56,966 blogs · [ { "id": "01a0d8e8-0903-71c6-8642-00edc53420da", "title": "2026 SANS Threat Hunting Survey: Adversaries Prizing Stealth over Speed? Defenders Cooling on AI?", "url": "https://www.intel471.com/blog/2026-sans-threat-hunting-survey-adversaries-prizing-stealth-over-speed-defenders-cooling-on-ai", "published_at": "2026-09-24T18:13:31+00:00" }, { "id": "01a08cad-12c9-7167-981e-c85860a44832", "title": "Follow the Money: The Financial Sector's Threat Landscape in 2026", "url": "https://www.intel471.com/blog/follow-the-money-the-financial-sectors-threat-landscape-in-2026", "published_at": "2026-09-10T18:45:00+00:00" }, { "id": "01a07df3-5799-708c-9134-617554111345", "title": "Chinese-speaking threat actors targeting Mexican Android users with remote access Trojan", "url": "https://www.intel471.com/blog/chinese-speaking-threat-actors-targeting-mexican-android-users-with-remote-access-trojan", "published_at": "2026-09-01T17:00:00+00:00" }, { "id": "01a07df3-5799-708c-9134-6175548a4888", "title": "A New Era of Bulletproof Hosting Providers Emerge", "url": "https://www.intel471.com/blog/a-new-era-of-bulletproof-hosting-providers-emerge", "published_at": "2026-08-19T15:01:14+00:00" }, { "id": "01a07df3-5799-708c-9134-61755511098c", "title": "Threat Hunting Case Study: The Gentlemen", "url": "https://www.intel471.com/blog/threat-hunting-case-study-the-gentlemen", "published_at": "2026-08-11T20:30:00+00:00" }, { "id": "01a07df3-5799-708c-9134-6175559333b3", "title": "Introducing MCP471 and Agent471: Bringing Intelligence Into the AI Workflows Analysts Use", "url": "https://www.intel471.com/blog/introducing-mcp471-and-agent471-bringing-intelligence-into-the-ai-workflows-analysts-use", "published_at": "2026-08-04T12:00:00+00:00" }, { "id": "01a07df3-5799-708c-9134-6175560eb6d2", "title": "Software Supply Chain Attacks: Weaponizing Trusted Developer Workflows", "url": "https://www.intel471.com/blog/software-supply-chain-attacks-weaponizing-trusted-developer-workflows", "published_at": "2026-07-28T11:00:00+00:00" }, { "id": "01a07df3-5799-708c-9134-617556b14a47", "title": "AI Threat Detection Is Not Enough Without Adversary Intelligence", "url": "https://www.intel471.com/blog/ai-threat-detection-is-not-enough-without-adversary-intelligence", "published_at": "2026-07-22T19:30:00+00:00" }, { "id": "01a07df3-5799-708c-9134-617557009ecd", "title": "Scattered Spider duo sentenced to prison over TfL hack", "url": "https://www.intel471.com/blog/scattered-spider-duo-sentenced-to-prison-over-tfl-hack", "published_at": "2026-07-17T15:38:56+00:00" }, { "id": "01a07df3-5799-708c-9134-617557d7841e", "title": "Operation Fake KickOff: Attackers Abuse Recruiters and SaaS to Harvest Work Credentials", "url": "https://www.intel471.com/blog/operation-fake-kickoff-attackers-abuse-recruiters-and-saas-to-harvest-work-credentials", "published_at": "2026-07-15T18:00:00+00:00" }, { "id": "01a07df3-5799-708c-9134-617558be970d", "title": "Emerging Threat: QuimaRAT", "url": "https://www.intel471.com/blog/emerging-threat-quimarat", "published_at": "2026-07-15T11:00:00+00:00" }, { "id": "01a07df3-5799-708c-9134-617558d1190b", "title": "Threat Hunting Case Study: Scattered Spider", "url": "https://www.intel471.com/blog/threat-hunting-case-study-scattered-spider", "published_at": "2026-07-14T16:15:00+00:00" }, { "id": "01a07df3-5799-708c-9134-617559920591", "title": "ShinyHunters’ 0-day attacks: After patching, find out if you were breached", "url": "https://www.intel471.com/blog/shinyhunters-0-day-attacks-after-patching-find-out-if-you-were-breached", "published_at": "2026-06-23T18:10:28+00:00" }, { "id": "01a07df3-5799-708c-9134-617559d70ab9", "title": "Making the Business Case for Your CTI Budget", "url": "https://www.intel471.com/blog/making-the-business-case-for-your-cti-budget", "published_at": "2026-06-10T17:34:02+00:00" }, { "id": "01a07df3-5799-708c-9134-61755a5eaada", "title": "Threat Hunting Case Study: FileFix", "url": "https://www.intel471.com/blog/threat-hunting-case-study-filefix", "published_at": "2026-06-03T16:19:01+00:00" }, { "id": "01a07df3-5799-708c-9134-61755b2d300c", "title": "Gentlemen