Skip to content
INFOSTEALERS By HudsonRock
Threat feeds weekly Aug 17 – Aug 24, 2026 1 min read

Threat Feeds Weekly Report: 2026-08-17 – 2026-08-24

Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and ClickFix monitor activity for Aug 17 – Aug 24, 2026 (UTC).

#1 30,538 Total Feed Sightings
#2 94 Countries Observed
#3 24,750 C2 Host Sightings
#4 1,382 PhaaS Host Sightings
#5 75,388 ClickFix Sites

C2 Intelligence Feed

Infostealer command & control

Host sightings, stealer families and geography over the last 8 days (UTC).

24,750 hosts
24,750Host Sightings
31Distinct Families
94Countries Observed

Daily Volume

  1. Aug 173,956
  2. Aug 185,109
  3. Aug 192,182
  4. Aug 202,023
  5. Aug 211,164
  6. Aug 221,783
  7. Aug 237,961
  8. Aug 24572

Top Stealer Families

  1. #1socgholish1,684hosts
  2. #2vidar564hosts
  3. #3remus552hosts
  4. #4lumma244hosts
  5. #5stealc161hosts
  6. #6rhadamanthys134hosts
  7. #7svcstealer133hosts
  8. #8phantomstealer132hosts
  9. #9salatstealer123hosts
  10. #10redline106hosts

Top Countries

  1. #1US9,913hosts
  2. #2DE2,423hosts
  3. #3FR1,992hosts
  4. #4NL943hosts
  5. #5BR694hosts
  6. #6GB694hosts
  7. #7IT690hosts
  8. #8CH616hosts
  9. #9ES429hosts
  10. #10IN414hosts

PhaaS Feed

Phishing-as-a-Service kits

Active kit hosts and geographic distribution over the last 8 days (UTC).

1,382 hosts
1,382Host Sightings
15Distinct Kits
26Countries Observed

Daily Volume

  1. Aug 1758
  2. Aug 18135
  3. Aug 19142
  4. Aug 20312
  5. Aug 21341
  6. Aug 22141
  7. Aug 23197
  8. Aug 2456

Top Phishing Kits

  1. #1sessionserpent260hosts
  2. #2legokit112hosts
  3. #3miarroba98hosts
  4. #4kali36555hosts
  5. #5flowerstorm44hosts
  6. #6eviltokens24hosts
  7. #7bluenoroff17hosts
  8. #8gcore11hosts
  9. #9smartapesg6hosts
  10. #10sneaky2fa4hosts

Top Countries

  1. #1US837hosts
  2. #2SG106hosts
  3. #3ES104hosts
  4. #4DE28hosts
  5. #5FR23hosts
  6. #6GB17hosts
  7. #7BR10hosts
  8. #8IN7hosts
  9. #9RU7hosts
  10. #10NL5hosts

ClickFix Monitor

Fake CAPTCHA & clipboard hijacks

Tracked ClickFix sites across the Cavalier monitor — malicious flags, clipboard theft and fake CAPTCHAs.

75,388 sites
75,388Total Sites
4,406Malicious Flagged
4,406Clipboard Hijacked
1,218Fake CAPTCHA

7-Day Volume

  1. Aug 173,878
  2. Aug 184,867
  3. Aug 191,805
  4. Aug 201,816
  5. Aug 211,003
  6. Aug 221,621
  7. Aug 237,795
  8. Aug 24504

Top Countries

  1. #1US9,139sites
  2. #2DE2,276sites
  3. #3FR1,937sites
  4. #4NL869sites
  5. #5BR665sites
  6. #6GB660sites
  7. #7IT642sites
  8. #8CH601sites
  9. #9ES418sites
  10. #10IN401sites

Top Technologies

  1. #1hosting21,836sites
  2. #2isp749sites
  3. #3education38sites
  4. #4business22sites
  5. #5government10sites

Weekly Briefing

Join 20,000+ cybersecurity pros for the briefing.

Weekly infostealer updates, top compromised domains, trending stealer families and curated research from the Hudson Rock team. No fluff, no noise.

  • Weekly issue
  • Zero spam
  • Actionable intel
  • Unsubscribe anytime

Powered by Hudson Rock · By subscribing, you agree to our privacy policy. Unsubscribe anytime.

More threat feeds

Previous weekly summaries

View archive →
Free Tools Check your exposure