Adversary Infrastructure

Mythic C2 Activity at Internet Scale

Illustration of two fishing hooks fishing coins from 2 mobile phones

What the ERMAC Source Leak Says About HookBot

DarkSword's Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator Cluster

Abstract representation of a report on an orange background.

Dynamic IP Blocking with Palo Alto Networks Firewalls and Censys

A beige background features a white icon of a document with a semi-circle cutout, accompanied by labeled lines on the left.

Announcing the Threat Hunting MCP Server

A beige background features a white icon of a document with a semi-circle cutout, accompanied by labeled lines on the left.

Announcing the Investigation Manager: A New Way to Hunt for Adversary Infrastructure

A screenshot of the Censys platform displaying 19 network pivots with details like host endpoints, headers, and locations.

Using the Censys API for Advanced Threat Hunting

A stylized eye with concentric rings and dotted patterns in shades of blue, orange, and white on a dark background.

Internet-scale Proactive Threat Hunting and Detection

Close-up of a woman wearing glasses with a digital health monitor reflected in the lenses.

Introducing the New Censys Threat Hunting Module: Proactive Defense for Modern Threats

A dashboard displays a line graph of IP count trends from January to May 2025, with current online compromises at 4,504.

Tracking AyySSHush: a Newly Discovered ASUS Router Botnet Campaign