Ransomware", "url": "https://www.intel471.com/blog/gentlemen-ransomware", "published_at": "2026-05-29T11:00:00+00:00" }, { "id": "01a07df3-5799-708c-9134-61755bffb69e", "title": "What CISOs want from Cyber Threat Intelligence", "url": "https://www.intel471.com/blog/what-cisos-want-from-cyber-threat-intelligence", "published_at": "2026-05-27T13:00:00+00:00" }, { "id": "01a07df3-5799-708c-9134-61755c456aec", "title": "Turn Intelligence into Action Instantly with Retroactive Threat Detection on Verity471", "url": "https://www.intel471.com/blog/turn-intelligence-into-action-instantly-with-retroactive-threat-detection-on-verity471", "published_at": "2026-05-05T14:28:21+00:00" }, { "id": "01a07df3-5799-708c-9134-61755cf5da4c", "title": "How Much Does Anthropic’s Mythos Change Enterprise Security?", "url": "https://www.intel471.com/blog/how-much-does-anthropics-mythos-change-enterprise-security", "published_at": "2026-05-01T17:04:35+00:00" }, { "id": "01a07df3-5799-708c-9134-61755d8cf241", "title": "Ransomware negotiations: What CISOs should know before negotiating", "url": "https://www.intel471.com/blog/ransomware-negotiations-what-cisos-should-know-before-negotiating", "published_at": "2026-04-20T15:19:18+00:00" }, { "id": "01a07df3-5799-708c-9134-61755e70f046", "title": "TeamPCP Supply Chain Attacks", "url": "https://www.intel471.com/blog/teampcp-supply-chain-attacks", "published_at": "2026-04-01T11:00:00+00:00" }, { "id": "01a07df3-5799-708c-9134-61755f271ce8", "title": "Turning Geopolitical Tension into Actionable Intelligence", "url": "https://www.intel471.com/blog/turning-geopolitical-tension-into-actionable-intelligence", "published_at": "2026-03-31T20:14:51+00:00" }, { "id": "01a07df3-5799-708c-9134-61755f9c7190", "title": "CVE-2025-68613: Zerobot botnet exploits critical vulnerability impacting n8n AI orchestration platform", "url": "https://www.intel471.com/blog/cve-2025-68613-zerobot-botnet-exploits-critical-vulnerability-impacting-n8n-ai-orchestration-platform", "published_at": "2026-03-24T16:07:06+00:00" }, { "id": "01a07df3-5799-708c-9134-61755fc71fa3", "title": "Introducing Cyber Threat Exposure Bundle: A Unified Approach to External Risk", "url": "https://www.intel471.com/blog/introducing-cyber-threat-exposure-bundle-a-unified-approach-to-external-risk", "published_at": "2026-03-17T19:30:00+00:00" }, { "id": "01a07df3-5799-708c-9134-617560437917", "title": "CVE-2026-20127: Critical Cisco SD-WAN vulnerability exploited in wild", "url": "https://www.intel471.com/blog/cve-2026-20127-critical-cisco-sd-wan-vulnerability-exploited-in-wild", "published_at": "2026-03-13T16:44:35+00:00" }, { "id": "01a07df3-5799-708c-9134-6175609be713", "title": "Handala Threat Group", "url": "https://www.intel471.com/blog/handala-threat-group", "published_at": "2026-03-13T11:00:00+00:00" }, { "id": "01a07df3-5799-708c-9134-6175610fc5f8", "title": "OpenClaw: A viral AI assistant and a magnet for infostealer malware and ClickFix trickery", "url": "https://www.intel471.com/blog/openclaw-a-viral-ai-assistant-and-a-magnet-for-infostealer-malware-and-clickfix-trickery", "published_at": "2026-03-12T21:30:00+00:00" }, { "id": "01a07df3-5799-708c-9134-617561de9436", "title": "Israeli, US strikes against Iran triggers a surge in hacktivist activity", "url": "https://www.intel471.com/blog/israeli-us-strikes-against-iran-triggers-a-surge-in-hacktivist-activity", "published_at": "2026-03-09T15:04:04+00:00" }, { "id": "01a07df3-5799-708c-9134-61756246abe5", "title": "CVE-2026-1731: Finding a critical RCE in an age of AI-driven vulnerability research", "url": "https://www.intel471.com/blog/cve-2026-1731-finding-a-critical-rce-in-an-age-of-ai-driven-vulnerability-research", "published_at": "2026-03-05T20:00:47+00:00" }, { "id": "01a07df3-5799-708c-9134-6175628088b6", "title": "Born to bypass MFA: Taking down Tycoon 2FA", "url": "https://www.intel471.com/blog/born-to-bypass-mfa-taking-down-tycoon-2fa", "published_at": "2026-03-04T18:15:00+00:00" }, { "id": "01a07df3-5799-708c-9134-617562973262", "title": "The UK Cyber Security Resilience Bill", "url": "https://www.intel471.com/blog/the-uk-cyber-security-resilience-bill", "published_at": "2026-02-24T16:39:45+00:00" }, { "id": "01a07df3-5799-708c-9134-6175629feb01", "title": "How AI and the human