Skip to content
INFOSTEALERS By HudsonRock

Live infostealer intelligence

The all-around
Infostealer hub.

Join 20,000+ cybersecurity pros for weekly infostealer updates, free email monitoring and expert tips about cybercrime intelligence — directly from the Hudson Rock research team.

Live infostealer telemetry
Press Coverage

As seen on the world’s top security publications

Our infostealer research has been cited by leading newsrooms covering cybercrime, breaches and threat intelligence.

What are infostealers?

Start with the fundamentals

A three-part field guide on infostealer ecosystems — from the basics to how botnets distribute logs at scale.

  1. 4 min

    Part 01

    What is an “info-stealer”? (Part Ⅰ)

    Continue
  2. 5 min

    Part 02

    Botnets & Info-Stealers (Part Ⅱ)

    Continue
  3. 6 min

    Part 03

    Botnets & Info-Stealers (Part Ⅲ)

    Continue
Read all explainers

Live newsroom

Breaking the latest stealer campaigns

All articles
Revolut Hackers Used Infostealers for Elaborate Social Engineering
Latest Blog Post

Revolut Hackers Used Infostealers for Elaborate Social Engineering

Revolut Hackers Exploited Infostealers for Social Engineering Revolut Hackers Used Infostealers for Elaborate Social Engineering BREAKING: The investigations team at Duel has established contact with the hacker behind the recent Revolut incident,…

4 min read Read story
ClickFix

HBO Max ads on a compromised Reddit account exposed a massive PasteSwitch ClickFix operation

Hudson Rock

Inside a Syrian Interrogation Room: The Detainee Files an Infostealer Stole From a Military Police Unit

Blog Post

Analyzing Stripe Vendors Breach: Confirmed Vendor Exposure and Claims of 20,000 Compromised APIs

Blog Post

From CI Pipeline to Ransomware & Breaches: 6 High-Profile Breaches in the LiteLLM/Trivy Attack

Blog Post

Massive Azure Exfiltration Campaign Exposes Millions of Enterprise Records via Compromised Credentials (Mcdonald’s, Vodafone, Kyndryl & Others)

Blog Post

Largest AI Supply Chain Breach of 2026: LiteLLM Hack Impacts Thousands of Global Enterprises – Claim Your Ethical Disclosure

Latest weekly report Sep 21 – Sep 28, 2026
Open report

Infostealers Weekly Report: 2026-09-21 – 2026-09-28

InfoStealers Weekly Report - In this comprehensive report, we provide you with valuable insights into the most pressing threats facing organizations today. As cyberattacks continue to grow in complexity and scale, our mission is to equip you with the knowledge and tools needed to safeguard your sensitive information.…

  • 26,370 Compromised Machines
  • 6,846 Compromised Employees
  • 5,803 Compromised Users
  • 13,721 Compromised Androids
  • 384,568 Compromised Domains
Top compromised domains this week
google.com 18,543 facebook.com 12,928 instagram.com 9,597 live.com 8,431 netflix.com 7,666 amazon.com 7,292 discord.com 7,100 paypal.com 7,003 com.facebook.katana 6,703 com.instagram.android 5,989 microsoftonline.com 5,728 apple.com 5,480 steampowered.com 5,372 roblox.com 5,034 com.netflix.mediaclient 4,685 spotify.com 4,631 google.com 18,543 facebook.com 12,928 instagram.com 9,597 live.com 8,431 netflix.com 7,666 amazon.com 7,292 discord.com 7,100 paypal.com 7,003 com.facebook.katana 6,703 com.instagram.android 5,989 microsoftonline.com 5,728 apple.com 5,480 steampowered.com 5,372 roblox.com 5,034 com.netflix.mediaclient 4,685 spotify.com 4,631

More from the briefing

Previous weekly reports

All reports
Latest threat feeds report
Open report

Threat Feeds Weekly Report: 2026-09-21 – 2026-09-28

Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and ClickFix monitor activity for Sep 21 – Sep 28, 2026 (UTC).

  • 30,047 Total Sightings
  • 89 Countries
  • 22,712 C2 Hosts
  • 2,362 PhaaS Hosts
  • 170,983 ClickFix Sites
Top C2 stealer families this week
stealc 407 socgholish 395 remus 336 vidar 278 santastealer 124 redline 91 agenttesla 61 salatstealer 55 lumma 48 phantomstealer 36 stealc 407 socgholish 395 remus 336 vidar 278 santastealer 124 redline 91 agenttesla 61 salatstealer 55 lumma 48 phantomstealer 36

More from Threat Feeds

Previous threat feeds reports

All threat feeds

Trending topics

Explore infostealer trending topics

Browse all topics →
Infostealers 52 Hackers 11 Threat Actor 8 Cybersecurity 6 Breach 5 C2 Servers 5 Cookies 5 Compromised Credentials 5 Counter-Terrorism 4 Meduza Stealer 3 AI 3 Vidar Stealer 3 Citrix 2 Phishing 2
Malware 34 Lumma Infostealer 10 Cybercriminals 7 Cryptocurrency 6 Exploit 5 Cybercrime Intelligence 5 Cybercrime 5 MetaStealer 4 Botnets 4 ClickFix 3 Threat Intelligence 3 Vulnerability 2 CloudSEK 2
Hudson Rock 26 Ransomware 9 Cyberattacks 7 macOS 6 Analysis 5 Redline Infostealer 5 Investigations 5 Atomic Stealer 4 StealC Stealer 3 Python 3 Cyrus 3 Rapid7 2 Dark Web 2

Free tools

Check exposure. Hunt threats. For free.

Run by the Hudson Rock research team. Everything below is free, no credit card required.

No signup

Free Tools

Check if your email, domain, or username appears in any infostealer log — instantly and for free.

Try Free Tools
AI assistant

CavalierGPT

A conversational threat-intel assistant for OSINT investigations and cybercrime research, powered by Cavalier.

Chat with CavalierGPT
Always on

Free Monitoring

Continuously monitor up to 3 emails, 3 domains, and 3 usernames. Get alerted the moment they surface in an infostealer infection.

Start Monitoring
Free Tools Check your exposure