@CriminalIP_US

Criminal IP is a comprehensive web-based cyber threat intelligence search engine. Search for Anything, Secure Your Everything.

 Las Vegas, Nevada
criminalip.io/
Joined September 2021
  • Tweets1.3K
  • Following1.4K
  • Followers4.9K
850Media
🤝 Thank you for three great days at Security Days Fall 2026 Tokyo! To everyone who visited Booth B20, thank you for sharing your security challenges and exploring Criminal IP TI and AITEM with us. From uncovering internet-exposed assets to investigating threats and prioritizing risks, we enjoyed discussing how our solutions can support your team’s security operations. Missed us at the event? Reach out to learn more or book a demo. 👉 criminalip.io/contact-us #SecurityDays #CyberSecurity #ThreatIntelligence #AttackSurfaceManagement
139
🐘 PHP2Shell: When the PHP Engine Becomes the Attack Surface CVE-2026-109618 and CVE-2026-109619 affect PHP’s core runtime. Even an up-to-date application may be at risk if the underlying PHP engine remains unpatched. 📄 Criminal IP Analysis ✔️ PHP discovery: 852,895 Internet-exposed assets. ✔️ Expired SSL certificates: 62,111 PHP assets warranting maintenance review. ✔️ Exposed phpinfo() pages: 2,519 servers revealing version and configuration details. Exposure alone does not confirm vulnerability. Identify your assets, verify PHP patch status, and remove public configuration pages. 👉 Read the full analysis: criminalip.io/knowledge-hub/… #PHP2Shell #ThreatIntelligence #AttackSurfaceManagement
2
203
🗼 That’s a wrap on Day 1 at Security Days Fall 2026 Tokyo! Thank you to everyone who visited us at Booth B20! We enjoyed discussing your security challenges and demonstrating how Criminal IP TI and AITEM help uncover internet-exposed assets, investigate threats, and prioritize risks. Joining us tomorrow? Stop by for a live demo and a chat with our team. 📍 TAKANAWA GATEWAY Convention Center 📌 Booth B20 See you tomorrow! #SecurityDays #CyberSecurity #ThreatIntelligence #AttackSurfaceManagement
135
📣 Just 2 days to go until Security Days Fall 2026 Tokyo! Visit us at Booth B20 for live demos of Criminal IP TI and AITEM. Discover how threat intelligence and AI can help your team uncover internet-exposed assets, investigate threats, and prioritize risks. 📅 October 21–23, 2026 📍 TAKANAWA GATEWAY Convention Center, Tokyo 📌 Booth B20 #SecurityDays #CyberSecurity #ThreatIntelligence #AttackSurfaceManagement #AITEM
169
🙌 Thank you for visiting Criminal IP at GovWare 2026!​ It was a pleasure meeting you, sharing live demos of Criminal IP TI and AITEM, and discussing your threat intelligence and exposure management needs.​ Have more questions or want to continue the conversation? Leave us a message through our Contact Us page. Our team would be happy to help.​ 👉 Contact us: criminalip.io/contact-us​ Thanks for a great three days in Singapore. We look forward to staying connected!​ #GovWare2026 #AITEM #ThreatIntelligence #AttackSurfaceManagement #CyberSecurity
158
🤘We're AMP'D to announce that Criminal IP is an official @torq_io AMP partner! Together, we’re transforming how security teams operate — empowering our customers to detect and defend against threats, faster. More about our partnership: search.criminalip.io/develop…
1
172
📸 A look at Criminal IP at GovWare 2026!​ It’s been great meeting security professionals, sharing live demos, and discussing threat intelligence and exposure management.​ There’s still one more day to visit us! Stop by Booth K37 to meet the team and explore Criminal IP and AITEM in action.​ 📍 Sands Expo, Singapore​ 📌 Booth K37​ ​ Come by for a demo and a chat. We’d love to see you!​ #GovWare2026 #AITEM #ThreatIntelligence #AttackSurfaceManagement #CyberSecurity
1
168
🤝 Bringing internet threat intelligence to AI-powered investigations We’re proud to be a data partner of Ardence, TRM Labs’ new AI investigation platform. Through Ardence, Criminal IP data will help security and investigative teams gain clearer visibility into the internet infrastructure behind threats—within the workflows they already use. 🔗Learn more: trmlabs.com/resources/blog/t… #ThreatIntelligence #Cybersecurity
