Threat Intelligence
1,787
Active IOCs
20
Geo-Blocked Origins
3
Dark Web Findings
0
DecoyPulse Triggers
Live Threat Feed
Critical
Emotet botnet infrastructure detected — 4 C2 IPs blocked
1h ago
High
New phishing campaign targeting UK financial services
1h ago
High
Microsoft Exchange CVE-2026-21413 — patch available
1h ago
Medium
RansomHub group claiming 3 new UK victims this week
7m ago
High
Dark web: 2 credential sets matching monitored domains found
1h ago
Medium
Cloudflare reports DDoS spike targeting .co.uk domains
1h ago
High
NCSC advisory: increased targeting of UK SMBs by APT29
1h ago
Low
SSL certificate for mail.company.co.uk expires in 14 days
9m ago
Informational
New IOCs added to threat feed — 847 indicators
1h ago
Medium
Anomalous BGP route change affecting UK ISP backbone
25m ago
MITRE ATT&CK Heatmap
Initial Access
30
Execution
82
Persistence
30
Privilege Escalation
61
Defence Evasion
58
Credential Access
22
Discovery
27
Lateral Movement
64
Collection
13
Command and Control
19
Exfiltration
16
Impact
79
Top Attack Origins
| Country | Events | |
|---|---|---|
| GB United Kingdom | 429 | |
| RO Romania | 418 | |
| UA Ukraine | 405 | |
| NG Nigeria | 340 | |
| VN Vietnam | 313 | |
| BR Brazil | 311 | |
| DE Germany | 293 | |
| NL Netherlands | 288 | |
| RU Russia | 287 | |
| IN India | 278 |
Indicators of Compromise (IOCs)
| Type | Value | Source | Status | First Seen | Last Seen | Hits |
|---|---|---|---|---|---|---|
| URL | https://62.231.71.22/payload.exe |
NCSC Feed | Expired | 2026-10-10 | 2026-10-11 | 32 |
support@threat-205.com |
VirusTotal | Active | 2026-10-08 | 2026-10-11 | 39 | |
info@threat-648.com |
MISP Community | Active | 2026-09-24 | 2026-10-11 | 29 | |
| Hash (SHA256) | 49966a6837909963f066fa0bd7952a2d |
AbuseIPDB | Under Review | 2026-09-17 | 2026-10-10 | 29 |
admin@threat-214.com |
Cyber-Defence Intel | Expired | 2026-09-19 | 2026-10-12 | 9 | |
| Domain | bad-131.xyz |
AlienVault OTX | Active | 2026-09-20 | 2026-10-11 | 33 |
| IPv4 | 91.242.195.161 |
AbuseIPDB | Active | 2026-09-18 | 2026-10-11 | 29 |
admin@threat-794.com |
NCSC Feed | Under Review | 2026-09-19 | 2026-10-10 | 29 | |
| URL | https://47.251.18.157/payload.exe |
AlienVault OTX | Expired | 2026-09-26 | 2026-10-11 | 13 |
| IPv4 | 194.209.62.188 |
NCSC Feed | Expired | 2026-09-30 | 2026-10-09 | 33 |
| Hash (SHA256) | eb18b15a00c305dd8e8e103c069cf892 |
AbuseIPDB | Active | 2026-09-15 | 2026-10-10 | 36 |
info@threat-199.com |
Cyber-Defence Intel | Active | 2026-10-10 | 2026-10-11 | 41 | |
| IPv4 | 194.101.62.42 |
Cyber-Defence Intel | Under Review | 2026-09-27 | 2026-10-10 | 9 |
| Domain | exfil-664.ru |
NCSC Feed | Active | 2026-09-26 | 2026-10-11 | 19 |
| URL | https://16.250.15.7/payload.exe |
AlienVault OTX | Active | 2026-09-26 | 2026-10-10 | 7 |
alert@threat-653.com |
AbuseIPDB | Under Review | 2026-09-13 | 2026-10-11 | 37 | |
| Domain | c2-958.cc |
MISP Community | Under Review | 2026-09-12 | 2026-10-10 | 26 |
| URL | https://51.143.183.133/payload.exe |
VirusTotal | Expired | 2026-09-29 | 2026-10-11 | 43 |
| URL | https://13.174.71.85/payload.exe |
Cyber-Defence Intel | Active | 2026-10-09 | 2026-10-09 | 36 |
| Hash (SHA256) | bebf339a4309400c6efa129a2765946e |
AbuseIPDB | Under Review | 2026-10-06 | 2026-10-10 | 14 |
| URL | https://97.185.105.147/payload.exe |
MISP Community | Active | 2026-09-29 | 2026-10-10 | 44 |
| IPv4 | 45.105.148.113 |
NCSC Feed | Expired | 2026-10-03 | 2026-10-09 | 46 |
| Hash (SHA256) | 0530fe06bbcc24c03bef3c74d5f5662f |
Cyber-Defence Intel | Active | 2026-09-29 | 2026-10-10 | 31 |
| Hash (SHA256) | 977f7d8582a0fb0812995fc8d73bdc90 |
AlienVault OTX | Active | 2026-09-14 | 2026-10-11 | 23 |
support@threat-871.com |
AbuseIPDB | Expired | 2026-09-29 | 2026-10-09 | 6 | |
| Domain | hack-721.cc |
NCSC Feed | Active | 2026-09-18 | 2026-10-11 | 6 |
| URL | https://52.101.130.120/payload.exe |
AbuseIPDB | Expired | 2026-09-12 | 2026-10-09 | 47 |
| Domain | malware-832.cc |
MISP Community | Active | 2026-09-30 | 2026-10-09 | 22 |
info@threat-642.com |
Cyber-Defence Intel | Active | 2026-10-04 | 2026-10-09 | 16 | |
| URL | https://11.183.47.43/payload.exe |
Cyber-Defence Intel | Active | 2026-10-11 | 2026-10-09 | 42 |