Skip to content
INFOSTEALERS By HudsonRock
Threat feeds weekly Jul 6 – Jul 13, 2026 1 min read

Threat Feeds Weekly Report: 2026-07-06 – 2026-07-13

Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and ClickFix monitor activity for Jul 6 – Jul 13, 2026 (UTC).

#1 18,034 Total Feed Sightings
#2 71 Countries Observed
#3 2,984 C2 Host Sightings
#4 11,310 PhaaS Host Sightings
#5 13,025 ClickFix Sites

C2 Intelligence Feed

Infostealer command & control

Host sightings, stealer families and geography over the last 8 days (UTC).

2,984 hosts
2,984Host Sightings
14Distinct Families
71Countries Observed

Daily Volume

  1. Jul 6202
  2. Jul 7225
  3. Jul 8473
  4. Jul 91,014
  5. Jul 10441
  6. Jul 1197
  7. Jul 12110
  8. Jul 13422

Top Stealer Families

  1. #1vidar206hosts
  2. #2agenttesla156hosts
  3. #3lumma104hosts
  4. #4redline92hosts
  5. #5stealc86hosts
  6. #6svcstealer32hosts
  7. #7raccoon13hosts
  8. #8salatstealer11hosts
  9. #9blankgrabber9hosts
  10. #10azorult8hosts

Top Countries

  1. #1US1,442hosts
  2. #2DE218hosts
  3. #3GB130hosts
  4. #4FR127hosts
  5. #5ID86hosts
  6. #6MY62hosts
  7. #7IN57hosts
  8. #8NL56hosts
  9. #9BR53hosts
  10. #10CY51hosts

PhaaS Feed

Phishing-as-a-Service kits

Active kit hosts and geographic distribution over the last 8 days (UTC).

11,310 hosts
11,310Host Sightings
6Distinct Kits
39Countries Observed

Daily Volume

  1. Jul 6101
  2. Jul 7117
  3. Jul 85,000
  4. Jul 95,317
  5. Jul 10474
  6. Jul 1151
  7. Jul 1249
  8. Jul 13201

Top Phishing Kits

  1. #1kali3653,566hosts
  2. #2sneaky2fa854hosts
  3. #3eviltokens696hosts
  4. #4honeystorm209hosts
  5. #5sessionserpent99hosts
  6. #6omegalord1hosts

Top Countries

  1. #1US4,913hosts
  2. #2DE914hosts
  3. #3GB279hosts
  4. #4NL175hosts
  5. #5ES168hosts
  6. #6FR47hosts
  7. #7SG44hosts
  8. #8BR41hosts
  9. #9HK41hosts
  10. #10CA29hosts

ClickFix Monitor

Fake CAPTCHA & clipboard hijacks

Tracked ClickFix sites across the Cavalier monitor — malicious flags, clipboard theft and fake CAPTCHAs.

13,025 sites
13,025Total Sites
3,740Malicious Flagged
3,740Clipboard Hijacked
917Fake CAPTCHA

7-Day Volume

  1. Jul 695
  2. Jul 7150
  3. Jul 8433
  4. Jul 9985
  5. Jul 10295
  6. Jul 1154
  7. Jul 1240
  8. Jul 13399

Top Countries

  1. #1US1,281sites
  2. #2DE163sites
  3. #3FR122sites
  4. #4ID84sites
  5. #5GB71sites
  6. #6MY61sites
  7. #7IN55sites
  8. #8BR51sites
  9. #9CY43sites
  10. #10SG41sites

Top Technologies

  1. #1hosting2,297sites
  2. #2isp65sites
  3. #3education4sites
  4. #4government1sites

Weekly Briefing

Join 15,000+ cybersecurity pros for the briefing.

Weekly infostealer updates, top compromised domains, trending stealer families and curated research from the Hudson Rock team. No fluff, no noise.

  • Weekly issue
  • Zero spam
  • Actionable intel
  • Unsubscribe anytime

Powered by Hudson Rock · By subscribing, you agree to our privacy policy. Unsubscribe anytime.

More threat feeds

Previous weekly summaries

View archive →
Free Tools Check your exposure