advantage beat tomorrow’s threats", "url": "https://www.intel471.com/blog/how-ai-and-the-human-advantage-beat-tomorrows-threats", "published_at": "2026-02-20T16:13:02+00:00" }, { "id": "01a07df3-5799-708c-9134-617562e2ef1f", "title": "Winter Olympics 2026: Hacktivism Surges Ahead of Protests and Suspected Sabotage", "url": "https://www.intel471.com/blog/winter-olympics-2026-hacktivism-surges-ahead-of-protests-and-suspected-sabotage", "published_at": "2026-02-11T18:23:02+00:00" }, { "id": "01a07df3-5799-708c-9134-6175635d8a3a", "title": "How Threat Hunting and “Good” Metrics Help The Business", "url": "https://www.intel471.com/blog/how-threat-hunting-and-good-metrics-help-the-business", "published_at": "2026-02-10T16:29:54+00:00" }, { "id": "01a07df3-5799-708c-9134-617563fe8e82", "title": "Likely fake ransomware operator 0APT causes panic — Our analysis", "url": "https://www.intel471.com/blog/likely-fake-ransomware-operator-0apt-causes-panic-our-analysis", "published_at": "2026-02-06T22:00:14+00:00" }, { "id": "01a07df3-5799-708c-9134-617564838cd7", "title": "Hunting APTs: from state policy to TTPs", "url": "https://www.intel471.com/blog/hunting-apts-from-state-policy-to-ttps", "published_at": "2026-01-29T19:18:59+00:00" }, { "id": "01a07df3-5799-708c-9134-6175653d43e2", "title": "CrazyHunter Ransomware", "url": "https://www.intel471.com/blog/crazyhunter-ransomware", "published_at": "2026-01-27T18:30:00+00:00" }, { "id": "01a07df3-5799-708c-9134-617565c2f4a3", "title": "DevMan Ransomware", "url": "https://www.intel471.com/blog/devman-ransomware", "published_at": "2026-01-21T18:30:00+00:00" }, { "id": "01a07df3-5799-708c-9134-617566965fb2", "title": "Introducing HUNTER Tuning: a New Tool for Driving Behavioral Threat Hunt Detections", "url": "https://www.intel471.com/blog/introducing-hunter-tuning-a-new-tool-for-driving-behavioral-threat-hunt-detections", "published_at": "2026-01-07T16:41:27+00:00" }, { "id": "01a07df3-5799-708c-9134-617567344279", "title": "Battling check fraud in the U.S.", "url": "https://www.intel471.com/blog/battling-check-fraud-in-the-us", "published_at": "2025-12-16T20:58:38+00:00" }, { "id": "01a07df3-5799-708c-9134-617567a17195", "title": "Gootloader Malware Update", "url": "https://www.intel471.com/blog/gootloader-malware-update", "published_at": "2025-12-11T18:30:00+00:00" }, { "id": "01a07df3-5799-708c-9134-61756896f4c2", "title": "Shai-Hulud Worm 2.0", "url": "https://www.intel471.com/blog/shai-hulud-worm-20", "published_at": "2025-12-10T18:30:00+00:00" }, { "id": "01a07df3-5799-708c-9134-6175690530eb", "title": "New FvncBot Android banking trojan targets Poland", "url": "https://www.intel471.com/blog/new-fvncbot-android-banking-trojan-targets-poland", "published_at": "2025-12-04T21:55:56+00:00" }, { "id": "01a07df3-5799-708c-9134-617569917138", "title": "White Paper Preview: Black \"Fraud Day” and Beyond — The Key Cyber Threats Facing the Retail Sector this Holiday Season", "url": "https://www.intel471.com/blog/white-paper-preview-black-fraud-day-and-beyond", "published_at": "2025-11-25T03:00:00+00:00" }, { "id": "01a07df3-5799-708c-9134-61756a7862e7", "title": "Threat hunting case study: Detecting IAB activity", "url": "https://www.intel471.com/blog/threat-hunting-case-study-detecting-iab-activity", "published_at": "2025-11-20T18:25:39+00:00" }, { "id": "01a07df3-5799-708c-9134-61756b6fd705", "title": "Using deception to extract cyber threat intelligence", "url": "https://www.intel471.com/blog/using-deception-to-extract-cyber-threat-intelligence", "published_at": "2025-11-20T18:07:02+00:00" }, { "id": "01a07df3-5799-708c-9134-61756bf3ca33", "title": "Lynx Ransomware", "url": "https://www.intel471.com/blog/lynx-ransomware", "published_at": "2025-11-19T15:43:48+00:00" }, { "id": "01a07df3-5799-708c-9134-61756cbe006a", "title": "Qilin Ransomware Group", "url": "https://www.intel471.com/blog/qilin-ransomware-group", "published_at": "2025-11-12T17:45:00+00:00" }, { "id": "01a07df3-5799-708c-9134-61756d87df2c", "title": "ClickFix: Tricking users into installing infostealers", "url": "https://www.intel471.com/blog/clickfix-tricking-users-into-installing-infostealers", "published_at": "2025-11-11T23:22:24+00:00" }, { "id": "01a07df3-5799-708c-9134-61756e3295af", "title": "Cybercrime