VirusTotal Adds Scanning for Public IPv4 Space to Expose C2 Servers and Malware Infrastructure
VirusTotal now scans public IPv4 daily, recording ports, banners, and fingerprints to surface C2 infrastructure.
54
Vendor
VirusTotal
- Mentions · 7d0
- Mentions · 30d2
- All mentions5
- First seenSep 2, 2026
- Last mentioned23d ago
Timeline
5 articles · newest firstHackers Allegedly Selling VirusTotal API Keys on the Dark Web
An unverified dark-web listing offers a claimed VirusTotal Enterprise API key for $350 in Bitcoin or Litecoin.
32
Revolut phishing texts appear days after data breach
Phishing texts impersonating Revolut targeted customers days after the fintech disclosed a social-engineering breach exposing IDs, verification selfies, and statements.
58
One runaway AI agent racked up a $50,000 cloud bill
Mandiant's AI Risk and Resilience report details prompt injection, AI supply chain compromises, agent abuse, and a runaway agent that accrued $50,000 in cloud charges.
68
Inside Knight Office, a New M365 AiTM Phishing Kit
Huntress details Knight Office, a new AiTM phishing kit stealing Microsoft 365 session tokens and registering attacker-controlled devices.
52
Appears with
- VirusTotalorganization · 2
- GitHubproduct · 1
- Huntressvendor · 1
- Google Threat Intelligence Grouporganization · 1
- Revolutvendor · 1
- NOX Stealermalware · 1
- Malwarebytesvendor · 1
- UNC6780threat actor · 1
- Microsoft 365product · 1
- APT28threat actor · 1
- BOMBAY Stealermalware · 1
- OpenClawproduct · 1
- Revolutvictim · 1
- Mandiantvendor · 1
- Spurvendor · 1
- Havocmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.