An update to Criminal IP v1.82.0 has been released.
[Criminal IP v1.82.0] Regular Maintenance and Update Release Note
Maintenance Period: 2025.06.26 05:00~10:00 AM (UTC)
[New Changes]
- Added Data and Search Feature to Hacking Group (Actors) Page
- Data has been added to view the IP addresses, domains, file hashes, and file names used by each hacking group in malicious activities.
- A search feature for each category using the added data has been implemented.
- IP Address: An IP address used by hacking groups for malicious activities such as command and control (C2) servers, data exfiltration, or phishing, which can be leveraged for network blocking and threat detection.
- Domain: The web address exploited by hacking groups for phishing, malware distribution, or command and control (C2) communication, enabling the identification of malicious actions and security measures through DNS blocking.
- File Hash: A unique hash value calculated using MD5 or SHA256 algorithms for malware files. Even if the file name changes, this key indicator can still identify the same malware.
- File Name: The name of malware files (such as backdoors, RATs, etc.) used by hacking groups in their attacks, which can help detect attacker disguise patterns and facilitate detection based on file names.
- Added IOC and IOA Search Features in the Hacking Group (Actors) Report
- A feature to search IOC and IOA information has been added to the Hacking Group Detailed Page.
- IOC: Network resources used in a hacking group’s attack can be searched by IP address or domain.
- IOA: Technical indicators of suspected attacks used by a hacking group can be searched by file hash or file name.
- A feature to search IOC and IOA information has been added to the Hacking Group Detailed Page.
[Improvement]
- Bug Fixes and Stability Improvements
Thank you to all Criminal IP users.
We will continue to perform regular checks and updates to ensure service improvement.