URLhaus is a platform dedicated to sharing malicious URLs that are being used for malware distribution. It allows users to report URLs and explore a database for threat intelligence.

URLhaus

abuse.ch | 5,037 followers on LinkedIn. Cyber Security - figthing malware and botnets | abuse.ch is providing community driven threat intelligence on cyber threats. It is the home of a couple of projects that are helping internet service providers and network operators protecting their infrastructure from malware. IT-Security researchers, vendors and law enforcement agencies rely on data from abuse.ch, trying to make the internet a safer place.

Founder of abuse.ch

Roman Hüssy

abuse.ch

Ever wonder what kind of impact YOU’RE making by contributing to abuse.ch ? Let me tell you: it’s HUGE 💥 ➡️ 3.2 million malware sites ➡️ 1.3 million Indicators Of Compromise (IOCs) ➡️ 830,000 confirmed malware samples ....and this is only the beginning! 🔥 Your contributions matter more than you might think! Every indicator you report. Every malicious URL you flag. Every sample you share. It’s all adding up to a safer internet for everyone 💪 As you know, we’re all about “sharing is caring,” and your efforts prove this every day. Check out the real impact of those efforts here ⬇️⬇️⬇️ https://lnkd.in/e4XJDgUi

You want to contribute to the success story of abuse.ch & Spamhaus? Now it is your chance! We are looking for a passionate senior DevOps Engineer in CTI ⤵️⤵️⤵️

Europol coordinates global action against criminal abuse of Cobalt Strike 🔥 We are very proud that together with our partner Spamhaus Technology Ltd , we are part of this international operation 👏 🎉 Indicators on rogue Cobalt Strike botnet C2 servers related to the operation are being made available on ThreatFox 🦊 : ➡ https://lnkd.in/e-AR7N8m In addition, The Spamhaus Project is sending out abuse reports to network owners hosting such rogue (active) Cobalt Strike servers 📨 . If you are a network operator receiving such an abuse report, you should take action on it swiftly 🙏 Further reading: https://lnkd.in/eWBq26yJ #cybercrime #CTI #threatintel #malware #botnet #cobaltstrike #threatintelligence

🎉 NEW data available! Access abuse.ch URLhaus data (BETA release) via Spamhaus Intelligence API. Gain valuable malware-specific intelligence, to give you: ✔️ Confirmed URLs distributing malware 🔗 Associated metadata 🔎 Searchable by URL, domain, malware family, IP, ASNs and hashes 👀 Up to date signals with URLs reviewed frequently 🎯 Correlate with rich, expansive IP and domain reputation data 1️⃣ All from a single source Learn more and sign-up for a Spamhaus Developer License with 6-month FREE access to the data here 👇 https://hubs.ly/Q02zQHDl0 #URLHaus #MaliciousURLData #API #ExploreThePossibilities

Spamhaus Technology Ltd

We are proud to announce that we assisted the joint international law enforcement operation #OperationEndgame , targeting the notorious botnets #IcedID , #Smokeloader , #SystemBC and #Pikabot 🔥 These botnets have been heavily used by threat actors in the past to penetrate corporate networks, which often led to #ransomware attacks 🔓 abuse.ch has provided key infrastructure to LEA and internal partners to disrupt these botnet operations 🛑 More information on the operation is available here: 👉 https://lnkd.in/e6KakJ2u

We've spotted a #MooBot botnet that uses domain name for botnet command and control: putin.zelenskyj .ru 🔥 MooBot is a #Mirai variant, infecting IoT devices around the globe 🪲👀 While the domain name has been registered through the Russian based domain registrar r01.ru 🇷🇺, DNS resolution for that domain is provided by the US internet giant Cloudflare 🇺🇸 MooBot' payload delivery URLs: 🌐 https://lnkd.in/eNDxGqHS MooBot malware sample (payload): 🔎 https://lnkd.in/eN9EU-Er MooBot botnet C2 server: 🤖 45.88.90.30:43957 (AS203168 Constant MOULIN 🇧🇪) #cybercrime #cti #threatintel

We have just implemented The Spamhaus Project ASN-DROP (Don't Route Or Peer List) on URLhaus Having a look at the top networks distributing malware, it is no big surprise to see that a big chunk of them are listed on ASN-DROP and subsequently should not be routed or peered with 🔎🕵️🛑 URLhaus top malware distributing networks: 👉 https://lnkd.in/eYDugvDm Spamhaus Don't Route Or Peer Lists: 👉 https://lnkd.in/eGnhqCud

An exciting year is about to end in which cyber security experts have reported more than 250,000 malware sites to URLhaus 🪲 and shared over 160,000 IOCs on ThreatFox 🦊 We have processed 7,844,382 malware samples 📄, conducted 41,847,925 YARA scans on YARAify 🔍 and generated almost 5 Petabyte of network traffic 👀 Our heros of the year (top contributors) have been: 👉 URLhaus: 🥇geenensp 🥈lrz_urlhaus 👉 ThreatFox: 🥇Gi7w0rm 🥈 drb_ra 👉 MalwareBazaar: 🥇andretavare5 🥈 zbetcheckin 👉 YARAify: 🥇Casperinous 🥈 0xThiebaut Keep up the great work! 💪

The Spamhaus Technology Ltd November Malware Digest, based on insights from abuse.ch is now available. The report includes monthly overviews of malware campaigns, and insights into malware distribution sites, samples, IOCs & YARA rules - read it here: https://lnkd.in/e5DZcmgD #malware #threatintel #cybersecurity #infosec

The Spamhaus Project

It was a busy week for YARAify, peaking at almost 600k scans for more than 500k distinct files per day 📄🔍👀 Most popular newcomer was the YARA rule "mal_socks5systemz", catching files associated with socks5systemz malware 🔥 Keep on hunting! 👉 https://lnkd.in/ekHMNcy2 #threathunting #threatintel #threatintelligence #malware #yara

ABUS

CH:ABUSE:URLHAUS

URLhaus