Advertisement
FBI Disrupts First VPN Service Used by Ransomware Groups
The FBI and international partners dismantled First VPN, a specialized service used by dozens of ransomware groups for reconnaissance and intrusions.
Emerging Reconnaissance: Attackers Actively Probe AI Models
DShield sensors detect increasing scanning activity targeting popular AI models like Claude and Hugging Face, signaling a potential new attack vector for threat actors.
Analysis of 'iranbot' Message in Cowrie Honeypot Logs
A peculiar 'iranbot_was_here' message, alongside Telnet logins and portscans, was observed in Cowrie honeypot logs, signaling potential reconnaissance activity.
Adminer & phpMyAdmin: Attacker Scans Target Database Management Tools
Runtime Rebel observes increased honeypot scans targeting Adminer and phpMyAdmin. Understand the risks associated with these database management tools and secure your
Analyzing Proxy Scanner Activity: Monitoring /proxy/ URI Patterns
Threat actors are shifting scanning patterns to identify open proxies using /proxy/ URI prefixes. Learn how to detect and mitigate these reconnaissance scans.