ThreatIntelligenceDiscordBot

Threat Intelligence Discord Bot The vx-underground Threat Intelligence Discord Bot gets updates from various clearnet domains, ransomware threat actor domains, and Telegram channels. This bot will check for updates in intervals of 1800 seconds omit Telegram bot, this is gotten in real time. Don't...

CNVD-2022-60632

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:00+00:00| seen| https://t.me/CVEhub/2472 2026-07-29 12:01:01+00:00| seen| https://t.me/CVEhub/2204 2026-07-30 00:01:39+00:00| seen| https://t.me/CVEhub/2472 2026-07-30 00:01:40+00:00| seen| https://t.me/CVEhub/2204 2026-08-01...

CVE-2021-24305

creationtimestamp| type| source ---|---|--- 2026-07-20 21:00:06+00:00| seen| https://t.me/crackvaultde/1052 2026-07-20 21:00:06+00:00| seen| https://t.me/crackvaultde/1053 2026-07-21 00:00:18+00:00| seen| https://t.me/crackvaultde/1052 2026-07-21 00:00:18+00:00| seen| https://t.me/crackvaultde/10...

CVE-2024-1065

creationtimestamp| type| source ---|---|--- 2026-07-12 06:00:04+00:00| published-proof-of-concept| https://t.me/cKure/16512 2026-07-12 07:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/88211 2026-07-13 00:00:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/882...

Google Is Suing Chinese Scammers Who Are Using Gemini

Not sure this will have any effect, but I support the effort: According to Google's legal filing, Outsider Enterprise operates through Telegram. The group offers phishing-as-a-service to individuals who may not be technically savvy enough to set up fraudulent websites and text campaigns on their...

Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer

A previously undocumented threat actor known as Armored Likho has been attributed to cyber attacks targeting government agencies and the electric power sector across Russia, Brazil, and Kazakhstan. "Armored Likho blends financially motivated campaigns targeting private individuals with targeted...

24 billion stolen records exposed online. Here’s what to do

A newly discovered database containing 24 billion stolen records is a reminder that personal information from data breaches, phishing campaigns, and infostealer infections continues to circulate online. The collection was exposed on the internet before being taken offline. While researchers can't...

CVE-2026-53646

creationtimestamp| type| source ---|---|--- 2026-06-12 11:00:12+00:00| published-proof-of-concept| Telegram/YXCyRYfB5puG4zVuSsqFt0CqpucG34vnwOdsG1DKfw8sOUE 2026-06-12 15:00:07+00:00| published-proof-of-concept| Telegram/ycLXaxSGB-ldONYQWC7S6J3lanIcH0nsjxJAaBzeM5ug0Y 2026-07-07 00:59:15+00:00| see...

CVE-2026-36239

creationtimestamp| type| source ---|---|--- 2026-05-25 02:00:04+00:00| seen| https://t.me/GithubRedTeam/85759 2026-05-25 03:00:10+00:00| seen| Telegram/PWXxTbzLBS2I2NTEEZXYxWglH9J71PY-BvJO95sfjgRqY3E 2026-05-25 09:00:04+00:00| seen| Telegram/hq1WnakkbxJpSdatpwq9NAKRiUtHFa8ysgfQqaCqIO8mwqo...

CVE-2026-8161

creationtimestamp| type| source ---|---|--- 2026-05-11 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/83859 2026-05-11 23:00:11+00:00| seen| Telegram/e-kNblg5cCIACsW4hX0Z7Izc7Q-BrD-tkcFevHWmjItb6g 2026-05-12 03:00:06+00:00| seen|...

Models Are Applying to Be the Face of AI Scams

Dozens of Telegram channels reviewed by WIRED include job listings for “AI face models.” The mostly women who land these gigs are likely being used to dupe victims out of their money...

Malware-As-A-Service Redefined: Why XWorm is outpacing every other RAT in the underground malware market

Malware-As-A-Service Redefined: Why XWorm is outpacing every other RAT in the underground malware market By Boggavarapu R S S Srinivas Gupta and Ravishankar N C · March 12, 2026 Introduction In the evolving landscape of cybercrime, threat actors are constantly pursuing the "perfect" weapon: malwa...

GHSA-G925-F788-4JH7

creationtimestamp| type| source ---|---|--- 2026-01-02 18:48:07+00:00| published-proof-of-concept| Telegram/JTVCavw9eJ9TxCCdyOAXizVyk-oL-OSGJyunth0Lc0NQQjM 2026-01-02 21:52:07+00:00| published-proof-of-concept| Telegram/RP142WcXZVZZM4yb6Vg5Bi-obLVsVHz267yRzNk0mXmOvUc...

CVE-2025-34323

creationtimestamp| type| source ---|---|--- 2025-11-25 21:27:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60787 2025-11-26 03:00:07+00:00| published-proof-of-concept| Telegram/MnfDtTO7wJ3H0uNrhjZAmV8vXhG2hG4Vq-UJgHVKnfrpk...

A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces

The nascent collective that combines three prominent cybercrime groups, Scattered Spider, LAPSUS$, and ShinyHunters, has created no less than 16 Telegram channels since August 8, 2025. "Since its debut, the group's Telegram channels have been removed and recreated at least 16 times under varying...

New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps

A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them. "Once active, the spyware can exfiltra...

New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps

A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them. "Once active, the spyware can exfiltra...

RHSA-2024:3184

creationtimestamp| type| source ---|---|--- 2025-08-30 09:20:13+00:00| seen| Telegram/QGZerOOhmRAlpVpiC5nuj4wjlVz3IfpDU3CNQaIvWcupjE 2025-09-02 15:27:32+00:00| seen| Telegram/nZ0MC2d9ERRkvzL8iZQxgOM7RQh46e2kSouFKV11wBn1J2c...

CVE-2025-544241

creationtimestamp| type| source ---|---|--- 2025-08-04 13:28:46+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46538 2025-08-04 21:00:05+00:00| published-proof-of-concept| Telegram/C3dLOex4qKF8CrF74Ro2jk8I9HmXrLWpS6IVMSsoWA8-ZJQ...

Rust-based Myth Stealer Malware Spread via Fake Gaming Sites Targets Chrome, Firefox Users

Cybersecurity researchers have shed light on a previously undocumented Rust-based information stealer called Myth Stealer that's being propagated via fraudulent gaming websites. "Upon execution, the malware displays a fake window to appear legitimate while simultaneously decrypting and executing...