Skip to content
Threat feeds weekly Aug 3 – Aug 10, 2026 1 min read

Threat Feeds Weekly Report: 2026-08-03 – 2026-08-10

Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and ClickFix monitor activity for Aug 3 – Aug 10, 2026 (UTC).

#1 9,157 Total Feed Sightings
#2 68 Countries Observed
#3 4,156 C2 Host Sightings
#4 925 PhaaS Host Sightings
#5 40,181 ClickFix Sites

C2 Intelligence Feed

Infostealer command & control

Host sightings, stealer families and geography over the last 8 days (UTC).

4,156 hosts
4,156Host Sightings
20Distinct Families
68Countries Observed

Daily Volume

  1. Aug 3560
  2. Aug 4442
  3. Aug 5525
  4. Aug 6822
  5. Aug 7480
  6. Aug 8451
  7. Aug 9732
  8. Aug 10144

Top Stealer Families

  1. #1socgholish410hosts
  2. #2balada184hosts
  3. #3vidar151hosts
  4. #4stealc113hosts
  5. #5lumma112hosts
  6. #6redline99hosts
  7. #7svcstealer96hosts
  8. #8salatstealer79hosts
  9. #9agenttesla65hosts
  10. #10blankgrabber46hosts

Top Countries

  1. #1US2,105hosts
  2. #2DE363hosts
  3. #3FR200hosts
  4. #4NL121hosts
  5. #5FI106hosts
  6. #6IN99hosts
  7. #7BR98hosts
  8. #8GB79hosts
  9. #9CH71hosts
  10. #10SG55hosts

PhaaS Feed

Phishing-as-a-Service kits

Active kit hosts and geographic distribution over the last 8 days (UTC).

925 hosts
925Host Sightings
12Distinct Kits
17Countries Observed

Daily Volume

  1. Aug 3163
  2. Aug 4141
  3. Aug 5130
  4. Aug 6116
  5. Aug 770
  6. Aug 898
  7. Aug 9182
  8. Aug 1025

Top Phishing Kits

  1. #1sessionserpent300hosts
  2. #2miarroba110hosts
  3. #3kali36584hosts
  4. #4honeystorm72hosts
  5. #5flowerstorm30hosts
  6. #6sneaky2fa29hosts
  7. #7eviltokens27hosts
  8. #8gcore17hosts
  9. #9bluenoroff13hosts
  10. #10mamba2fa2hosts

Top Countries

  1. #1US478hosts
  2. #2ES79hosts
  3. #3NL52hosts
  4. #4GB47hosts
  5. #5HK44hosts
  6. #6DE13hosts
  7. #7IN10hosts
  8. #8FR10hosts
  9. #9BR4hosts
  10. #10SG3hosts

ClickFix Monitor

Fake CAPTCHA & clipboard hijacks

Tracked ClickFix sites across the Cavalier monitor — malicious flags, clipboard theft and fake CAPTCHAs.

40,181 sites
40,181Total Sites
4,076Malicious Flagged
4,076Clipboard Hijacked
1,005Fake CAPTCHA

7-Day Volume

  1. Aug 3473
  2. Aug 4416
  3. Aug 5513
  4. Aug 6577
  5. Aug 7416
  6. Aug 8407
  7. Aug 9388
  8. Aug 10106

Top Countries

  1. #1US1,704sites
  2. #2DE252sites
  3. #3FR182sites
  4. #4IN98sites
  5. #5BR95sites
  6. #6NL80sites
  7. #7FI72sites
  8. #8GB66sites
  9. #9CH59sites
  10. #10SG53sites

Top Technologies

  1. #1hosting3,089sites
  2. #2isp139sites
  3. #3business12sites
  4. #4education3sites
  5. #5government1sites

More threat feeds

Previous weekly summaries

View archive →
Free Tools Check your exposure