Latest

Jscrambler npm Compromise Shows Build Pipelines Need Runtime Controls

Ghost Phishing Shows Why Email Security Must Follow the Browser

Pakistani Police Intrusions Show Why Public-Sector Data Systems Are Strategic Targets

Bad Epoll Shows Linux Kernel LPEs Belong in the Patch Priority Queue

Fake Payment SDKs Show Why Dependency Risk Is Credential Risk

Critical UniFi Flaws Put Network Control Planes Back in the Patch Queue

Vidar Stealer Campaign Shows Why File Size and Fake Signatures Still Beat Weak Controls

ADFS Signing Keys Show Why Federation Servers Are Tier-Zero Identity Infrastructure

UAT-7810 Shows Edge Devices Are Becoming China-Nexus Relay Infrastructure

FortiBleed Shows Firewall Credentials Are Ransomware Fuel

NetNut and Popa Takedown Shows Residential Proxies Are Now Attack Infrastructure

Vect and TeamPCP Show Supply-Chain Credentials Are Ransomware Fuel

Ousaban Shows Banking Trojans Are Learning to Hide From Sandboxes

NUT upsmon Command Injection Shows UPS Monitoring Belongs in the Patch Queue

Indicator of Compromise

update-check[.]com

Domain Seen in 3 reports Watch this →

A domain observed in malicious infrastructure. Block or monitor it in DNS and web proxies. Shown defanged for safe viewing; use Copy live value for the functional form.

Included in the Domains feed (live, machine-readable).

Seen in these reports

Malware · Mar 29, 2026

Infinity Stealer: New macOS Infostealer Combines ClickFix Social Engineering with Nuitka Compilation

Malware · Mar 29, 2026

Infinity Stealer: New macOS Infostealer Uses ClickFix and Nuitka Compilation to Evade Detection

Threat Intelligence · Mar 28, 2026

Infinity Stealer: New macOS Malware Uses ClickFix Lures and Nuitka-Compiled Python Payload

Browse all indicators → Machine-readable feeds → Extract IOCs from text →