Skip to content
INFOSTEALERS By HudsonRock

Live infostealer intelligence

The all-around
Infostealer hub.

Join 20,000+ cybersecurity pros for weekly infostealer updates, free email monitoring and expert tips about cybercrime intelligence — directly from the Hudson Rock research team.

Live infostealer telemetry
Press Coverage

As seen on the world’s top security publications

Our infostealer research has been cited by leading newsrooms covering cybercrime, breaches and threat intelligence.

What are infostealers?

Start with the fundamentals

A three-part field guide on infostealer ecosystems — from the basics to how botnets distribute logs at scale.

  1. 4 min

    Part 01

    What is an “info-stealer”? (Part Ⅰ)

    Continue
  2. 5 min

    Part 02

    Botnets & Info-Stealers (Part Ⅱ)

    Continue
  3. 6 min

    Part 03

    Botnets & Info-Stealers (Part Ⅲ)

    Continue
Read all explainers

Live newsroom

Breaking the latest stealer campaigns

All articles
Inside a Syrian Interrogation Room: The Detainee Files an Infostealer Stole From a Military Police Unit
Latest Hudson Rock

Inside a Syrian Interrogation Room: The Detainee Files an Infostealer Stole From a Military Police Unit

A single malware infection on one senior officer’s computer exposed the active caseload of a Syrian National Army military police unit

19 min read Read story
Blog Post

Analyzing Stripe Vendors Breach: Confirmed Vendor Exposure and Claims of 20,000 Compromised APIs

Blog Post

From CI Pipeline to Ransomware & Breaches: 6 High-Profile Breaches in the LiteLLM/Trivy Attack

Blog Post

Massive Azure Exfiltration Campaign Exposes Millions of Enterprise Records via Compromised Credentials (Mcdonald’s, Vodafone, Kyndryl & Others)

Blog Post

Largest AI Supply Chain Breach of 2026: LiteLLM Hack Impacts Thousands of Global Enterprises – Claim Your Ethical Disclosure

Blog Post

Introducing Cavalier’s New Threat Feeds: Comprehensive Visibility into Attacker Infrastructure

PhaaS

Introducing Cavalier’s New Threat Feeds: Deep Dive into Phishing-as-a-Service (PhaaS) Intelligence

Latest weekly report Aug 24 – Aug 31, 2026
Open report

Infostealers Weekly Report: 2026-08-24 – 2026-08-31

InfoStealers Weekly Report - In this comprehensive report, we provide you with valuable insights into the most pressing threats facing organizations today. As cyberattacks continue to grow in complexity and scale, our mission is to equip you with the knowledge and tools needed to safeguard your sensitive information.…

  • 12,546 Compromised Machines
  • 1,181 Compromised Employees
  • 6,068 Compromised Users
  • 5,297 Compromised Androids
  • 83,129 Compromised Domains
Top compromised domains this week
google.com 5,277 facebook.com 3,330 instagram.com 2,668 com.instagram.android 2,667 com.facebook.katana 2,658 live.com 2,512 amazon.com 1,447 com.snapchat.android 1,402 amazon.in 1,368 com.netflix.mediaclient 1,309 netflix.com 1,266 linkedin.com 1,022 android 992 openai.com 984 com.pinterest 928 microsoftonline.com 910 google.com 5,277 facebook.com 3,330 instagram.com 2,668 com.instagram.android 2,667 com.facebook.katana 2,658 live.com 2,512 amazon.com 1,447 com.snapchat.android 1,402 amazon.in 1,368 com.netflix.mediaclient 1,309 netflix.com 1,266 linkedin.com 1,022 android 992 openai.com 984 com.pinterest 928 microsoftonline.com 910

More from the briefing

Previous weekly reports

All reports
Latest threat feeds report
Open report

Threat Feeds Weekly Report: 2026-08-24 – 2026-08-31

Threat Feeds Weekly Report — executive summary of Hudson Rock Cavalier threat intelligence feeds. This report covers aggregated statistics only: C2 infrastructure, PhaaS kit hosts, and ClickFix monitor activity for Aug 24 – Aug 31, 2026 (UTC).

  • 25,513 Total Sightings
  • 92 Countries
  • 18,380 C2 Hosts
  • 2,590 PhaaS Hosts
  • 91,522 ClickFix Sites
Top C2 stealer families this week
socgholish 1,108 remus 858 stealc 856 vidar 811 salatstealer 368 lumma 342 svcstealer 295 cameleon 271 phantomstealer 268 redline 219 socgholish 1,108 remus 858 stealc 856 vidar 811 salatstealer 368 lumma 342 svcstealer 295 cameleon 271 phantomstealer 268 redline 219

More from Threat Feeds

Previous threat feeds reports

All threat feeds

Trending topics

Explore infostealer trending topics

Browse all topics →
Infostealers 52 Hackers 11 Threat Actor 8 Cybersecurity 6 Compromised Credentials 5 Analysis 5 Redline Infostealer 5 Investigations 5 Counter-Terrorism 4 StealC Stealer 3 AI 3 Cybercrime Forums 2 Rapid7 2 CloudSEK 2
Malware 34 Lumma Infostealer 10 Cybercriminals 7 Cryptocurrency 6 Breach 5 C2 Servers 5 Cookies 5 MetaStealer 4 Botnets 4 Meduza Stealer 3 Threat Intelligence 3 Infostealer Groups 2 Citrix 2
Hudson Rock 26 Ransomware 9 Cyberattacks 7 macOS 6 Exploit 5 Cybercrime Intelligence 5 Cybercrime 5 Atomic Stealer 4 Vidar Stealer 3 Python 3 Cyrus 3 Vulnerability 2 ClickFix 2

Free tools

Check exposure. Hunt threats. For free.

Run by the Hudson Rock research team. Everything below is free, no credit card required.

No signup

Free Tools

Check if your email, domain, or username appears in any infostealer log — instantly and for free.

Try Free Tools
AI assistant

CavalierGPT

A conversational threat-intel assistant for OSINT investigations and cybercrime research, powered by Cavalier.

Chat with CavalierGPT
Always on

Free Monitoring

Continuously monitor up to 3 emails, 3 domains, and 3 usernames. Get alerted the moment they surface in an infostealer infection.

Start Monitoring
Free Tools Check your exposure