Takedowns: Trust, Partnerships and Focus", "url": "https://www.intel471.com/blog/cybercrime-takedowns-trust-partnerships-and-focus", "published_at": "2025-11-11T17:30:00+00:00" }, { "id": "01a07df3-5799-708c-9134-61756f2c7ac5", "title": "How card fraud is powered by underground card checkers", "url": "https://www.intel471.com/blog/how-card-fraud-is-powered-by-underground-card-checkers", "published_at": "2025-11-05T01:51:35+00:00" }, { "id": "01a07df3-5799-708c-9134-61756f98f373", "title": "Tracking down The Com", "url": "https://www.intel471.com/blog/tracking-down-the-com", "published_at": "2025-10-30T17:07:11+00:00" }, { "id": "01a07df3-5799-708c-9134-6175705613fe", "title": "Turning Chaos into Clarity: The Next Phase of Intel 471’s Geopolitical Intelligence Solution", "url": "https://www.intel471.com/blog/turning-chaos-into-clarity-the-next-phase-of-intel-471s-geopolitical-intelligence-solution", "published_at": "2025-10-26T20:30:53+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051beb5e516", "title": "The FBI’s Group 78: Covertly fighting ransomware?", "url": "https://www.intel471.com/blog/the-fbis-group-78-covertly-fighting-ransomware", "published_at": "2025-10-22T22:53:33+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051bf9a5b60", "title": "How threat actors bypass multifactor authentication", "url": "https://www.intel471.com/blog/how-threat-actors-bypass-multifactor-authentication", "published_at": "2025-10-22T20:56:14+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c04fe944", "title": "Crimson Collective", "url": "https://www.intel471.com/blog/crimson-collective", "published_at": "2025-10-16T19:15:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c08cbaf9", "title": "In a digital age, US paper check fraud flourishes", "url": "https://www.intel471.com/blog/in-a-digital-age-us-paper-check-fraud-flourishes", "published_at": "2025-10-14T23:47:52+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c0c3c154", "title": "How you can defend against AI-driven fraud and phishing", "url": "https://www.intel471.com/blog/how-you-can-defend-against-ai-driven-fraud-and-phishing", "published_at": "2025-10-14T17:25:18+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c0da8cce", "title": "Detecting cybercriminal activity on Telegram", "url": "https://www.intel471.com/blog/detecting-cybercriminal-activity-on-telegram", "published_at": "2025-10-02T00:07:32+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c17a381c", "title": "NPM - Shai-Hulud Worm", "url": "https://www.intel471.com/blog/npm-shai-hulud-worm", "published_at": "2025-09-29T18:45:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c2423e56", "title": "Threat hunting case study: ToolShell", "url": "https://www.intel471.com/blog/threat-hunting-case-study-toolshell", "published_at": "2025-09-23T00:21:40+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c329fa5a", "title": "AMOS Stealer", "url": "https://www.intel471.com/blog/amos-stealer", "published_at": "2025-09-09T18:30:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c369bcc1", "title": "How AI can (and can’t) help in threat hunting", "url": "https://www.intel471.com/blog/how-ai-can-and-cant-help-in-threat-hunting", "published_at": "2025-09-09T12:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c44038bc", "title": "The Phrack leak: Examining an APT’s workstation", "url": "https://www.intel471.com/blog/the-phrack-leak-examining-an-apts-workstation", "published_at": "2025-09-04T23:27:58+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c48212ae", "title": "How initial access offers power intrusions and ransomware", "url": "https://www.intel471.com/blog/how-initial-access-offers-power-intrusions-and-ransomware", "published_at": "2025-09-02T23:19:18+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c4a513b9", "title": "Drawing value from cyber threat intelligence", "url": "https://www.intel471.com/blog/drawing-value-from-cyber-threat-intelligence", "published_at": "2025-08-27T23:08:18+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c4b685d7", "title": "“Pig-Butchering” Scams: The Dark Side of Social Engineering and Why Terminology