Skip to content
INFOSTEALERS By HudsonRock
Threat feeds weekly Aug 24 – Aug 31, 2026 1 min read

Threat Feeds Weekly Report: 2026-08-24 – 2026-08-31

Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and ClickFix monitor activity for Aug 24 – Aug 31, 2026 (UTC).

#1 25,513 Total Feed Sightings
#2 92 Countries Observed
#3 18,380 C2 Host Sightings
#4 2,590 PhaaS Host Sightings
#5 91,522 ClickFix Sites

C2 Intelligence Feed

Infostealer command & control

Host sightings, stealer families and geography over the last 8 days (UTC).

18,380 hosts
18,380Host Sightings
32Distinct Families
92Countries Observed

Daily Volume

  1. Aug 242,668
  2. Aug 251,353
  3. Aug 264,036
  4. Aug 271,604
  5. Aug 285,277
  6. Aug 291,983
  7. Aug 301,080
  8. Aug 31379

Top Stealer Families

  1. #1socgholish1,108hosts
  2. #2remus858hosts
  3. #3stealc856hosts
  4. #4vidar811hosts
  5. #5salatstealer368hosts
  6. #6lumma342hosts
  7. #7svcstealer295hosts
  8. #8cameleon271hosts
  9. #9phantomstealer268hosts
  10. #10redline219hosts

Top Countries

  1. #1US7,469hosts
  2. #2DE1,760hosts
  3. #3FR1,394hosts
  4. #4NL563hosts
  5. #5BR525hosts
  6. #6IT496hosts
  7. #7GB461hosts
  8. #8CH406hosts
  9. #9IN332hosts
  10. #10ES325hosts

PhaaS Feed

Phishing-as-a-Service kits

Active kit hosts and geographic distribution over the last 8 days (UTC).

2,590 hosts
2,590Host Sightings
53Distinct Kits
37Countries Observed

Daily Volume

  1. Aug 241,215
  2. Aug 25182
  3. Aug 26484
  4. Aug 27239
  5. Aug 28168
  6. Aug 29122
  7. Aug 30123
  8. Aug 3157

Top Phishing Kits

  1. #1jwr606hosts
  2. #2sneaky2fa321hosts
  3. #3sessionserpent254hosts
  4. #4kali365110hosts
  5. #5anonymouskit72hosts
  6. #6miarroba71hosts
  7. #7mirage2fa56hosts
  8. #8eviltokens45hosts
  9. #9legokit43hosts
  10. #10flowerstorm39hosts

Top Countries

  1. #1US1,526hosts
  2. #2ES85hosts
  3. #3HK39hosts
  4. #4FR38hosts
  5. #5DE34hosts
  6. #6NL27hosts
  7. #7SG25hosts
  8. #8GB24hosts
  9. #9FI20hosts
  10. #10BR11hosts

ClickFix Monitor

Fake CAPTCHA & clipboard hijacks

Tracked ClickFix sites across the Cavalier monitor — malicious flags, clipboard theft and fake CAPTCHAs.

91,522 sites
91,522Total Sites
4,543Malicious Flagged
4,543Clipboard Hijacked
1,259Fake CAPTCHA

7-Day Volume

  1. Aug 242,520
  2. Aug 251,216
  3. Aug 263,709
  4. Aug 271,368
  5. Aug 285,090
  6. Aug 291,335
  7. Aug 30860
  8. Aug 31270

Top Countries

  1. #1US6,581sites
  2. #2DE1,556sites
  3. #3FR1,349sites
  4. #4BR503sites
  5. #5IT490sites
  6. #6NL461sites
  7. #7GB438sites
  8. #8CH394sites
  9. #9ES317sites
  10. #10IN309sites

Top Technologies

  1. #1hosting15,293sites
  2. #2isp655sites
  3. #3education24sites
  4. #4business15sites
  5. #5government6sites

Weekly Briefing

Join 20,000+ cybersecurity pros for the briefing.

Weekly infostealer updates, top compromised domains, trending stealer families and curated research from the Hudson Rock team. No fluff, no noise.

  • Weekly issue
  • Zero spam
  • Actionable intel
  • Unsubscribe anytime

Powered by Hudson Rock · By subscribing, you agree to our privacy policy. Unsubscribe anytime.

More threat feeds

Previous weekly summaries

View archive →
Free Tools Check your exposure