229.73 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.102.13.17 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
54.85.92.118 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
52.66.208.205 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
47.250.157.97 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.7.225.179 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.190.251.64 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.187.111.163 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.186.90.14 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.186.216.82 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.186.192.235 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.163.53.202 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.139.190.250 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
41.234.140.61 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
39.144.124.123 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
38.211.112.207 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
38.10.71.38 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
37.66.241.174 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
35.212.24.117 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
34.18.66.103 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
34.129.63.214 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
34.11.27.170 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
31.208.30.66 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
27.195.63.244 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
27.17.197.98 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
27.130.141.160 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.199.99.248 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.199.98.226 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.199.108.214 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.199.101.94 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.144.95.84 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.144.88.133 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.144.82.92 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
8.218.158.195 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
80a9982be5e4075c102cb7893b2b692d | MD5 Hash | Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) | high | — | malwarebytes | Malwarebytes · loyalty-points-fraud-is-funding-hacker-holidays-lock-and-cod |
c832e1471a71efca0cc0ba1f865d810e | MD5 Hash | Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) | high | — | malwarebytes | Malwarebytes · loyalty-points-fraud-is-funding-hacker-holidays-lock-and-cod |
47df050fa1decb2bb6c6eb7dc477664a | MD5 Hash | Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) | high | — | malwarebytes | Malwarebytes · loyalty-points-fraud-is-funding-hacker-holidays-lock-and-cod |
f016482e3759bf4bff31c9eab5dff51d | MD5 Hash | MikroTik router flaws allow takeover without a password | high | — | malwarebytes | Malwarebytes · mikrotik-routers-can-be-taken-over-without-password |
9430b5dae3c340f435d4f0e154e83cd4 | MD5 Hash | MikroTik router flaws allow takeover without a password | high | — | malwarebytes | Malwarebytes · mikrotik-routers-can-be-taken-over-without-password |
68a54c8eb2d7694841a989f28557a8d8 | MD5 Hash | MikroTik router flaws allow takeover without a password | high | — | malwarebytes | Malwarebytes · mikrotik-routers-can-be-taken-over-without-password |
11f72b5dbd5a6bf01ba9433c0fcdd36e | MD5 Hash | Grindr settles HIV status data-sharing lawsuit for $35 million | high | — | malwarebytes | Malwarebytes · grindr-settles-hiv-status-data-sharing-lawsuit-for-35-millio |
8dae156336e084fdd4d23d78068cf4a0 | MD5 Hash | Grindr settles HIV status data-sharing lawsuit for $35 million | high | — | malwarebytes | Malwarebytes · grindr-settles-hiv-status-data-sharing-lawsuit-for-35-millio |
55d925806b14292b4e09a7cda96b3dcd | MD5 Hash | Grindr settles HIV status data-sharing lawsuit for $35 million | high | — | malwarebytes | Malwarebytes · grindr-settles-hiv-status-data-sharing-lawsuit-for-35-millio |