Matters", "url": "https://www.intel471.com/blog/pig-butchering-scams-the-dark-side-of-social-engineering-and-why-terminology-matters", "published_at": "2025-08-26T17:46:53+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c51103e4", "title": "After disruption, XSS cybercrime forum faces loss of trust", "url": "https://www.intel471.com/blog/after-disruption-xss-cybercrime-forum-faces-loss-of-trust", "published_at": "2025-08-21T23:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c5546b8f", "title": "Update: Salt Typhoon", "url": "https://www.intel471.com/blog/update-salt-typhoon", "published_at": "2025-08-07T21:15:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c61e3a8e", "title": "Bridging the CTI Gap: New Exposure Modules on Verity471 Deliver Market-Disrupting Views of Threats", "url": "https://www.intel471.com/blog/bridging-the-cti-gap-new-exposure-modules-on-verity471-deliver-market-disrupting-views-of-threats", "published_at": "2025-07-30T22:40:21+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c6f8eee3", "title": "Introducing Verity471: Cyber Threat Intelligence Ready to Operationalize", "url": "https://www.intel471.com/blog/introducing-verity471-cyber-threat-intelligence-ready-to-operationalize", "published_at": "2025-07-30T22:15:09+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c7f5e1d5", "title": "FileFix Social Engineering Technique", "url": "https://www.intel471.com/blog/filefix-social-engineering-technique", "published_at": "2025-07-28T21:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c851178d", "title": "Guided Threat Hunts Takes Your Behavioral Threat Hunting to the Next Level", "url": "https://www.intel471.com/blog/guided-threat-hunts-takes-your-behavioral-threat-hunting-to-the-next-level", "published_at": "2025-07-24T12:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c85a373f", "title": "Defending against doxing", "url": "https://www.intel471.com/blog/defending-against-doxing", "published_at": "2025-07-22T12:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c9560af2", "title": "CVE-2025-53770 - Microsoft Sharepoint Mass Exploitation (ToolShell)", "url": "https://www.intel471.com/blog/cve-2025-53770-microsoft-sharepoint-mass-exploitation-toolshell", "published_at": "2025-07-21T19:45:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c9567eb5", "title": "Threat hunting case study: Lumma infostealer", "url": "https://www.intel471.com/blog/threat-hunting-case-study-lumma-infostealer", "published_at": "2025-07-17T12:30:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051c9a707f9", "title": "Pro-Russian hacktivism: Shifting alliances, new groups and risks", "url": "https://www.intel471.com/blog/pro-russian-hacktivism-shifting-alliances-new-groups-and-risks", "published_at": "2025-07-02T17:30:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051ca737df7", "title": "mommy Access Broker", "url": "https://www.intel471.com/blog/mommy-access-broker", "published_at": "2025-06-27T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051cac67f35", "title": "NATO summit commences in tandem with tense cyber, kinetic conflict", "url": "https://www.intel471.com/blog/nato-summit-commences-in-tandem-with-tense-cyber-kinetic-conflict", "published_at": "2025-06-24T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051cb06ac84", "title": "A look at ‘Tinker,’ Black Basta’s phishing fixer, negotiator", "url": "https://www.intel471.com/blog/a-look-at-tinker-black-bastas-phishing-fixer-negotiator", "published_at": "2025-06-18T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051cbe390e2", "title": "Threat hunting case study: DragonForce", "url": "https://www.intel471.com/blog/threat-hunting-case-study-dragonforce", "published_at": "2025-06-10T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051ccc9747e", "title": "Two critical challenges facing CTI teams and how to overcome them: Intel 471’s additional insights into the SANS 2025 CTI Survey", "url": "https://www.intel471.com/blog/two-critical-challenges-facing-cti-teams-and-how-to-overcome-them-intel-471s-additional-insights-into-the-sans-2025-cti-survey", "published_at": "2025-06-09T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051cd7ad39a", "title": "Android