Skip to content
Bulwark Black Bulwark Black LLC
Latest
Autonomous AI Agent Espionage Shows Why Post-Compromise Speed MattersSharePoint KEV Listing Turns Collaboration Servers Into Incident-Response PrioritiesJscrambler npm Compromise Shows Build Pipelines Need Runtime ControlsGhost Phishing Shows Why Email Security Must Follow the BrowserPakistani Police Intrusions Show Why Public-Sector Data Systems Are Strategic TargetsBad Epoll Shows Linux Kernel LPEs Belong in the Patch Priority QueueFake Payment SDKs Show Why Dependency Risk Is Credential RiskCritical UniFi Flaws Put Network Control Planes Back in the Patch QueueVidar Stealer Campaign Shows Why File Size and Fake Signatures Still Beat Weak ControlsADFS Signing Keys Show Why Federation Servers Are Tier-Zero Identity InfrastructureUAT-7810 Shows Edge Devices Are Becoming China-Nexus Relay InfrastructureFortiBleed Shows Firewall Credentials Are Ransomware FuelNetNut and Popa Takedown Shows Residential Proxies Are Now Attack InfrastructureVect and TeamPCP Show Supply-Chain Credentials Are Ransomware Fuel

Indicator of Compromise

Hunt[.]io

Domain Seen in 2 reports Watch this →

A domain observed in malicious infrastructure. Block or monitor it in DNS and web proxies. Shown defanged for safe viewing; use Copy live value for the functional form.

Included in the Domains feed (live, machine-readable).

Seen in these reports

General CTI · Jul 29, 2026

Autonomous AI Agent Espionage Shows Why Post-Compromise Speed Matters
Chinese Cyber Threat Intelligence · Feb 5, 2026

DKnife: Cisco Talos Exposes China-Nexus Gateway-Monitoring AitM Framework Active Since 2019

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

a182e35da64e6d71cb55f125c4d4225196523f14 CVE-2021-44515 hxxps://malpedia[.]caad[.]fkie[.]fraunhofer[.]de/details/win[.]shadowpad&quot malpedia[.]caad[.]fkie[.]fraunhofer[.]de
Browse all indicators → Machine-readable feeds → Extract IOCs from text →