07d81f8223f6c8c3e152a19ff39f1c50 | MD5 Hash | The push to stop algorithms controlling social media feeds has begun | high | — | malwarebytes | Malwarebytes · the-push-to-stop-algorithms-controlling-social-media-feeds-h |
39e52411df511b35d8963d9408b4d7bb | MD5 Hash | The push to stop algorithms controlling social media feeds has begun | high | — | malwarebytes | Malwarebytes · the-push-to-stop-algorithms-controlling-social-media-feeds-h |
1976db56d6a383fae15f35b08f4d1e4d | MD5 Hash | The push to stop algorithms controlling social media feeds has begun | high | — | malwarebytes | Malwarebytes · the-push-to-stop-algorithms-controlling-social-media-feeds-h |
3cf734a7687e1b356a53865b4fa3acd8 | MD5 Hash | Microsoft fixes record 964 flaws, including 2 exploited zero-days | high | — | malwarebytes | Malwarebytes · microsoft-fixes-record-964-flaws-including-2-exploited-zero- |
ed7e89e07e79940a274a8903001e88d5 | MD5 Hash | Microsoft fixes record 964 flaws, including 2 exploited zero-days | high | — | malwarebytes | Malwarebytes · microsoft-fixes-record-964-flaws-including-2-exploited-zero- |
45967589b6a2ee939a80f28e0b3b4766 | MD5 Hash | Microsoft fixes record 964 flaws, including 2 exploited zero-days | high | — | malwarebytes | Malwarebytes · microsoft-fixes-record-964-flaws-including-2-exploited-zero- |
5a85f137de84aa78b68fc78c8f382453 | MD5 Hash | More than 100,000 fake stores are out to steal your card details | high | — | malwarebytes | Malwarebytes · more-than-100000-fake-stores-are-out-to-steal-your-card-deta |
0eac8728487e6c56731c87f35851f86d | MD5 Hash | More than 100,000 fake stores are out to steal your card details | high | — | malwarebytes | Malwarebytes · more-than-100000-fake-stores-are-out-to-steal-your-card-deta |
eaac0dbbad22f0df4ebd9eb0743e9532 | MD5 Hash | More than 100,000 fake stores are out to steal your card details | high | — | malwarebytes | Malwarebytes · more-than-100000-fake-stores-are-out-to-steal-your-card-deta |
11595ab08790103736af4830edb073fb | MD5 Hash | Copyright scammers get Instagram accounts suspended and demand payment | high | — | malwarebytes | Malwarebytes · copyright-scammers-get-instagram-accounts-suspended-and-dema |
c3335a893bf6a85b2fa79ca47116a7eb | MD5 Hash | Copyright scammers get Instagram accounts suspended and demand payment | high | — | malwarebytes | Malwarebytes · copyright-scammers-get-instagram-accounts-suspended-and-dema |
b003f720fa34747acfa93610fbcda81a | MD5 Hash | Copyright scammers get Instagram accounts suspended and demand payment | high | — | malwarebytes | Malwarebytes · copyright-scammers-get-instagram-accounts-suspended-and-dema |
15b62291c543ea3c4825e04efec7b702 | MD5 Hash | Update Chrome now to protect against an actively exploited vulnerability | high | — | malwarebytes | Malwarebytes · update-chrome-now-to-protect-against-an-actively-exploited-v |
7ac228a12ef9f9c00672db18b2023090 | MD5 Hash | Update Chrome now to protect against an actively exploited vulnerability | high | — | malwarebytes | Malwarebytes · update-chrome-now-to-protect-against-an-actively-exploited-v |
ca2a0547cb110353f3f8a8565f7e4748 | MD5 Hash | Update Chrome now to protect against an actively exploited vulnerability | high | — | malwarebytes | Malwarebytes · update-chrome-now-to-protect-against-an-actively-exploited-v |
0a03fc9924a442846263734d107d2bc0 | MD5 Hash | Will AI kill us all within the next decade? | high | — | malwarebytes | Malwarebytes · will-ai-kill-us-all-within-the-next-decade |
42145e70e1e0b7577cfeec820b620b32 | MD5 Hash | Will AI kill us all within the next decade? | high | — | malwarebytes | Malwarebytes · will-ai-kill-us-all-within-the-next-decade |
50ad0d5b07b069b956b07187414942e0 | MD5 Hash | Will AI kill us all within the next decade? | high | — | malwarebytes | Malwarebytes · will-ai-kill-us-all-within-the-next-decade |
d68bc6cdce2aebbd31a3f652fb132903 | MD5 Hash | BlueMoon exploit kit turns Chrome and Windows flaws into attacks | high | — | malwarebytes | Malwarebytes · bluemoon-exploit-kit-turns-chrome-and-windows-flaws-into-att |