malware trends: Stealthier, easier-to-use", "url": "https://www.intel471.com/blog/android-malware-trends-stealthier-easier-to-use", "published_at": "2025-06-04T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051cdb95319", "title": "Fingerprinting threat actors by their anonymity techniques", "url": "https://www.intel471.com/blog/fingerprinting-threat-actors-by-their-anonymity-techniques", "published_at": "2025-05-28T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051ce70e770", "title": "DanaBot malware disrupted, threat actors named", "url": "https://www.intel471.com/blog/danabot-malware-disrupted-threat-actors-named", "published_at": "2025-05-22T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051cebda3b9", "title": "Intel 471 brings HUNTER behavioral threat hunts to Google Security Operations", "url": "https://www.intel471.com/blog/intel-471-brings-hunter-behavioral-threat-hunts-to-google-security-operations", "published_at": "2025-05-21T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051cf20cf46", "title": "SANS 2025 CTI Survey: It’s Business Time for Cyber Risk", "url": "https://www.intel471.com/blog/sans-2025-cti-survey-its-business-time-for-cyber-risk", "published_at": "2025-05-21T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051cf416348", "title": "How an alleged Russian hacker slipped away", "url": "https://www.intel471.com/blog/how-an-alleged-russian-hacker-slipped-away", "published_at": "2025-05-15T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d03040d1", "title": "Threat hunting case study: Medusa ransomware", "url": "https://www.intel471.com/blog/threat-hunting-case-study-medusa-ransomware", "published_at": "2025-05-14T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d0404dbc", "title": "CVE-2025-31324 - SAP NetWeaver Vulnerability", "url": "https://www.intel471.com/blog/cve-2025-31324-sap-netweaver-vulnerability", "published_at": "2025-05-12T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d11cdffc", "title": "DragonForce Ransomware", "url": "https://www.intel471.com/blog/dragonforce-ransomware", "published_at": "2025-05-12T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d1cee78d", "title": "Managing a cyber crisis", "url": "https://www.intel471.com/blog/managing-a-cyber-crisis", "published_at": "2025-05-05T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d266e5d7", "title": "LabHost: A defunct but potent phishing service", "url": "https://www.intel471.com/blog/labhost-a-defunct-but-potent-phishing-kit", "published_at": "2025-04-16T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d3407d21", "title": "Understanding and threat hunting for RMM software misuse", "url": "https://www.intel471.com/blog/understanding-and-threat-hunting-for-rmm-software-misuse", "published_at": "2025-04-15T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d37ab945", "title": "Threat-hunting case study: Windows Management Instrumentation abuse", "url": "https://www.intel471.com/blog/threat-hunting-case-study-windows-management-instrumentation-abuse", "published_at": "2025-04-09T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d45660a0", "title": "VanHelsing Ransomware", "url": "https://www.intel471.com/blog/vanhelsing-ransomware", "published_at": "2025-04-02T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d4dd2351", "title": "An in-depth look at Black Basta's TTPs", "url": "https://www.intel471.com/blog/an-in-depth-look-at-black-bastas-ttps", "published_at": "2025-04-02T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d4e5b645", "title": "Six Key Takeaways From the SANS 2025 Threat Hunting Survey", "url": "https://www.intel471.com/blog/six-key-takeaways-from-the-sans-2025-threat-hunting-survey", "published_at": "2025-03-26T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d599907a", "title": "Update: Medusa Ransomware", "url": "https://www.intel471.com/blog/update-medusa-ransomware", "published_at": "2025-03-26T17:00:00+00:00" }, { "id": "01a07df3-579a-71d1-bdfb-c051d635748b", "title": "Writing high-quality IDS detection rules", "url": "https://www.intel471.com/blog/writing-high-quality-ids-detection-rules", "published_at": "2025-03-26T17:00:00+00:00" } ] posts Claim your blog

