Threat Feeds Weekly Report: 2026-06-29 – 2026-07-06
Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and ClickFix monitor activity for Jun 29 – Jul 6, 2026 (UTC).
C2 Intelligence Feed
Infostealer command & control
Host sightings, stealer families and geography over the last 8 days (UTC).
Daily Volume
- Jun 29478
- Jun 303,217
- Jul 1390
- Jul 2161
- Jul 33,406
- Jul 442
- Jul 533
- Jul 6202
Top Stealer Families
- #1vidar659hosts
- #2lumma650hosts
- #3redline128hosts
- #4stealc87hosts
- #5svcstealer14hosts
- #6raccoon9hosts
- #7salatstealer7hosts
- #8agenttesla7hosts
- #9blankgrabber6hosts
- #10rhadamanthys4hosts
Top Countries
- #1US3,276hosts
- #2DE487hosts
- #3GB318hosts
- #4RU306hosts
- #5CY305hosts
- #6JP281hosts
- #7FR255hosts
- #8SC226hosts
- #9BR104hosts
- #10SG86hosts
PhaaS Feed
Phishing-as-a-Service kits
Active kit hosts and geographic distribution over the last 8 days (UTC).
Daily Volume
- Jun 29122
- Jun 30130
- Jul 1169
- Jul 2149
- Jul 3131
- Jul 457
- Jul 544
- Jul 6101
Top Phishing Kits
- #1sessionserpent243hosts
- #2kali365117hosts
Top Countries
- #1US466hosts
- #2ES76hosts
- #3GB49hosts
- #4HK34hosts
- #5DE10hosts
- #6FR6hosts
- #7KR5hosts
- #8CN3hosts
- #9CY3hosts
- #10CA2hosts
ClickFix Monitor
Fake CAPTCHA & clipboard hijacks
Tracked ClickFix sites across the Cavalier monitor — malicious flags, clipboard theft and fake CAPTCHAs.
7-Day Volume
- Jun 2936
- Jun 303,043
- Jul 1385
- Jul 236
- Jul 33,360
- Jul 419
- Jul 518
- Jul 695
Top Countries
- #1US2,881sites
- #2DE428sites
- #3CY296sites
- #4GB282sites
- #5JP281sites
- #6FR247sites
- #7SC170sites
- #8RU165sites
- #9BR104sites
- #10SG86sites
Top Technologies
- #1hosting5,508sites
- #2isp279sites
- #3business15sites
- #4education4sites
- #5government1sites
More threat feeds
Previous weekly summaries
Threat Feeds Weekly Report: 2026-07-27 – 2026-08-03
Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and…
Threat Feeds Weekly Report: 2026-07-20 – 2026-07-27
Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and…
Threat Feeds Weekly Report: 2026-07-13 – 2026-07-20
Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and…