Introducing IOC Hunter Feed and Attribution for Enhanced Threat Intelligence

Hunt.io introduces the IOC Hunter Feed and IOC Hunter Attribution in its C2 Feed, which aggregate IOCs from open sources, enrich entries with publication and threat actor metadata, and link active C2 infrastructure to known campaigns. The post explains how to retrieve the feeds, what data fields are included (e.g., IP, ports, malware, attribution, confidence), and demonstrates practical pivots that uncover additional adversary infrastructure (e.g., from XCSSET indicators and active GhostSocks proxies). These capabilities aim to help defenders connect related infrastructure, improve attribution, and prioritize response with fresher, context-rich intelligence.