Resources

All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.

July 20, 2022

API Key, a Key to Credential Leakage & Manipulation

Upon searching for Django web applications with enabled Debug Mode on Criminal IP (https://www.criminalip.io/), Database (hereinafter referred to as DB) accounts information and API Keys of more than 3,100 applications were found to be exposed on the internet. This implies that…

Blog
API Key, a Key to Credential Leakage & Manipulation

July 19, 2022

How to Find Fake PayPal Login Page with Favicon Filter

Tutorial on finding fake PayPal login pages going after your money, using favicon.Try Criminal IP to search for internet assets and their related threat information that can’t be on found on Google. ▶️ https://www.criminalip.io▶️ CIP Twitter: https://twitter.com/CriminalIP_US…

Notice
How to Find Fake PayPal Login Page with Favicon Filter

July 12, 2022

Unsecured Jenkins Servers: A Gateway to Major Cybersecurity Flaws

Jenkins is an open-source software designed to create a continuous integration (CI) and continuous delivery and deployment environment for all language combinations and source code repositories. To using Jenkins automates the build, testing, and deployment to increase software…

Blog
Unsecured Jenkins Servers: A Gateway to Major Cybersecurity Flaws

July 6, 2022

Did You Forget to Renew Your SSL Certificate?

SSL (Secure Sockets Layer) is a protocol that uses encryption to transmit data between servers and browsers securely. The electronic file that this protocol enables is called an SSL certificate, and by installing the SSL certificate on the server, secure communication using the…

Blog
Did You Forget to Renew Your SSL Certificate?

July 1, 2022

Collaboration Tool Vulnerability: Protecting Your Business from Data Leaks

With their easy work management systems, online collaboration tools such as Trello, Jira, Notion, and Monday are used by many companies to run efficient team tasks in the process of work digitization. However, such online collaboration tools have downsides as major tasks and…

Blog
Collaboration Tool Vulnerability: Protecting Your Business from Data Leaks

June 27, 2022

Favicon-Hash: A Tool for Uncovering Spoofed Domains and Vulnerabilities

Favicon, a compound word for Favorites and Icon, is a website-representing icon that can be found on the tab above the browser address bar, and is applied to almost all websites that are available to users. Criminal IP (https://www.criminalip.io) provides the “favicon” filter…

Blog
Favicon-Hash: A Tool for Uncovering Spoofed Domains and Vulnerabilities

June 24, 2022

How to Check Cryptojacking Cases Using Criminal IP

Cryptojacking, a compound word for Cryptocurrency and Hijacking, is a cybercrime where an attacker uses malicious links to lure victims into a website that loads cryptomining Javascript, infects their computers, and then uses their resources to mine cryptocurrency. The number of…

Blog
How to Check Cryptojacking Cases Using Criminal IP

June 23, 2022

Neglected Default Password, a Security Flaw

A default password, a preconfigured password for a device or software, can be easily found on the internet and in instruction manuals; thus, it must be changed during the initial setup. If the default password is not changed, it can create a significant security vulnerability,…

Blog
Neglected Default Password, a Security Flaw

June 21, 2022

Introducing Criminal IP | Cyber Threat Intelligence Search Engine

Criminal IP is a an up-and coming Cyber Threat Intelligence (CTI) search engine intended to identify potential vulnerabilities that threaten companies or individuals’ IT assets and offers a new way to manage them comprehensively by allowing users to find results for malicious IP…

Notice
Introducing Criminal IP | Cyber Threat Intelligence Search Engine

June 17, 2022

Search for Corporate IP Addresses Using AS_Name Filter on Asset Search

Most domains and IP addresses on the internet have WHOIS information, which includes details of the internet asset owners, such as their domain name, IP address, and AS (Autonomous System) number. This WHOIS information helps users estimate where the cyberattack was initiated…

Blog
Search for Corporate IP Addresses Using AS_Name Filter on Asset Search

June 14, 2022

Criminal IP Analysis Report on Overlooked Multi-Function Printer Vulnerability

How would you feel if your personal information, such as your ID and resume, were posted online? Using an internet-connected multi-function printer (MFP) to scan and email important personal information has become commonplace for individuals and enterprises. Since these files…

Blog
Criminal IP Analysis Report on Overlooked Multi-Function Printer Vulnerability

June 10, 2022

Using the Product Filter on Asset Search to Identify Applications Exposed to Attack Surface

In the IT field, there are numerous applications with official product names. Using the product filter on Criminal IP makes it possible to identify which applications are running on a specific IP address. To identify which applications are running on a specific IP address,…

Blog
Using the Product Filter on Asset Search to Identify Applications Exposed to Attack Surface

Business Customer Reports

Experienced any inconvenience?

Let us know right away.

Contact US

Join AI SPERA

Be part of the AI SPERA journey.

Contact US