Skip to content
INFOSTEALERS By HudsonRock
Threat feeds weekly Jul 30 – Aug 5, 2026 1 min read

Threat Feeds Weekly Report: 2026-07-29 – 2026-08-05

Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and ClickFix monitor activity for Jul 30 – Aug 5, 2026 (UTC).

#1 19,134 Total Feed Sightings
#2 84 Countries Observed
#3 13,919 C2 Host Sightings
#4 1,139 PhaaS Host Sightings
#5 37,987 ClickFix Sites

C2 Intelligence Feed

Infostealer command & control

Host sightings, stealer families and geography over the last 7 days (UTC).

13,919 hosts
13,919Host Sightings
20Distinct Families
84Countries Observed

Daily Volume

  1. Jul 308,154
  2. Jul 311,462
  3. Aug 11,298
  4. Aug 21,786
  5. Aug 3560
  6. Aug 4442
  7. Aug 5217

Top Stealer Families

  1. #1socgholish286hosts
  2. #2stealc143hosts
  3. #3vidar134hosts
  4. #4lumma107hosts
  5. #5salatstealer89hosts
  6. #6redline73hosts
  7. #7svcstealer56hosts
  8. #8blankgrabber50hosts
  9. #9agenttesla38hosts
  10. #10umbral38hosts

Top Countries

  1. #1US6,796hosts
  2. #2DE1,166hosts
  3. #3FR698hosts
  4. #4IN570hosts
  5. #5BR397hosts
  6. #6NL351hosts
  7. #7GB299hosts
  8. #8SG240hosts
  9. #9CA211hosts
  10. #10RU208hosts

PhaaS Feed

Phishing-as-a-Service kits

Active kit hosts and geographic distribution over the last 7 days (UTC).

1,139 hosts
1,139Host Sightings
14Distinct Kits
23Countries Observed

Daily Volume

  1. Jul 30167
  2. Jul 31175
  3. Aug 1283
  4. Aug 2137
  5. Aug 3163
  6. Aug 4141
  7. Aug 573

Top Phishing Kits

  1. #1sessionserpent334hosts
  2. #2miarroba99hosts
  3. #3kali36588hosts
  4. #4sneaky2fa84hosts
  5. #5honeystorm59hosts
  6. #6eviltokens27hosts
  7. #7gcore19hosts
  8. #8flowerstorm16hosts
  9. #9bluenoroff14hosts
  10. #10mamba2fa3hosts

Top Countries

  1. #1US552hosts
  2. #2NL163hosts
  3. #3HK82hosts
  4. #4ES66hosts
  5. #5GB40hosts
  6. #6SG8hosts
  7. #7FR7hosts
  8. #8DE6hosts
  9. #9RU3hosts
  10. #10MX3hosts

ClickFix Monitor

Fake CAPTCHA & clipboard hijacks

Tracked ClickFix sites across the Cavalier monitor — malicious flags, clipboard theft and fake CAPTCHAs.

37,987 sites
37,987Total Sites
4,076Malicious Flagged
4,076Clipboard Hijacked
1,005Fake CAPTCHA

7-Day Volume

  1. Jul 308,088
  2. Jul 311,406
  3. Aug 11,189
  4. Aug 21,669
  5. Aug 3473
  6. Aug 4416
  7. Aug 5214

Top Countries

  1. #1US6,691sites
  2. #2DE1,066sites
  3. #3FR694sites
  4. #4IN570sites
  5. #5BR395sites
  6. #6NL312sites
  7. #7GB292sites
  8. #8SG240sites
  9. #9CA208sites
  10. #10ES205sites

Top Technologies

  1. #1hosting12,787sites
  2. #2isp404sites
  3. #3education23sites
  4. #4business11sites
  5. #5government7sites

Weekly Briefing

Join 15,000+ cybersecurity pros for the briefing.

Weekly infostealer updates, top compromised domains, trending stealer families and curated research from the Hudson Rock team. No fluff, no noise.

  • Weekly issue
  • Zero spam
  • Actionable intel
  • Unsubscribe anytime

Powered by Hudson Rock · By subscribing, you agree to our privacy policy. Unsubscribe anytime.

Free Tools Check your exposure