Security Research

Read Malwarebytes’ description of the PUP.IOBit detection, including its identification of potentially unwanted IObit software for macOS.

Explore a worldwide visualization of DDoS attacks through the Digital Attack Map.

Read an analysis reporting that Nekogram’s Android client contains a backdoor that collects phone numbers.

TracerouteVisualizer maps network traceroute paths and displays the route between a device and a destination.

GreyNoise analyzes untargeted internet scanning and attack activity reaching servers connected directly to the internet.

Let’s Encrypt is a nonprofit that provides automated TLS certificates for securing websites with HTTPS.

CertKit searches public certificate-transparency logs for certificates, subdomains and domain changes.

PRISM Break lists tools and projects for opting out of surveillance programs, organizing recommendations by platform and protocol.

Upload a file to Jotti’s online malware scanner to check it with the service.

Read Malwarebytes’ detection notes for PC Protect, a Windows system optimizer flagged as a potentially unwanted program.

IMPACT supports cybersecurity research through a repository of data and analytics tools and collaboration across academia, industry, and government.

The OSINT Toolkit bookmarklets run browser searches and tasks without requiring users to log in to the toolkit.

Shodan indexes internet-connected devices and services, with search tools for examining exposed infrastructure.

LocalBitcoins has closed its Bitcoin trading service, according to the site notice.

Trail of Bits publishes security reviews, research, open-source tools, and talks covering software, blockchains, and AI systems.

Read a report about GShade adding a computer reboot action after detecting a third-party updater, which its developer called anti-tamper behavior.

Search Vulmon for vulnerabilities and exploits by product or vulnerability type, with recent CVEs and research posts.

DomainRecon looks up DNS records, WHOIS details, SSL certificates, and IP addresses for a domain.

Ransomware.live tracks ransomware groups, victims, negotiations, payment demands, and recent cyberattacks.

rifteyy publishes malware and ransomware analysis reports, reverse engineering breakdowns, and security research.

Research a domain’s DNS records, RDAP, WHOIS, subdomains, IP addresses, and email security in one report.

Cyfrin provides blockchain security audits, developer courses, and security research for protocols, institutions, and engineers.

LocalMonero and AgoraDesk have closed their peer-to-peer cryptocurrency trading platform.

Bitonic lets users buy, sell, invest in, and store Bitcoin through a cryptocurrency service.