1
156
⏳ 1 day to go until GovWare 2026! Join the Criminal IP team at Booth K37 to explore live demos of our threat intelligence solutions and AITEM, our AI-powered threat exposure management platform. Discover how external asset visibility and actionable threat intelligence can help your security team detect threats earlier and manage exposure more effectively. 📅 October13–15, 2026 📍 Sands Expo, Singapore 📌 BoothK37 Stop by for a demo and a chat. See you in Singapore! #GovWare2026 #AITEM #ThreatIntelligence #ThreatExposureManagement #CyberSecurity
153
Threat Research | Uncovering a Carding C2 Infrastructure Through a Single Favicon Hash What can a single favicon hash reveal about a cybercriminal operation? Using Criminal IP Asset Search, a threat intelligence investigation uncovered two servers hosting “Olho de Deus”, a command-and-control (C2) panel designed for payment-card data collection and remote access. Through infrastructure analysis and examination of the panel's JavaScript code, the research revealed a dual-agent architecture, Windows RAT capabilities, and potential targeting of retail point-of-sale (POS) systems. The findings highlight how infrastructure fingerprinting can uncover threats that reputation scores alone may overlook. Read the full research, including technical findings and indicators of compromise (IOCs). 🔗 criminalip.io/knowledge-hub/… #ThreatIntelligence #ThreatResearch
1
1
416
🪁Kiteworks’ Shutdown Advisory: Analyzing Internet-Exposed Infrastructure Kiteworks advised a precautionary shutdown following a threat warning, then identified and fixed a critical vulnerability during its investigation. Normal operations resumed, with no evidence of exploitation or system compromise reported. 📄 Criminal IP Analysis ✔️ Keyword search: 396 results containing “Kiteworks,” providing a starting point for identifying related infrastructure. ✔️ Favicon search: 768 results, showing how visual identifiers can broaden discovery. ✔️ Certificate search: 190 results naming Kiteworks in the organization field, providing clues beyond web interfaces, including SMTP infrastructure. Use these findings to identify related infrastructure, confirm deployment ownership, and verify required remediation. 👉 Read the full analysis: criminalip.io/knowledge-hub/… #cybersecurity #threatintelligence #Kiteworks #AttackSurfaceManagement
190
📂 ScreenConnect CVE-2026-84869: Exploiting Active Remote Sessions A ScreenConnect vulnerability allows a low-privileged attacker with access to an active remote session to transfer and execute files without host approval. Evidence of active exploitation led CISA to add it to the KEV Catalog. 📄 Criminal IP Analysis ✔️ 12,055 results containing the “ScreenConnect” string ✔️ 1,524 assets with ScreenConnect in the webpage title ✔️ 238 assets classified as ScreenConnect in product data Use these findings to locate exposed ScreenConnect environments and prioritize client updates. Upgrade to 26.6.5 or later, reinstall host clients, and update access agents. 👉 Read the full analysis: criminalip.io/knowledge-hub/… #cybersecurity #threatintelligence #ScreenConnect #CVE202684869
1
6
497
📘 September 2026 Threat Intelligence Digest September’s digest focuses on vulnerabilities in internet-facing gateways, routers, artifact repositories, and management servers. Several were exploited in active attacks, making exposed assets and patch status urgent priorities. 🔹 SonicWall SMA1000 flaws chained for unauthenticated remote code execution 🔹 MikroTik “MikroTrick” chain used to take control of routers with exposed SSH 🔹 NetScaler ADC and Gateway authentication bypass affecting specific versions and configurations 🔹 JFrog Artifactory authentication bypass threatening software repositories and build workflows 🔹 PaperCut NG/MF flaws chained in attacks against print management servers These cases show why security teams need to identify exposed services, verify affected versions and configurations, and investigate signs of compromise alongside patching. 👉 Explore the Full Threat Intelligence Digest criminalip.io/knowledge-hub/… #ThreatIntelligence #Cybersecurity #VulnerabilityIntelligence #AttackSurface #ASM #CTI
