MEDIUMPhishing
Global

Turning Indicators into Intelligence in OpenCTI with Criminal IP

·Source: BleepingComputer

Updated:

Executive Summary

Threat intelligence is only as useful as the context behind it. Criminal IP explains how its integration enriches threat indicators in OpenCTI with risk scoring, infrastructure intelligence, and phishing analysis. [...]

Analysis

Threat intelligence is only as useful as the context behind it. Criminal IP explains how its integration enriches threat indicators in OpenCTI with risk scoring, infrastructure intelligence, and phishing analysis. [...]
Source Attribution

Originally published by BleepingComputer on Jul 1, 2026.

Related Threats

CRITICALPhishing

ST Engineering iDirect iQ-Series Terminals

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-183-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to device information or cause a denial-of-service condition.</strong></p> <p>The following versions of ST Engineering iDirect iQ-Ser

CVE-2026-38059CVE-2026-38057
CISA Advisories
CRITICALPhishing

CubeSpace CW0057 Reaction Wheel

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-183-02.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could allow an attacker to upload arbitrary malicious firmware to the device.</strong></p> <p>The following versions of CubeSpace CW0057 Reaction Wheel are affected:</p> <ul> <li>CW0057 Re

CVE-2026-13743
CISA Advisories
LOWPhishing

ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365

Talos has identified "ARToken," a phishing-as-a-service platform that targets Microsoft 365. The ARToken panel exposes 80+ API endpoints for device code phishing, Primary Refresh Token persistence, email access, BEC operations, and SharePoint exfiltration.

Cisco Talos