1.A Practical Guide to Uncovering Malicious Infrastructure With Hunt.ioblog | 2026-04-21 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #osint | #threat-hunting
2.Announcing Hunt 2.5blog | 2025-08-21 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #product-update | #threat-hunting
3.LightSpy Malware Now Targets Facebook & Instagram Datablog | 2025-02-20 00:00 | hunt.io | Original ↗ | .md | #social-media | #surveillance | #spyware
4.Advanced Threat Hunting with New SSL Features: Unlocking HuntSQL™ Anomaly Flags for Deeper Detectionblog | 2025-02-13 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #detection | #ssl
5.Suspected KEYPLUG Infrastructure: TLS Certificates and GhostWolf Linksblog | 2025-01-23 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #apt41 | #tls-certificates
6.Cyberhaven Extension Compromise: TLS Certificates Reveal Hidden Infrastructureblog | 2025-01-09 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #browser-extension | #tls-certificates
7.DarkPeony’s Trail: Certificate Patterns Point to Sustained Campaign Infrastructureblog | 2024-11-21 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #apt | #cyber-espionage
8.Suspected DPRK Phishing Campaign Targets Naver; Separate Apple Domain Spoofing Cluster Identifiedblog | 2024-10-29 00:00 | hunt.io | Original ↗ | .md | #phishing | #apple | #dprk
9.Unmasking Adversary Infrastructure: How Certificates and Redirects Exposed Earth Baxia and PlugX Activityblog | 2024-10-10 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #apt | #redirects
10.Announcing Hunt APIsblog | 2024-09-17 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #malware | #product-update
11.Latrodectus Malware Masquerades as AhnLab Security Software to Infect Victimsblog | 2024-08-29 00:00 | hunt.io | Original ↗ | .md | #malware | #tls-certificates | #c2-infrastructure
12.A Simple Approach to Discovering Oyster Backdoor Infrastructureblog | 2024-07-23 00:00 | hunt.io | Original ↗ | .md | #malware | #threat-hunting | #tls-certificates
13.Geacon and Geacon_Pro: A Constant Menace to Linux and Windows Systemsblog | 2024-06-27 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #cobalt-strike | #tls-certificates
14.Gh0st and Pantegana: Two RATs that Refuse to Fade Awayblog | 2024-06-12 00:00 | hunt.io | Original ↗ | .md | #c2 | #rat | #tls-certificates
15.Tracking LightSpy: Certificates as Windows into Adversary Behaviorblog | 2024-06-06 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #surveillance | #spyware
16.Tales from the Hunt: A Look at Yakit Security Tooltool | 2024-05-28 00:00 | hunt.io | Original ↗ | .md | #china | #red-team-tools | #tls-certificates
17.BlueShell: Four Years On, Still A Formidable Threatblog | 2024-04-09 00:00 | hunt.io | Original ↗ | .md | #backdoor | #golang | #tls-certificates
18.Tracking ShadowPad Infrastructure Via Non-Standard Certificatesblog | 2024-02-09 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #tls-certificates
19.How We Identify Malicious Infrastructure At Hunt.ioblog | 2024-01-24 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #methodology
20.Discovering & Disrupting Malicious Infrastructureblog | 2023-09-12 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #cobalt-strike | #tls-certificates