#onpatrol4malware Blog
Malware Patrol insights, research, and updates
Stay informed with the latest in cyber threat intelligence, malware trends, and industry insights. The Malware Patrol Blog offers expert analysis, practical advice, and updates on tools and tactics to help you strengthen your defenses and stay ahead of evolving threats.
Threat Trends Digest – July 2026
Explore Malware Patrol’s July Threat Trends Digest with real-world telemetry on attacks, malware, phishing, ransomware, C2s, and DGAs.
Threat Trends Digest – June 2026
Explore Malware Patrol’s June Threat Trends Digest with real-world telemetry on attacks, malware, phishing, ransomware, C2s, and DGAs.
FIFA World Cup 2026: Emerging Domain Activity
Leading up to the FIFA World Cup 2026 the Malware Patrol team observed a significant number of domains associated with event-inspired betting operations, fake streaming services and apps, credential theft, and other forms of brand abuse. Learn more in this blog post.
Threat Trends Digest – May 2026
Explore Malware Patrol’s May Threat Trends Digest with real-world telemetry on attacks, malware, phishing, ransomware, C2s, and DGAs.
Threat Trends Digest – April 2026
Explore Malware Patrol’s April Threat Trends Digest with real-world telemetry on attacks, malware, phishing, ransomware, C2s, and DGAs.
Threat Trends Digest – March 2026
Explore Malware Patrol’s February threat trends digest with real-world telemetry on attacks, malware, phishing, ransomware, C2s, and DGAs.
Threat Trends Digest – February 2026
Explore Malware Patrol’s February threat trends digest with real-world telemetry on attacks, malware, phishing, ransomware, C2s, and DGAs.
Threat Trends Digest – January 2026
Explore Malware Patrol’s January threat trends digest with real-world telemetry on attacks, malware, phishing, ransomware, C2s, and DGAs.
Predicting Cyber Fraud Through Real-World Events: Insights from Domain Registration Trends
Malware Patrol partnered with Cisco’s SURGe Team to investigate how cybercriminals exploit NRDs for fraud during major geopolitical events. Find out more about this research in our blog post.
MCP Servers for Cybersecurity
Learn about MCP servers for cybersecurity: how they work and why they’re becoming essential for secure AI integration.
Introducing the Malware Patrol MCP Server
The Malware Patrol cybersecurity MCP server connects AI to real-world threat intel. Explore use cases and how to join the beta.
Emerging Threats Intelligence: A Curated Signal with Predictive Power
Learn how emerging threats intelligence provides early visibility into malicious infrastructure and surfaces high-risk domains early.
Newly Registered Domains: A Raw Signal with Real Value
Learn about the benefits of working with a newly registered domains feed, an invaluable early-stage threat signal.
Tor Exit Nodes: Risks, Monitoring, and Defensive Use
Tor exit nodes frequently appear in cybersecurity discussions, and for good reason. This post explains why they matter so you can decide if your security team should take a closer…
Malicious Domains: A Cybersec Foundation
Malicious domains are a foundational layer of threat intelligence and provide critical visibility into where attackers operate online.
Over 14,000 Ollama Instances Exposed to the Internet
A recent scan conducted by the Malware Patrol team revealed over 14,000 Ollama instances publicly accessible on the Internet, opening…
The Evolution of C2 Communication: Custom TCP Protocols
Discover how C2 servers are evolving with custom TCP protocols and what your team can do to detect and block them.
Tunnel Vision: Looking Out for Malicious Tunneling Use
Tunneling services have emerged as an option that allows attackers to obfuscate their activities and bypass conventional security measures. Learn more in this blog post.
AWS Route 53 DNS Resolver Firewall
This step-by-step guide shows how to integrate Malware Patrol’s Malicious Domains threat intelligence with the AWS Route 53 Resolver DNS Firewall.
Malware Patrol + Palo Alto NGFW
Use this configuration guide for integrating Malware Patrol threat intelligence feeds with your Palo Alto NGFW.
Honeypots: Simple Tools that Supercharge Cybersecurity
Explore the benefits of using honeypots for threat intelligence collection, and Malware Patrol’s CTI feed based on our global honeynet.
Stay up-to-date on the latest threats and cybersecurity news with Malware Patrol’s Security Signals.
Free OSINT Data Feeds
