Skip to content
INFOSTEALERS By HudsonRock
Threat feeds weekly Oct 12 – Oct 19, 2026 1 min read

Threat Feeds Weekly Report: 2026-10-12 – 2026-10-19

Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and ClickFix monitor activity for Oct 12 – Oct 19, 2026 (UTC).

#1 57,949 Total Feed Sightings
#2 103 Countries Observed
#3 45,886 C2 Host Sightings
#4 6,587 PhaaS Host Sightings
#5 264,038 ClickFix Sites

C2 Intelligence Feed

Infostealer command & control

Host sightings, stealer families and geography over the last 8 days (UTC).

45,886 hosts
45,886Host Sightings
25Distinct Families
103Countries Observed

Daily Volume

  1. Oct 127,530
  2. Oct 1314,104
  3. Oct 143,716
  4. Oct 157,521
  5. Oct 162,865
  6. Oct 174,163
  7. Oct 184,749
  8. Oct 191,238

Top Stealer Families

  1. #1socgholish2,357hosts
  2. #2amos59hosts
  3. #3vidar59hosts
  4. #4remus57hosts
  5. #5salatstealer26hosts
  6. #6lumma26hosts
  7. #7stealc20hosts
  8. #8xloader20hosts
  9. #9svcstealer19hosts
  10. #10umbral18hosts

Top Countries

  1. #1US21,955hosts
  2. #2DE3,960hosts
  3. #3FR2,725hosts
  4. #4BR1,555hosts
  5. #5IT1,284hosts
  6. #6GB1,180hosts
  7. #7IN1,099hosts
  8. #8NL783hosts
  9. #9SG777hosts
  10. #10ES683hosts

PhaaS Feed

Phishing-as-a-Service kits

Active kit hosts and geographic distribution over the last 8 days (UTC).

6,587 hosts
6,587Host Sightings
49Distinct Kits
61Countries Observed

Daily Volume

  1. Oct 121,201
  2. Oct 131,486
  3. Oct 14726
  4. Oct 15595
  5. Oct 16481
  6. Oct 17880
  7. Oct 181,115
  8. Oct 19103

Top Phishing Kits

  1. #1masscollect1,827hosts
  2. #2sessionserpent935hosts
  3. #3kali365149hosts
  4. #4legokit122hosts
  5. #5passtwice71hosts
  6. #6ghost64hosts
  7. #7eviltokens54hosts
  8. #8samepath48hosts
  9. #9gcore33hosts
  10. #10miarroba30hosts

Top Countries

  1. #1US3,088hosts
  2. #2FI518hosts
  3. #3NL489hosts
  4. #4DE418hosts
  5. #5RU252hosts
  6. #6LV78hosts
  7. #7FR68hosts
  8. #8GB62hosts
  9. #9SG59hosts
  10. #10PL50hosts

ClickFix Monitor

Fake CAPTCHA & clipboard hijacks

Tracked ClickFix sites across the Cavalier monitor — malicious flags, clipboard theft and fake CAPTCHAs.

264,038 sites
264,038Total Sites
5,476Malicious Flagged
5,476Clipboard Hijacked
1,612Fake CAPTCHA

7-Day Volume

  1. Oct 127,362
  2. Oct 1313,849
  3. Oct 143,599
  4. Oct 157,330
  5. Oct 162,856
  6. Oct 174,145
  7. Oct 184,707
  8. Oct 191,137

Top Countries

  1. #1US21,422sites
  2. #2DE3,833sites
  3. #3FR2,682sites
  4. #4BR1,551sites
  5. #5IT1,263sites
  6. #6GB1,162sites
  7. #7IN1,093sites
  8. #8SG772sites
  9. #9NL693sites
  10. #10ES677sites

Top Technologies

  1. #1hosting41,707sites
  2. #2isp1,648sites
  3. #3education76sites
  4. #4business18sites
  5. #5government14sites

Weekly Briefing

Join 20,000+ cybersecurity pros for the briefing.

Weekly infostealer updates, top compromised domains, trending stealer families and curated research from the Hudson Rock team. No fluff, no noise.

  • Weekly issue
  • Zero spam
  • Actionable intel
  • Unsubscribe anytime

Powered by Hudson Rock · By subscribing, you agree to our privacy policy. Unsubscribe anytime.

More threat feeds

Previous weekly summaries

View archive →
Free Tools Check your exposure