HUDSON ROCKINFOSTEALERS.COM · THREAT RESEARCH Developing investigation Polymarket / Third-party JavaScript Polymarket Breach Alert: Wallet-Draining Code Found in a Third-Party Script A script associat
HR HUDSON ROCK / INFOSTEALERS.COM Threat Intelligence  •  October 28, 2026 Research / Cryptocurrency privacy 38,628 Crypto Orders. 10,139 IPs. What Wagyu’s Alleged Leak Means for Moner
FortiBleed 2.0: 975 New Domains & 40,573 Exposed Secrets – Claim Your Ethical Disclosure | Hudson Rock Hudson Rock Threat Intelligence FortiBleed 2.0 Configuration & Credential Expo
Key Points Introduction Infostealers commonly target browser passwords, session cookies, and cryptocurrency wallets. This malware combines those established capabilities with dedicated collection rout
The 2026 Infostealer Index: A Comprehensive Vendor Ranking The 2026 Infostealer Index An independent, deep-dive analysis of Hudson Rock’s benchmark threat intelligence evaluations. Ranking 34 ve
Partnership Announcement October 14, 2026 · Cybercrime Intelligence Hudson Rock Partners with TRM Labs as a Launch Data Partner for Ardence, the New AI Investigation Platform Bridging the... The
First Physical Robbery Potentially Linked to Revolut Hack First Physical Robbery Potentially Linked to Revolut Data Breach Following the recent Revolut hack we reported on, we are now... The post Firs
In this post, we analyze the evolution of CastleStealer, including the sensitive data it targets, new techniques for bypassing browser protections, remote command capabilities, and an approach to exfi
Infostealers Are Actively Hunting AI Agents and Developer Keys – Warden Infostealer Initial announcement and feature breakdown of Warden Stealer on the Exploit.in dark web forum. A highly... The
SpyCloud’s study found 1,787 of the approximately 10,000 U.S. organizations had it, including one infected device that saved logins for 167 utility metering tenants. The post Another worry for water s
Revolut Hackers Exploited Infostealers for Social Engineering Revolut Hackers Used Infostealers for Elaborate Social Engineering BREAKING: The investigations team at Duel has established contact with
A single malware infection on one senior officer’s computer exposed the active caseload of a Syrian National Army military police unit The post Inside a Syrian Interrogation Room: The Detainee Files a
Bogus “Play Now” sites are exploiting the GTA 6 leak hype to spread malware that steals passwords stored in browsers.
Stripe Data Breach: Analysis of Satanic’s Release Analyzing Stripe Vendors Breach: Confirmed Vendor Exposure and Claims of 20,000 Compromised APIs On August 18th, 2026, a data release occurred..
From CI Pipeline to Ransomware & Breaches: 6 High-Profile Breaches in the LiteLLM/Trivy Attack From CI Pipeline to Ransomware Leak Site: 6 High-Profile Breaches in the LiteLLM Attack... The post
Massive Azure Exfiltration Campaign Exposes Millions of Enterprise Records via Compromised Credentials Massive Azure Exfiltration Campaign Exposes Millions of Enterprise Records via Compromised Creden
Largest AI Supply Chain Breach of 2026: LiteLLM Hack Impacts Thousands of Global Enterprises – Claim Your Ethical Disclosure Largest AI Supply Chain Breach of 2026: LiteLLM Hack... The post Larg
A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while gi
Introducing Cavalier’s New Threat Feeds: Comprehensive Visibility into Attacker Infrastructure We are thrilled to introduce three new Threat Feed modules in Cavalier: C2 Data, ClickFix, and Phaa
A new macOS infostealer tricks victims into revealing their system password and installs a persistent backdoor for future access.
