Reimagining Hunt.io: Built around our infrastructure-first approach to threat intelligence.

Hunt.io's SpiceRAT detections linked shared infrastructure across malware families from Bitdefender's SilkParasite report to energy, government, and telecom targets in Central Asia.

Hunt.io parsed a Redis cryptomining botnet's own exposed logs: 3,562 servers compromised, rogue replication as the only technique that scaled, and 72.6% success against a no-auth target list.

Hunt.io traced five exposed directories to a SecFlow-run campaign that used Claude, Qwen and DeepSeek as workers against government, education and diplomatic targets across Asia.

Hunt.io's 3.0 release adds Cloudflare Buster, visual Netblock browsing, Passive DNS history and Threat Activity Enablers, plus a rebuilt API with 60+ endpoints and a remote MCP server.

Hunt.io's 2025 year in review: platform scale such as 660 trillion port probes and 150 billion certificate grabs, the year's product milestones, hunting guides, and most-read threat research.

Hunt 2.8 adds negative filters and provider tags to C2 and AttackCapture listings, shareable unified IOC Hunter posts, registrar and creation-date data in bulk enrich, plus phishing accuracy fixes.