719055662119e24e504212bacf32b2c1 | MD5 Hash | BlueMoon exploit kit turns Chrome and Windows flaws into attacks | high | — | malwarebytes | Malwarebytes · bluemoon-exploit-kit-turns-chrome-and-windows-flaws-into-att |
066ab98ebaef6325bc330c9e63f6292a | MD5 Hash | BlueMoon exploit kit turns Chrome and Windows flaws into attacks | high | — | malwarebytes | Malwarebytes · bluemoon-exploit-kit-turns-chrome-and-windows-flaws-into-att |
a958e4ad46bc846129ed1e97e768a23b | MD5 Hash | Android malware creates a hidden copy of your banking app | high | — | malwarebytes | Malwarebytes · android-malware-creates-a-hidden-copy-of-your-banking-app |
c7e75abf2b004861066995090f72824b | MD5 Hash | Android malware creates a hidden copy of your banking app | high | — | malwarebytes | Malwarebytes · android-malware-creates-a-hidden-copy-of-your-banking-app |
193fba5f65f1d87af523337492368fd8 | MD5 Hash | Android malware creates a hidden copy of your banking app | high | — | malwarebytes | Malwarebytes · android-malware-creates-a-hidden-copy-of-your-banking-app |
80ed05d7208927752506cfa710a66dc7 | MD5 Hash | Crypto customers targeted by scammers after email marketing provider breach | high | — | malwarebytes | Malwarebytes · crypto-customers-targeted-by-scammers-after-email-marketing- |
http://42.56.161.20:38561/i | URL | malware_download | high | — | urlhausabuse.chmalicious-urlthreat:malware_download | URLhaus |
e580bdef8f1e086d805e23cf1b720eb2 | MD5 Hash | Crypto customers targeted by scammers after email marketing provider breach | high | — | malwarebytes | Malwarebytes · crypto-customers-targeted-by-scammers-after-email-marketing- |
http://115.58.121.22:46152/bin.sh | URL | malware_download | high | — | urlhausabuse.chmalicious-urlthreat:malware_download | URLhaus |
31bf26e04370abd854b5069ffb828c8c | MD5 Hash | Crypto customers targeted by scammers after email marketing provider breach | high | — | malwarebytes | Malwarebytes · crypto-customers-targeted-by-scammers-after-email-marketing- |
http://66.212.187.214:58335/bin.sh | URL | malware_download | high | — | urlhausabuse.chmalicious-urlthreat:malware_download | URLhaus |
http://105.186.143.114:35689/bin.sh | URL | malware_download | high | — | urlhausabuse.chmalicious-urlthreat:malware_download | URLhaus |
http://66.212.187.214:58335/i | URL | malware_download | high | — | urlhausabuse.chmalicious-urlthreat:malware_download | URLhaus |
4cf18f187366b47b198246c8a729f8af | MD5 Hash | Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) | high | — | malwarebytes | Malwarebytes · loyalty-points-fraud-is-funding-hacker-holidays-lock-and-cod |
39ef803044ec7cf1c9b03ef2964865f0 | MD5 Hash | Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) | high | — | malwarebytes | Malwarebytes · loyalty-points-fraud-is-funding-hacker-holidays-lock-and-cod |
4eb97ae86bbc8161285703a4cacd3c07 | MD5 Hash | Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) | high | — | malwarebytes | Malwarebytes · loyalty-points-fraud-is-funding-hacker-holidays-lock-and-cod |
2b70271ffef40428edac926c3ab9268e | MD5 Hash | MikroTik router flaws allow takeover without a password | high | — | malwarebytes | Malwarebytes · mikrotik-routers-can-be-taken-over-without-password |
ef3b54e8489f17c3f8de0796b0e12a23 | MD5 Hash | MikroTik router flaws allow takeover without a password | high | — | malwarebytes | Malwarebytes · mikrotik-routers-can-be-taken-over-without-password |
f04c8c59bed4e0d8aef167deb46592d5 | MD5 Hash | MikroTik router flaws allow takeover without a password | high | — | malwarebytes | Malwarebytes · mikrotik-routers-can-be-taken-over-without-password |
c2bd9ddbff13071e9e690ca07c87b25b | MD5 Hash | Grindr settles HIV status data-sharing lawsuit for $35 million | high | — | malwarebytes | Malwarebytes · grindr-settles-hiv-status-data-sharing-lawsuit-for-35-millio |
0c6e72a29b8755b508e93682297fe97e | MD5 Hash | Grindr settles HIV status data-sharing lawsuit for $35 million | high | — | malwarebytes | Malwarebytes · grindr-settles-hiv-status-data-sharing-lawsuit-for-35-millio |
