Security Research

Explore a worldwide visualization of DDoS attacks through the Digital Attack Map.

Read an analysis reporting that Nekogram’s Android client contains a backdoor that collects phone numbers.

CertKit searches public certificate-transparency logs for certificates, subdomains and domain changes.

PRISM Break lists tools and projects for opting out of surveillance programs, organizing recommendations by platform and protocol.

Upload a file to Jotti’s online malware scanner to check it with the service.

Read Malwarebytes’ detection notes for PC Protect, a Windows system optimizer flagged as a potentially unwanted program.

The OSINT Toolkit bookmarklets run browser searches and tasks without requiring users to log in to the toolkit.

LocalBitcoins has closed its Bitcoin trading service, according to the site notice.

Read a report about GShade adding a computer reboot action after detecting a third-party updater, which its developer called anti-tamper behavior.

Search Vulmon for vulnerabilities and exploits by product or vulnerability type, with recent CVEs and research posts.

Ransomware.live tracks ransomware groups, victims, negotiations, payment demands, and recent cyberattacks.

rifteyy publishes malware and ransomware analysis reports, reverse engineering breakdowns, and security research.

LocalMonero and AgoraDesk have closed their peer-to-peer cryptocurrency trading platform.

Bitonic lets users buy, sell, invest in, and store Bitcoin through a cryptocurrency service.

Metacleaner removes hidden metadata from PDF, Word, Excel, and PowerPoint files through a browser-based service.

Shadowserver’s dashboard organizes reports on sinkholes, scans, honeypots, DDoS activity and compromised devices.

View the live cyber threat map published by Check Point for current threat activity.

StegOnline embeds information in image files using steganography and supports extracting hidden data from images.

Matweb.info provides Japanese-language information about tooth decay, prevention, dental checkups, and treatment aftercare.

FOFA maps internet-connected assets so security researchers and organizations can search services, devices, and vulnerability exposure.

Analyze suspicious files or URLs in an online malware-analysis sandbox with ANY.RUN.

ONYPHE scans IPs and URLs at internet scale for attack-surface discovery, management and cyber threat intelligence.

Netlas provides technical information about IP addresses, domains, websites, web apps, IoT devices and other assets.

OpenBuckets searches cloud storage systems for publicly exposed buckets and lets users filter results by file type.