Back to Intel 471

Blog · corpus.blog/blogs/intel471.com/posts

Intel 471

intel471.com

2026

2026 SANS Threat Hunting Survey: Adversaries Prizing Stealth over Speed? Defenders Cooling on AI?original ↗

24 Sept 2026

Follow the Money: The Financial Sector's Threat Landscape in 2026 original ↗

10 Sept 2026

Chinese-speaking threat actors targeting Mexican Android users with remote access Trojan original ↗

1 Sept 2026

A New Era of Bulletproof Hosting Providers Emerge original ↗

19 Aug 2026

Threat Hunting Case Study: The Gentlemen original ↗

11 Aug 2026

Introducing MCP471 and Agent471: Bringing Intelligence Into the AI Workflows Analysts Use original ↗

4 Aug 2026

Software Supply Chain Attacks: Weaponizing Trusted Developer Workflows original ↗

28 Jul 2026

AI Threat Detection Is Not Enough Without Adversary Intelligence original ↗

22 Jul 2026

Scattered Spider duo sentenced to prison over TfL hack original ↗

17 Jul 2026

Operation Fake KickOff: Attackers Abuse Recruiters and SaaS to Harvest Work Credentials original ↗

15 Jul 2026

Emerging Threat: QuimaRAT original ↗

15 Jul 2026

Threat Hunting Case Study: Scattered Spider original ↗

14 Jul 2026

ShinyHunters’ 0-day attacks: After patching, find out if you were breached original ↗

23 Jun 2026

Making the Business Case for Your CTI Budget original ↗

10 Jun 2026

Threat Hunting Case Study: FileFix original ↗

3 Jun 2026

Gentlemen Ransomware original ↗

29 May 2026

What CISOs want from Cyber Threat Intelligence original ↗

27 May 2026

Turn Intelligence into Action Instantly with Retroactive Threat Detection on Verity471 original ↗

5 May 2026

How Much Does Anthropic’s Mythos Change Enterprise Security?original ↗

1 May 2026

Ransomware negotiations: What CISOs should know before negotiating original ↗

20 Apr 2026

TeamPCP Supply Chain Attacks original ↗

1 Apr 2026

Turning Geopolitical Tension into Actionable Intelligence original ↗

31 Mar 2026

CVE-2025-68613: Zerobot botnet exploits critical vulnerability impacting n8n AI orchestration platform original ↗

24 Mar 2026

Introducing Cyber Threat Exposure Bundle: A Unified Approach to External Risk original ↗

17 Mar 2026

CVE-2026-20127: Critical Cisco SD-WAN vulnerability exploited in wild original ↗

13 Mar 2026

Handala Threat Group original ↗

13 Mar 2026

OpenClaw: A viral AI assistant and a magnet for infostealer malware and ClickFix trickery original ↗

12 Mar 2026

Israeli, US strikes against Iran triggers a surge in hacktivist activity original ↗

9 Mar 2026

CVE-2026-1731: Finding a critical RCE in an age of AI-driven vulnerability research original ↗

5 Mar 2026

Born to bypass MFA: Taking down Tycoon 2FA original ↗

4 Mar 2026

The UK Cyber Security Resilience Bill original ↗

24 Feb 2026

How AI and the human advantage beat tomorrow’s threats original ↗

20 Feb 2026

Winter Olympics 2026: Hacktivism Surges Ahead of Protests and Suspected Sabotage original ↗

11 Feb 2026

How Threat Hunting and “Good” Metrics Help The Business original ↗

10 Feb 2026

Likely fake ransomware operator 0APT causes panic — Our analysis original ↗

6 Feb 2026

Hunting APTs: from state policy to TTPs original ↗

29 Jan 2026

CrazyHunter Ransomware original ↗

27 Jan 2026

DevMan Ransomware original ↗

21 Jan 2026

Introducing HUNTER Tuning: a New Tool for Driving Behavioral Threat Hunt Detections original ↗

7 Jan 2026

2025

Battling check fraud in the U.S.original ↗

16 Dec 2025

Gootloader Malware Update original ↗

11 Dec 2025

Shai-Hulud Worm 2.0 original ↗

10 Dec 2025

New FvncBot Android banking trojan targets Poland original ↗

4 Dec 2025

White Paper Preview: Black "Fraud Day” and Beyond — The Key Cyber Threats Facing the Retail Sector this Holiday Season original ↗