dc21fe75bb61e0f69b2cdd7aeb37fb0c | MD5 Hash | Grindr settles HIV status data-sharing lawsuit for $35 million | high | — | malwarebytes | Malwarebytes · grindr-settles-hiv-status-data-sharing-lawsuit-for-35-millio |
6fa87f4d82ea7e5044b1cca0175e4034 | MD5 Hash | The push to stop algorithms controlling social media feeds has begun | high | — | malwarebytes | Malwarebytes · the-push-to-stop-algorithms-controlling-social-media-feeds-h |
350de3e5a7daedad33fdabf0b0ce9f17 | MD5 Hash | The push to stop algorithms controlling social media feeds has begun | high | — | malwarebytes | Malwarebytes · the-push-to-stop-algorithms-controlling-social-media-feeds-h |
00dee032a3844d7e1723b06dcbe0ced4 | MD5 Hash | The push to stop algorithms controlling social media feeds has begun | high | — | malwarebytes | Malwarebytes · the-push-to-stop-algorithms-controlling-social-media-feeds-h |
19a167a60284de8766f57a7b41df0c7e | MD5 Hash | Microsoft fixes record 964 flaws, including 2 exploited zero-days | high | — | malwarebytes | Malwarebytes · microsoft-fixes-record-964-flaws-including-2-exploited-zero- |
58c2607e68bbb871d75bc1965d0f0bb1 | MD5 Hash | Microsoft fixes record 964 flaws, including 2 exploited zero-days | high | — | malwarebytes | Malwarebytes · microsoft-fixes-record-964-flaws-including-2-exploited-zero- |
56f820dbe47ed22fac8d5c7046da53c8 | MD5 Hash | Microsoft fixes record 964 flaws, including 2 exploited zero-days | high | — | malwarebytes | Malwarebytes · microsoft-fixes-record-964-flaws-including-2-exploited-zero- |
3cba7116fd4cf93d125be5fcc101d903 | MD5 Hash | More than 100,000 fake stores are out to steal your card details | high | — | malwarebytes | Malwarebytes · more-than-100000-fake-stores-are-out-to-steal-your-card-deta |
69bd241d3e70781d0bd3106630b0bd3f | MD5 Hash | More than 100,000 fake stores are out to steal your card details | high | — | malwarebytes | Malwarebytes · more-than-100000-fake-stores-are-out-to-steal-your-card-deta |
43a92d6770c602bd287d7ece8c8c3088 | MD5 Hash | More than 100,000 fake stores are out to steal your card details | high | — | malwarebytes | Malwarebytes · more-than-100000-fake-stores-are-out-to-steal-your-card-deta |
a8ebcf54e7b329235b0da43f45d4b66a | MD5 Hash | Copyright scammers get Instagram accounts suspended and demand payment | high | — | malwarebytes | Malwarebytes · copyright-scammers-get-instagram-accounts-suspended-and-dema |
ab2d3dc59410134cc1a09d52e606587e | MD5 Hash | Copyright scammers get Instagram accounts suspended and demand payment | high | — | malwarebytes | Malwarebytes · copyright-scammers-get-instagram-accounts-suspended-and-dema |
c035f930339a9529f34ead928db227b4 | MD5 Hash | Copyright scammers get Instagram accounts suspended and demand payment | high | — | malwarebytes | Malwarebytes · copyright-scammers-get-instagram-accounts-suspended-and-dema |
75027bef3a0ff911802e81c16c978b50 | MD5 Hash | Update Chrome now to protect against an actively exploited vulnerability | high | — | malwarebytes | Malwarebytes · update-chrome-now-to-protect-against-an-actively-exploited-v |
dc4382650c9ba4954e45233b53496d9f | MD5 Hash | Update Chrome now to protect against an actively exploited vulnerability | high | — | malwarebytes | Malwarebytes · update-chrome-now-to-protect-against-an-actively-exploited-v |
90b8d00ca361feceb0331c80d9864146 | MD5 Hash | Update Chrome now to protect against an actively exploited vulnerability | high | — | malwarebytes | Malwarebytes · update-chrome-now-to-protect-against-an-actively-exploited-v |
9807a5d250879d3d1d07d80c10c51d5f | MD5 Hash | Will AI kill us all within the next decade? | high | — | malwarebytes | Malwarebytes · will-ai-kill-us-all-within-the-next-decade |
1a473f3a180b372753301679b5660359 | MD5 Hash | Will AI kill us all within the next decade? | high | — | malwarebytes | Malwarebytes · will-ai-kill-us-all-within-the-next-decade |
882a33917f5bb46023ee0b9719bffa26 | MD5 Hash | Will AI kill us all within the next decade? | high | — | malwarebytes | Malwarebytes · will-ai-kill-us-all-within-the-next-decade |
