Skip to content
INFOSTEALERS By HudsonRock
Threat feeds weekly Aug 10 – Aug 17, 2026 1 min read

Threat Feeds Weekly Report: 2026-08-10 – 2026-08-17

Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and ClickFix monitor activity for Aug 10 – Aug 17, 2026 (UTC).

#1 17,241 Total Feed Sightings
#2 84 Countries Observed
#3 11,802 C2 Host Sightings
#4 1,304 PhaaS Host Sightings
#5 50,054 ClickFix Sites

C2 Intelligence Feed

Infostealer command & control

Host sightings, stealer families and geography over the last 8 days (UTC).

11,802 hosts
11,802Host Sightings
28Distinct Families
84Countries Observed

Daily Volume

  1. Aug 10447
  2. Aug 11522
  3. Aug 12467
  4. Aug 131,162
  5. Aug 142,909
  6. Aug 151,483
  7. Aug 163,916
  8. Aug 17896

Top Stealer Families

  1. #1socgholish876hosts
  2. #2remus580hosts
  3. #3vidar437hosts
  4. #4lumma210hosts
  5. #5stealc195hosts
  6. #6agenttesla142hosts
  7. #7redline123hosts
  8. #8salatstealer119hosts
  9. #9svcstealer95hosts
  10. #10gurcu70hosts

Top Countries

  1. #1US4,897hosts
  2. #2DE1,199hosts
  3. #3FR886hosts
  4. #4GB332hosts
  5. #5BR324hosts
  6. #6NL316hosts
  7. #7ES234hosts
  8. #8IN228hosts
  9. #9IT217hosts
  10. #10VN171hosts

PhaaS Feed

Phishing-as-a-Service kits

Active kit hosts and geographic distribution over the last 8 days (UTC).

1,304 hosts
1,304Host Sightings
17Distinct Kits
18Countries Observed

Daily Volume

  1. Aug 10400
  2. Aug 11125
  3. Aug 1277
  4. Aug 13134
  5. Aug 14320
  6. Aug 15160
  7. Aug 1666
  8. Aug 1722

Top Phishing Kits

  1. #1sessionserpent372hosts
  2. #2kali365225hosts
  3. #3zephyrscama200hosts
  4. #4miarroba93hosts
  5. #5honeystorm32hosts
  6. #6darcula20hosts
  7. #7flowerstorm14hosts
  8. #8sneaky2fa10hosts
  9. #9kratos9hosts
  10. #10forg3657hosts

Top Countries

  1. #1US520hosts
  2. #2HK135hosts
  3. #3ES93hosts
  4. #4CA69hosts
  5. #5DE47hosts
  6. #6GB44hosts
  7. #7NL17hosts
  8. #8FR6hosts
  9. #9SG6hosts
  10. #10TR2hosts

ClickFix Monitor

Fake CAPTCHA & clipboard hijacks

Tracked ClickFix sites across the Cavalier monitor — malicious flags, clipboard theft and fake CAPTCHAs.

50,054 sites
50,054Total Sites
4,135Malicious Flagged
4,135Clipboard Hijacked
1,043Fake CAPTCHA

7-Day Volume

  1. Aug 10348
  2. Aug 11362
  3. Aug 12353
  4. Aug 131,044
  5. Aug 142,584
  6. Aug 15942
  7. Aug 163,487
  8. Aug 17849

Top Countries

  1. #1US4,159sites
  2. #2DE1,000sites
  3. #3FR843sites
  4. #4GB305sites
  5. #5BR298sites
  6. #6NL249sites
  7. #7ES221sites
  8. #8IN213sites
  9. #9IT194sites
  10. #10VN161sites

Top Technologies

  1. #1hosting9,312sites
  2. #2isp408sites
  3. #3education23sites
  4. #4business18sites
  5. #5government5sites

Weekly Briefing

Join 20,000+ cybersecurity pros for the briefing.

Weekly infostealer updates, top compromised domains, trending stealer families and curated research from the Hudson Rock team. No fluff, no noise.

  • Weekly issue
  • Zero spam
  • Actionable intel
  • Unsubscribe anytime

Powered by Hudson Rock · By subscribing, you agree to our privacy policy. Unsubscribe anytime.

More threat feeds

Previous weekly summaries

View archive →
Free Tools Check your exposure