25 Nov 2025

Threat hunting case study: Detecting IAB activity original ↗

20 Nov 2025

Using deception to extract cyber threat intelligence original ↗

20 Nov 2025

Lynx Ransomware original ↗

19 Nov 2025

Qilin Ransomware Group original ↗

12 Nov 2025

ClickFix: Tricking users into installing infostealers original ↗

11 Nov 2025

Cybercrime Takedowns: Trust, Partnerships and Focus original ↗

11 Nov 2025

How card fraud is powered by underground card checkers original ↗

5 Nov 2025

Tracking down The Com original ↗

30 Oct 2025

Turning Chaos into Clarity: The Next Phase of Intel 471’s Geopolitical Intelligence Solution original ↗

26 Oct 2025

The FBI’s Group 78: Covertly fighting ransomware?original ↗

22 Oct 2025

How threat actors bypass multifactor authentication original ↗

22 Oct 2025

Crimson Collective original ↗

16 Oct 2025

In a digital age, US paper check fraud flourishes original ↗

14 Oct 2025

How you can defend against AI-driven fraud and phishing original ↗

14 Oct 2025

Detecting cybercriminal activity on Telegram original ↗

2 Oct 2025

NPM - Shai-Hulud Worm original ↗

29 Sept 2025

Threat hunting case study: ToolShell original ↗

23 Sept 2025

AMOS Stealer original ↗

9 Sept 2025

How AI can (and can’t) help in threat hunting original ↗

9 Sept 2025

The Phrack leak: Examining an APT’s workstation original ↗

4 Sept 2025

How initial access offers power intrusions and ransomware original ↗

2 Sept 2025

Drawing value from cyber threat intelligence original ↗

27 Aug 2025

“Pig-Butchering” Scams: The Dark Side of Social Engineering and Why Terminology Matters original ↗

26 Aug 2025

After disruption, XSS cybercrime forum faces loss of trust original ↗

21 Aug 2025

Update: Salt Typhoon original ↗

7 Aug 2025

Bridging the CTI Gap: New Exposure Modules on Verity471 Deliver Market-Disrupting Views of Threats original ↗

30 Jul 2025

Introducing Verity471: Cyber Threat Intelligence Ready to Operationalize original ↗

30 Jul 2025

FileFix Social Engineering Technique original ↗

28 Jul 2025

Guided Threat Hunts Takes Your Behavioral Threat Hunting to the Next Level original ↗

24 Jul 2025

Defending against doxing original ↗

22 Jul 2025

CVE-2025-53770 - Microsoft Sharepoint Mass Exploitation (ToolShell)original ↗

21 Jul 2025

Threat hunting case study: Lumma infostealer original ↗

17 Jul 2025

Pro-Russian hacktivism: Shifting alliances, new groups and risks original ↗

2 Jul 2025

mommy Access Broker original ↗

27 Jun 2025

NATO summit commences in tandem with tense cyber, kinetic conflict original ↗

24 Jun 2025

A look at ‘Tinker,’ Black Basta’s phishing fixer, negotiator original ↗

18 Jun 2025

Threat hunting case study: DragonForce original ↗

10 Jun 2025

Two critical challenges facing CTI teams and how to overcome them: Intel 471’s additional insights into the SANS 2025 CTI Survey original ↗

9 Jun 2025

Android malware trends: Stealthier, easier-to-use original ↗

4 Jun 2025

Fingerprinting threat actors by their anonymity techniques original ↗

28 May 2025

DanaBot malware disrupted, threat actors named original ↗

22 May 2025

Intel 471 brings HUNTER behavioral threat hunts to Google Security Operations original ↗

21 May 2025

SANS 2025 CTI Survey: It’s Business Time for Cyber Risk original ↗

21 May 2025

How an alleged Russian hacker slipped away original ↗

15 May 2025

Threat hunting case study: Medusa ransomware original ↗

14 May 2025

CVE-2025-31324 - SAP NetWeaver Vulnerability original ↗

12 May 2025

DragonForce Ransomware original ↗

12 May 2025

Managing a cyber crisis original ↗

5 May 2025

LabHost: A defunct but potent phishing service original ↗

16 Apr 2025

Understanding and threat hunting for RMM software misuse original ↗

15 Apr 2025

Threat-hunting case study: Windows Management Instrumentation abuse original ↗

9 Apr 2025

VanHelsing Ransomware original ↗

2 Apr 2025

An in-depth look at Black Basta's TTPs original ↗

2 Apr 2025

Six Key Takeaways From the SANS 2025 Threat Hunting Survey original ↗

26 Mar 2025

Update: Medusa Ransomware original ↗

26 Mar 2025

Writing high-quality IDS detection rules original ↗

26 Mar 2025