Threat Hunt Feed (2026-03-28)
Hacker News: Best
- ‘Energy independence feels practical’: Europeans building mini solar farms — Fri, 27 Mar 2026 08:55:43 +0000
- Matched TTPs: Artificial Intelligence (T1588.007), At (T1053.002)
BleepingComputer
- New Infinity Stealer malware grabs macOS data via ClickFix lures — Sat, 28 Mar 2026 10:35:10 -0400
- Matched TTPs: Keychain (T1555.001), Malware (T1588.001), Hardware (T1592.001), Cloud Account (T1136.003), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
The Hacker News
- Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack — Sat, 28 Mar 2026 21:10:00 +0530
- Matched TTPs: Malware (T1588.001), Malicious File (T1204.002), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Masquerading (T1036), Email Account (T1087.003), Server (T1584.004), Trap (T1546.005), Proxy (T1090), PowerShell (T1059.001), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002), Messaging Applications (T1213.005)
- CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation — Sat, 28 Mar 2026 12:37:00 +0530
- Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Trap (T1546.005), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001)
- TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign — Sat, 28 Mar 2026 12:37:00 +0530
- Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Trap (T1546.005), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)