Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Announcing Hunt 2.8: Sharper IOC Hunter Workflows, Smarter Provider Visibility, and Easier C2 Filtering

hunt.io | blog | #threat-intelligence | #threat-hunting | #c2 | #release-notes | #hunt-io | #ioc-hunter | #attackcapture

Summary

Hunt 2.8 adds negative filters and provider tags to C2 and AttackCapture listings, shareable unified IOC Hunter posts, registrar and creation-date data in bulk enrich, plus phishing accuracy fixes.
Published
Collected

original ↗

Related coverage

blog · hunt.io
Hunt 2.7 Is Here: Faster Searches, Smarter Filters, Deeper Insight
Hunt 2.7 brings expanded Domain Risk & Reputation, IOC Hunter threat-actor visibility on IP and domain pages, multi-value AttackCapture filters, provider tags, and a one-week session timeout.
blog · hunt.io
SilkParasite Infrastructure: SpiceRAT Servers Tied to Energy and Government Targets Across Central Asia
Hunt.io's SpiceRAT detections linked shared infrastructure across malware families from Bitdefender's SilkParasite report to energy, government, and telecom targets in Central Asia.
blog · hunt.io
Introducing Hunt 2.6: IP Risk & Reputation, Smarter IOC Hunting, and Faster Integrations
Hunt 2.6 introduces IP Risk & Reputation with Scanned C2, TOR and malicious-directory signals, SQL downloads via API, a faster OpenCTI integration, and a batch of newly tracked C2 families.
blog · hunt.io
How We Identify Malicious Infrastructure At Hunt.io
Hunt explains how it identifies, tracks and 'burns' malicious C2 servers using TLS certificates, HTTP headers, SSH keys, JARM/JA4x hashes and TCP banners, seen in Gh0st and ShadowPad cases.
blog · hunt.io
Introducing the Hunt.io C2 Feed
Hunt announces its C2 Feed, covering how the team identifies and tracks malicious command-and-control servers and packages this intelligence to help defenders block adversary infrastructure.
blog · hunt.io
Transparency of Attacker Tooling
How open directories aid threat hunting and incident response: exposed C2 executables, configs, bash history and RAT logs can reveal victims; Hunt automates finding and pivoting on them.
back