{"id":61012,"date":"2026-07-07T17:15:00","date_gmt":"2026-07-07T17:15:00","guid":{"rendered":"https:\/\/www.theregister.com\/a\/5267856"},"modified":"2026-07-07T17:15:00","modified_gmt":"2026-07-07T17:15:00","slug":"cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/","title":{"rendered":"CAI cloud worm gives competitors’ malware the boot, then steals secrets and mines for coin"},"content":{"rendered":"
<\/div>\n
\n

security<\/p>\n

Dog-eat-dog world for credential-stealing attackers<\/p>\n<\/p><\/div>\n

\n

EXCLUSIVE<\/span> There’s no honor among thieves as a new worm steals from other infectious software. It pilfers \u201cmultiple\u201d victims\u2019 credentials and mines for cryptocurrency while killing competitors\u2019 processes, including similar secret-harvesting malware.<\/p>\n

It\u2019s called Cloud AI Infrastructure Attack Framework (CAI), and it\u2019s a centralized botnet that targets cloud-native developer tools like Docker, Kubernetes, Redis, etcd, Kubelet, and Ray for credential theft and cryptomining. <\/p>\n

The scripts \u201care heavily inspired\u201d by the likes of other similar credential-stealing worms<\/a> that have wreaked havoc across cloud environments and supply chains<\/a> this year, \u201cusing code comments like \u2018PCPJack-aligned,\u2019\u201d according to security researcher Michael R.<\/p>\n

\u201cCAI explicitly seeks out and kills TeamPCP and PCPJack processes, to further monopolize on compromised targets,\u201d he posted<\/a> on X. <\/p>\n

TeamPCP<\/a> is the malware-developing crew behind the mini Shai-Hulud<\/a>, Miasma<\/a>, and Canister worms<\/a> that have been poisoning open source registries<\/a> and harvesting cloud access tokens, credentials, API keys, and other sensitive data since the Trivy supply-chain attack<\/a> earlier this year.<\/p>\n

And PCPJack<\/a> is a newer secret-stealing copycat worm that not only nabs credentials, but also deletes TeamPCP artifacts to kick that competitor out of victims\u2019 cloud infrastructure.<\/p>\n

CAI seems to have taken lessons from both.<\/p>\n

\u201cCAI is a constantly evolving framework meant to rival toolkits utilized by TeamPCP and PCPJack,\u201d Hunt.io threat researcher Michael Rippey told The Register<\/span>. <\/p>\n

Hunt.io\u2019s team was the first to spot CAI on June 15, when it observed the first of three open directories via the security shop\u2019s web-scanning engine, AttackCapture, that were linked to the operator. <\/p>\n

\u201cOver three weeks, the operator moved from testing worm code mimicking TTPs used by PCPJack, to full production, deployment and compromise of networks,\u201d Rippey said. \u201cThe codebase shows signs of LLM-assisted development, reflecting a deliberate progression of someone studying what works to build a competitive platform.\u201d<\/p>\n

\n
\n

MORE CONTEXT<\/h2>\n<\/p><\/div>\n<\/div>\n

While the malware isn\u2019t \u201coverly sophisticated,\u201d it is effective, with recent command-and-control logs confirming \u201cactive exploitation attempts, with wallet activity confirming multiple successful compromises,\u201d Rippey said.<\/p>\n

CAI\u2019s framework consists of a \u201cscanning engine [that] feeds targets into automated exploit queues, with centralized C2 control coordinating attacks across cloud infrastructure with an emphasis on Docker, Redis, etcd, Kubelet, and more,\u201d he added. <\/p>\n

\u201cCurrently, compromised hosts receive miners, credential stealers, and a Python backdoor,\u201d Rippey said. \u201cCAI\u2019s emergence alongside TeamPCP and PCPJack indicates a growing number of competing threat actors targeting each other and cloud infrastructure.\u201d<\/p>\n

Defenders and developers alike should take note, as we\u2019ve already seen the damage that these new-ish cloud worms leave in their wake as they burrow across supply chains. Plus, it\u2019s unlikely that this will be the last of the miscreants seeking to monetize companies\u2019 cloud infrastructure and developers\u2019 secrets.\u00ae<\/p>\n<\/p><\/div>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Dog-eat-dog world for credential-stealing attackers READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":61013,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[1047],"class_list":["post-61012","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register","tag-cyber-crime"],"yoast_head":"\nCAI cloud worm gives competitors' malware the boot, then steals secrets and mines for coin 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CAI cloud worm gives competitors' malware the boot, then steals secrets and mines for coin 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-07T17:15:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/image.theregister.com\/5267881.jpg?imageId=5267881&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"CAI cloud worm gives competitors’ malware the boot, then steals secrets and mines for coin\",\"datePublished\":\"2026-07-07T17:15:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/\"},\"wordCount\":480,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin.jpg\",\"keywords\":[\"Cyber Crime\"],\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/\",\"name\":\"CAI cloud worm gives competitors' malware the boot, then steals secrets and mines for coin 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin.jpg\",\"datePublished\":\"2026-07-07T17:15:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin.jpg\",\"width\":100,\"height\":75},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber Crime\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/cyber-crime\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"CAI cloud worm gives competitors’ malware the boot, then steals secrets and mines for coin\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CAI cloud worm gives competitors' malware the boot, then steals secrets and mines for coin 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/","og_locale":"en_US","og_type":"article","og_title":"CAI cloud worm gives competitors' malware the boot, then steals secrets and mines for coin 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2026-07-07T17:15:00+00:00","og_image":[{"url":"https:\/\/image.theregister.com\/5267881.jpg?imageId=5267881&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"CAI cloud worm gives competitors’ malware the boot, then steals secrets and mines for coin","datePublished":"2026-07-07T17:15:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/"},"wordCount":480,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin.jpg","keywords":["Cyber Crime"],"articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/","url":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/","name":"CAI cloud worm gives competitors' malware the boot, then steals secrets and mines for coin 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin.jpg","datePublished":"2026-07-07T17:15:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin.jpg","width":100,"height":75},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/cai-cloud-worm-gives-competitors-malware-the-boot-then-steals-secrets-and-mines-for-coin\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Cyber Crime","item":"https:\/\/www.threatshub.org\/blog\/tag\/cyber-crime\/"},{"@type":"ListItem","position":3,"name":"CAI cloud worm gives competitors’ malware the boot, then steals secrets and mines for coin"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61012","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=61012"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61012\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/61013"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=61012"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=61012"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=61012"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}