Device Code Phishing: Technical Analysis and Proactive Hunting via Netlas

Threat actors abuse Telegram's Bot API as a covert channel for phishing, telemetry and malware delivery; Netlas hunts surface Xeno lures and fake Adobe updates with stable detection anchors.

How RST Cloud hunts C2 infrastructure with Netlas: a seven-step loop from goals and samples to fingerprints (JARM, certificates, HTTP headers), scheduled searches and multi-criteria validation.

Proactive threat hunting for malicious infrastructure: fingerprint C2 via favicon hashes, HTTP headers, TLS fields and JARM, then pivot across Netlas, Shodan and Censys to map attacker ecosystems.

Recap of the TAI Challenge 2025 threat-hunting event with RST Cloud: 150+ registrants, five difficulty levels, 9,000+ submissions, training webinar recordings and the winners list.

Comparison of IoT search engines Netlas and ZoomEye across capabilities, data volume and relevance, and enterprise features—highlighting where each platform fits best in security research.

Technical comparison of Netlas and Censys as IoT search engines: search capabilities, attack surface management tools, data volume and relevance, and enterprise features for security teams.