Skip to content
INFOSTEALERS By HudsonRock
Threat feeds weekly Jul 27 – Aug 3, 2026 1 min read

Threat Feeds Weekly Report: 2026-07-27 – 2026-08-03

Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and ClickFix monitor activity for Jul 27 – Aug 3, 2026 (UTC).

#1 25,890 Total Feed Sightings
#2 89 Countries Observed
#3 19,642 C2 Host Sightings
#4 2,172 PhaaS Host Sightings
#5 37,357 ClickFix Sites

C2 Intelligence Feed

Infostealer command & control

Host sightings, stealer families and geography over the last 8 days (UTC).

19,642 hosts
19,642Host Sightings
21Distinct Families
89Countries Observed

Daily Volume

  1. Jul 273,781
  2. Jul 282,119
  3. Jul 29482
  4. Jul 308,154
  5. Jul 311,462
  6. Aug 11,298
  7. Aug 21,786
  8. Aug 3560

Top Stealer Families

  1. #1socgholish470hosts
  2. #2stealc199hosts
  3. #3vidar192hosts
  4. #4lumma135hosts
  5. #5salatstealer127hosts
  6. #6redline99hosts
  7. #7svcstealer79hosts
  8. #8gurcu78hosts
  9. #9agenttesla60hosts
  10. #10blankgrabber58hosts

Top Countries

  1. #1US9,655hosts
  2. #2DE1,616hosts
  3. #3FR996hosts
  4. #4IN724hosts
  5. #5BR538hosts
  6. #6CA499hosts
  7. #7NL446hosts
  8. #8GB440hosts
  9. #9SG354hosts
  10. #10IT310hosts

PhaaS Feed

Phishing-as-a-Service kits

Active kit hosts and geographic distribution over the last 8 days (UTC).

2,172 hosts
2,172Host Sightings
16Distinct Kits
28Countries Observed

Daily Volume

  1. Jul 27505
  2. Jul 28523
  3. Jul 29219
  4. Jul 30167
  5. Jul 31175
  6. Aug 1283
  7. Aug 2137
  8. Aug 3163

Top Phishing Kits

  1. #1sessionserpent440hosts
  2. #2sneaky2fa359hosts
  3. #3miarroba141hosts
  4. #4kali365119hosts
  5. #5honeystorm62hosts
  6. #6eviltokens35hosts
  7. #7gcore19hosts
  8. #8bluenoroff13hosts
  9. #9mamba2fa9hosts
  10. #10dkstool8hosts

Top Countries

  1. #1US1,321hosts
  2. #2NL193hosts
  3. #3ES106hosts
  4. #4HK103hosts
  5. #5GB37hosts
  6. #6FR16hosts
  7. #7DE10hosts
  8. #8MX7hosts
  9. #9SG7hosts
  10. #10BE6hosts

ClickFix Monitor

Fake CAPTCHA & clipboard hijacks

Tracked ClickFix sites across the Cavalier monitor — malicious flags, clipboard theft and fake CAPTCHAs.

37,357 sites
37,357Total Sites
4,076Malicious Flagged
4,076Clipboard Hijacked
1,005Fake CAPTCHA

7-Day Volume

  1. Jul 273,768
  2. Jul 281,954
  3. Jul 29355
  4. Jul 308,088
  5. Jul 311,406
  6. Aug 11,189
  7. Aug 21,669
  8. Aug 3473

Top Countries

  1. #1US9,400sites
  2. #2DE1,471sites
  3. #3FR983sites
  4. #4IN723sites
  5. #5BR534sites
  6. #6CA496sites
  7. #7GB427sites
  8. #8NL376sites
  9. #9SG349sites
  10. #10IT295sites

Top Technologies

  1. #1hosting17,946sites
  2. #2isp524sites
  3. #3education35sites
  4. #4business14sites
  5. #5government10sites

Weekly Briefing

Join 15,000+ cybersecurity pros for the briefing.

Weekly infostealer updates, top compromised domains, trending stealer families and curated research from the Hudson Rock team. No fluff, no noise.

  • Weekly issue
  • Zero spam
  • Actionable intel
  • Unsubscribe anytime

Powered by Hudson Rock · By subscribing, you agree to our privacy policy. Unsubscribe anytime.

More threat feeds

Previous weekly summaries

View archive →
Free Tools Check your exposure