53a149e258dd378f24c2a9b597e26170 | MD5 Hash | BlueMoon exploit kit turns Chrome and Windows flaws into attacks | high | — | malwarebytes | Malwarebytes · bluemoon-exploit-kit-turns-chrome-and-windows-flaws-into-att |
d3cc167174a52399b6d736779702c32a | MD5 Hash | BlueMoon exploit kit turns Chrome and Windows flaws into attacks | high | — | malwarebytes | Malwarebytes · bluemoon-exploit-kit-turns-chrome-and-windows-flaws-into-att |
bb9ac5446c799bb2ac4c36adeaabc8b4 | MD5 Hash | BlueMoon exploit kit turns Chrome and Windows flaws into attacks | high | — | malwarebytes | Malwarebytes · bluemoon-exploit-kit-turns-chrome-and-windows-flaws-into-att |
37f48e2059b695e34c964a7605a546a7 | MD5 Hash | Android malware creates a hidden copy of your banking app | high | — | malwarebytes | Malwarebytes · android-malware-creates-a-hidden-copy-of-your-banking-app |
c7d92ffd9c62561753fe8810d35d988b | MD5 Hash | Android malware creates a hidden copy of your banking app | high | — | malwarebytes | Malwarebytes · android-malware-creates-a-hidden-copy-of-your-banking-app |
25c39bdf0149cfab1ec908ed1dc8e069 | MD5 Hash | Android malware creates a hidden copy of your banking app | high | — | malwarebytes | Malwarebytes · android-malware-creates-a-hidden-copy-of-your-banking-app |
8301734fc367e6a10bc79de47e5d9810 | MD5 Hash | Crypto customers targeted by scammers after email marketing provider breach | high | — | malwarebytes | Malwarebytes · crypto-customers-targeted-by-scammers-after-email-marketing- |
d679664179e39b7255cc07faaf7b05a3 | MD5 Hash | Crypto customers targeted by scammers after email marketing provider breach | high | — | malwarebytes | Malwarebytes · crypto-customers-targeted-by-scammers-after-email-marketing- |
efbcde913072dfe8e5644e7824a76f09 | MD5 Hash | Crypto customers targeted by scammers after email marketing provider breach | high | — | malwarebytes | Malwarebytes · crypto-customers-targeted-by-scammers-after-email-marketing- |
http://182.116.48.4:52963/bin.sh | URL | malware_download | high | — | urlhausabuse.chmalicious-urlthreat:malware_download | URLhaus |
http://182.121.59.52:33634/bin.sh | URL | malware_download | high | — | urlhausabuse.chmalicious-urlthreat:malware_download | URLhaus |
60.166.83.232 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
60.166.83.110 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.55.114.222 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.54.105.200 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.52.100.55 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.52.100.102 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.50.187.49 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.50.187.113 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.50.186.113 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.50.185.208 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.50.184.78 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.50.184.63 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.50.184.100 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.49.231.173 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
59.174.86.197 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
58.10.52.236 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
58.10.232.196 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
51.211.216.228 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
46.101.94.40 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.71.73.43 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.70.167.191 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.55.223.144 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.229.55.56 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.228.171.89 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.184.115.19 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.180.35.231 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.169.83.137 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.168.88.151 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
45.154.33.203 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
