InfoSEC SOC Team Publishes GitHub Repository of Latest Malware Indicators of Compromise and Attack
Solid neighbourhood-bakery energy. Trustworthy and warm.
Summary
GitHub repository maintained by InfoSEC's SOC team providing the latest Indicators of Compromise and Attack (IoC/IoA) derived from malware variant discoveries and threat research. The repository includes file-based indicators (malicious file names, signatures, hashes), network-based indicators (IPs, ports), and application-level indicators (URLs, domain names, email addresses, botnet C2 servers). It serves as a threat intelligence source for security investigations.
Key quotes
· 3 pulledAs a value-added service at InfoSEC, our SOC team has created a github repository where you can find the latest Indicators of Compromise and Attack (IOC/IOA) based on the discovery of malware variants from the latest threat researches.
These include not only malicious file names, signatures and hashes (file-based IoC), but also IP and port-based indicators at the network level (network-based IoC), as well as application-level URLs, domain names, e-mail addresses, and services like botnet command and control servers (C2).
You can think of it as a source of threat intelligence, which has become...
You might also wanna read
Kaspersky Researchers Document New Infection Chains and IoCs in Notepad++ Supply Chain Attack
Kaspersky GReAT experts discovered previously undocumented infection chains used in the Notepad++ supply chain attack that occurred from Jun
securelist.com·3mo ago
Supply Chain Attacks on Open-Source Software: Case Study of Malicious Pull Request Attempts
The article discusses recent supply chain attacks on open-source software projects like LiteLLM and axios, with a specific case study of att
casco.com·1mo ago
Trivy GitHub Actions Compromised in Supply Chain Attack, Exposing CI/CD Secrets
A new supply chain attack targeting Trivy's GitHub Actions has been disclosed, where attackers compromised the security scanner by force-upd
socket.dev·2mo ago
GitHub Actions workflows identified as common weak link in open source supply chain attacks
This article analyzes a series of high-profile open source supply chain security incidents from the past 18 months, tracing them back to Git
Aqua Security GitHub Submissions on Hacker News: Security Tools and Incident Reports
This content appears to be a list of submissions from GitHub.com/aquasecurity posted on Hacker News, featuring various security-related tool
news.ycombinator.com·2mo ago