Intel 471

Explore how threat actors recruit insiders, target specific employee capabilities and turn legitimate workplace access into criminal capabilities and services.

The results of the 2026 SANS Threat Hunting Survey suggest attackers are prioritizing access and operational security, while interest from threat hunters in AI-assisted hunting may be cooling.

The financial sector moves trillions of dollars a day, making it one of the most heavily targeted industries in the world. Intel 471's latest report breaks down the threat landscape facing financial institutions, from ransomware and extortion groups to in

Intel 471 uncovered PanDa, a newly identified Android RAT targeting Spanish-speaking users in Mexico through malicious Meta Ads. The operation leverages AppPanda to scale phishing campaigns and deliver extensive surveillance capabilities.

Bulletproof hosting's old guard is under siege - but new upstarts show disruption reshapes the market, not the demand.

Analyzing The Gentlemen ransomware group's attack chain and how to hunt for their privileged group manipulation technique before they spread through the NETLOGON share folder on Windows domain controllers.

MCP471 and Agent471 help customers bring Intel 471 intelligence closer to the point of action: inside the tools, workflows and analyst environments where security teams already operate.

While operational supply chain compromise remains a risk, attackers are increasingly targeting the development pipelines that build and ship software.

The 2026 emergence of Anthropic's Claude Mythos Preview showed security leaders that AI can now find software vulnerabilities faster than the humans responsible for patching them.

Two Scattered Spider members have been sentenced to five and a half years in prison for the 2024 cyberattack on Transport for London (TfL), a case the UK's National Crime Agency called the country's "biggest ever cyber crime case."