41.208.129.81 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
41.208.129.39 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
38.3.211.76 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
34.87.119.28 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
34.85.235.85 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
34.83.21.130 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
34.102.36.50 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
34.101.150.222 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.42.66.252 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.199.91.229 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.199.119.254 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.199.115.80 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.144.89.109 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
24.144.83.223 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
14.241.119.16 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
13.218.181.122 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
8.147.235.14 | IP Address | CINS Army bad-actor IP | high | — | cins-armysentinel-ipsattacker-ip | CINS Army |
d19f4dd81e5914582905d053cd40000a | MD5 Hash | Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) | high | — | malwarebytes | Malwarebytes · loyalty-points-fraud-is-funding-hacker-holidays-lock-and-cod |
04897babd94ee73ddb84b39b96d67853 | MD5 Hash | Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) | high | — | malwarebytes | Malwarebytes · loyalty-points-fraud-is-funding-hacker-holidays-lock-and-cod |
1c5290c5355f9f182371202ac9d7aad6 | MD5 Hash | Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) | high | — | malwarebytes | Malwarebytes · loyalty-points-fraud-is-funding-hacker-holidays-lock-and-cod |
2a473236e7ee887893c2a8c361277ae8 | MD5 Hash | MikroTik router flaws allow takeover without a password | high | — | malwarebytes | Malwarebytes · mikrotik-routers-can-be-taken-over-without-password |
8ce7a316bfdeaf068fd35a5603f6a44c | MD5 Hash | MikroTik router flaws allow takeover without a password | high | — | malwarebytes | Malwarebytes · mikrotik-routers-can-be-taken-over-without-password |
e9ae138f79324b53e628c7b1b2242962 | MD5 Hash | MikroTik router flaws allow takeover without a password | high | — | malwarebytes | Malwarebytes · mikrotik-routers-can-be-taken-over-without-password |
7dd41b6fccc447438c02362320865a35 | MD5 Hash | Grindr settles HIV status data-sharing lawsuit for $35 million | high | — | malwarebytes | Malwarebytes · grindr-settles-hiv-status-data-sharing-lawsuit-for-35-millio |
43c1498f582317961f374eca5ae39f3a | MD5 Hash | Grindr settles HIV status data-sharing lawsuit for $35 million | high | — | malwarebytes | Malwarebytes · grindr-settles-hiv-status-data-sharing-lawsuit-for-35-millio |
be46ac9cbb41e9bf50c783f7874bd09c | MD5 Hash | Grindr settles HIV status data-sharing lawsuit for $35 million | high | — | malwarebytes | Malwarebytes · grindr-settles-hiv-status-data-sharing-lawsuit-for-35-millio |
a5c053e412b145221c0f48a54e653f11 | MD5 Hash | The push to stop algorithms controlling social media feeds has begun | high | — | malwarebytes | Malwarebytes · the-push-to-stop-algorithms-controlling-social-media-feeds-h |
f48745143a69a4de2d6efc77024434bf | MD5 Hash | The push to stop algorithms controlling social media feeds has begun | high | — | malwarebytes | Malwarebytes · the-push-to-stop-algorithms-controlling-social-media-feeds-h |
253ab48aa0461b7acd5247a39a045ad6 | MD5 Hash | The push to stop algorithms controlling social media feeds has begun | high | — | malwarebytes | Malwarebytes · the-push-to-stop-algorithms-controlling-social-media-feeds-h |
aed3694e161097acab2a9bba6510a4d1 | MD5 Hash | Microsoft fixes record 964 flaws, including 2 exploited zero-days | high | — | malwarebytes | Malwarebytes · microsoft-fixes-record-964-flaws-including-2-exploited-zero- |
2d95bc2cb1d7d927a44809916cadfbec | MD5 Hash | Microsoft fixes record 964 flaws, including 2 exploited zero-days | high | — | malwarebytes | Malwarebytes · microsoft-fixes-record-964-flaws-including-2-exploited-zero- |
