# Threat Intelligence

## The Package That Never Shipped: Following a USPS Smishing Kit Through Censys DNS Data

## Iran-Linked Operators Suspected in ATG Breaches

## The cPanel Situation Is…

## Oluomo: Microsoft OAuth AiTM Phishing Using a Naturalization-Form Lure

## Rhadamanthys and the Limits of Private Sector Operations

## Iranian-Affiliated APT Targeting of Rockwell/Allen-Bradley PLCs

## Hackers Are Attempting to Turn ComfyUI Servers Into a Cryptomining Proxy Botnet

## Cutting Through the Noise: A Technique-Based Approach to Hunting Web-Delivered Malware

## Under CTRL: Dissecting a Previously Undocumented Russian .Net Access Framework

## Exposure Brief: Iranian-Linked Wiper Attack on Global Medtech Firm Stryker

## NetSupport Manager: Tracking Dual-Use Remote Administration Infrastructure

## Hunting Cameras in the Dark: Finding Internet Cameras Before Adversaries Do

## ResidentBat: Belarusian KGB Android Spyware at Internet Scale

## Vshell: A Chinese-Language Alternative to Cobalt Strike

## Odyssey Stealer: Inside a macOS Crypto-Stealing Operation

**Where Internet scanning becomes threat intelligence:** Practitioner-led cyber threat research on adversary infrastructure, malware, exploited vulnerabilities, and the trends shaping real-world security decisions.