1
2
264
79
🔍 A suspicious IP is only one part of the picture. For a government organization supporting Singapore’s digital ecosystem, investigating external activity means understanding the infrastructure behind each indicator. Criminal IP Threat Intelligence adds context on IPs, domains, services, and threat signals so analysts can assess which findings need a closer look. See how the organization uses external intelligence to support threat investigation. 📄 Read the full case study: criminalip.io/knowledge-hub/… #ThreatIntelligence #Cybersecurity #DigitalInfrastructure
1
3
563
🔎 MikroTik RouterOS “MikroTrick” Attack Chain Analysis​ An attack chain combining authentication bypass and privilege escalation vulnerabilities in MikroTik RouterOS is being actively exploited in the wild, allowing attackers to fully compromise affected devices.​ 🔍 Criminal IP Analysis​ ✔ Approximately 398,000 RouterOS assets identified​ ✔ Approximately 191,000 assets found with SSH services exposed to the Internet​ ✔ Some assets exposed multiple remote services, including SSH, Telnet, and FTP​ Rather than simply knowing that RouterOS is in use, it is important to verify whether SSH is currently accessible from the Internet.​ 👉 Read the full analysis:​ criminalip.io/knowledge-hub/…​ #cybersecurity #threatintelligence #MikroTik #RouterOS
199
🎤 From Visibility to Threat Hunting: A Case Study of AI-Driven Attack Surface Management At GovWare 2026, Criminal IP’s CEO, Byungtak Kang, will present how AITEM transforms traditional Attack Surface Management into an AI-driven threat hunting platform. Through a real-world AITEM case study, the session will explore how security teams can move beyond asset visibility to continuously identify high-risk exposures and support proactive, scalable threat detection and response. 🗓️ October 13, 14:45–15:05 📍 Level B2, Exhibition Hall, Sands Expo and Convention Centre 👉 View session details: govware.sg/conference/govwar… #GovWare2026 #Cybersecurity #ThreatIntelligence #AttackSurfaceManagement #ThreatHunting
1
192
📢 Criminal IP is exhibiting at Security Days Fall 2026 in Tokyo! 📅 Oct21–23, 2026 📍 TAKANAWA GATEWAY Convention Center 📌 Booth B20 At the Criminal IP booth, visitors can explore our threat intelligence and attack surface management solutions through live product demonstrations. Stop by to see how Criminal IP helps identify internet-exposed assets, improve attack surface visibility, and support more effective threat intelligence! 👉 criminalip.io/knowledge-hub/… #SecurityDays #Cybersecurity
171
🌏 Beyond the Login Event: Threat Intelligence for Digital Identity Services A suspicious IP alone doesn’t tell the whole story. A digital identity provider uses Criminal IP Threat Intelligence to investigate the infrastructure behind suspicious access — including hosting environments, VPNs, proxies, scanners, and known threat signals. 🔎 Gain deeper context around suspicious IPs and domains 🎯 Prioritize infrastructure that requires further investigation 🛡️ Validate potential threats with external intelligence 📄 See how Criminal IP supports digital identity security: criminalip.io/knowledge-hub/… #ThreatIntelligence #Cybersecurity #DigitalIdentity
172
🧱 SonicWall SMA1000 Zero-Day Chain Exploited in Active Attacks CVE-2026-83548 and CVE-2026-83549 can be chained to bypass authentication and execute arbitrary OS commands on vulnerable SMA1000 appliances. Both vulnerabilities have been actively exploited and added to the CISA KEV Catalog. 🔎 Criminal IP Asset Search revealed: 🔹 42,286 internet-exposed assets running detectable SonicWall services worldwide 🔹 954 SonicWall SSL-VPN assets requiring priority model, version, and patch verification 🔹 Over 62% of the identified SSL-VPN assets were concentrated in the United States and Japan Attackers can compromise vulnerable gateways and gain access to internal networks, making immediate patching and compromise assessment essential. 👉 Read the full analysis: criminalip.io/knowledge-hub/… #Cybersecurity #SonicWall #SMA1000 #Vulnerability #ZeroDay #ThreatIntelligence #SSLVPN
2
1
248
Load more