ce468f516a9a66ccd06ed5ce55b4efdc | MD5 Hash | Microsoft fixes record 964 flaws, including 2 exploited zero-days | high | — | malwarebytes | Malwarebytes · microsoft-fixes-record-964-flaws-including-2-exploited-zero- |
ff938e5faf22c1218176475c1020198a | MD5 Hash | More than 100,000 fake stores are out to steal your card details | high | — | malwarebytes | Malwarebytes · more-than-100000-fake-stores-are-out-to-steal-your-card-deta |
e5ba38111915a139553992e5caa92a88 | MD5 Hash | More than 100,000 fake stores are out to steal your card details | high | — | malwarebytes | Malwarebytes · more-than-100000-fake-stores-are-out-to-steal-your-card-deta |
a62702c6807063030f921fde152b9367 | MD5 Hash | More than 100,000 fake stores are out to steal your card details | high | — | malwarebytes | Malwarebytes · more-than-100000-fake-stores-are-out-to-steal-your-card-deta |
c849e37c479bc96c4ff12beab3847e8d | MD5 Hash | Copyright scammers get Instagram accounts suspended and demand payment | high | — | malwarebytes | Malwarebytes · copyright-scammers-get-instagram-accounts-suspended-and-dema |
70918ea6e1344015012263be1fc14c2a | MD5 Hash | Copyright scammers get Instagram accounts suspended and demand payment | high | — | malwarebytes | Malwarebytes · copyright-scammers-get-instagram-accounts-suspended-and-dema |
3095910b2e65c6cbe3da36731ed24d2b | MD5 Hash | Copyright scammers get Instagram accounts suspended and demand payment | high | — | malwarebytes | Malwarebytes · copyright-scammers-get-instagram-accounts-suspended-and-dema |
6cd0f6d0c25059ae7a0dff3c113ebc34 | MD5 Hash | Update Chrome now to protect against an actively exploited vulnerability | high | — | malwarebytes | Malwarebytes · update-chrome-now-to-protect-against-an-actively-exploited-v |
4d14f013c4e16b715b7543956e5f5d0f | MD5 Hash | Update Chrome now to protect against an actively exploited vulnerability | high | — | malwarebytes | Malwarebytes · update-chrome-now-to-protect-against-an-actively-exploited-v |
c1939beecfad74f2dc191de17e52664e | MD5 Hash | Update Chrome now to protect against an actively exploited vulnerability | high | — | malwarebytes | Malwarebytes · update-chrome-now-to-protect-against-an-actively-exploited-v |
9d668a19c8b5539b34629e23e58a387d | MD5 Hash | Will AI kill us all within the next decade? | high | — | malwarebytes | Malwarebytes · will-ai-kill-us-all-within-the-next-decade |
4a08baa57c2771a6b65715439e0b3ed7 | MD5 Hash | Will AI kill us all within the next decade? | high | — | malwarebytes | Malwarebytes · will-ai-kill-us-all-within-the-next-decade |
ff258b31f5b392611d00e2dcc82a2687 | MD5 Hash | Will AI kill us all within the next decade? | high | — | malwarebytes | Malwarebytes · will-ai-kill-us-all-within-the-next-decade |
4368650b236b68a6ce65e151e1b2d0bc | MD5 Hash | BlueMoon exploit kit turns Chrome and Windows flaws into attacks | high | — | malwarebytes | Malwarebytes · bluemoon-exploit-kit-turns-chrome-and-windows-flaws-into-att |
dc80e8d2627c9064fcedc14158429a59 | MD5 Hash | BlueMoon exploit kit turns Chrome and Windows flaws into attacks | high | — | malwarebytes | Malwarebytes · bluemoon-exploit-kit-turns-chrome-and-windows-flaws-into-att |
http://91.92.242.236/files-129312398/files/file_f5a8871443e98731.exe | URL | malware_download | high | — | urlhausabuse.chmalicious-urlthreat:malware_download | URLhaus |
http://160.250.181.123/nhanbeo.apk | URL | malware_download | high | — | urlhausabuse.chmalicious-urlthreat:malware_download | URLhaus |
http://94.156.166.167:50958/i | URL | malware_download | high | — | urlhausabuse.chmalicious-urlthreat:malware_download | URLhaus |
Sign in as admin to add or delete indicators.
Live · Timely Threat Intel
Latest published intelligence
Fresh reports and adversary research — updated continuously by the NivX intel team.
Community Signals
Threat intel blog & writeups
DFIR, malware analysis, SOC playbooks and breaking security news curated live by NivX analysts — refreshed every 30 minutes. Click any card to jump straight to the full report.