# Daily Intelligence Briefing — Monday, February 2, 2026

> On 2026-02-02, Threadlinqs published 47 new threat reports, 9 rated critical and 23 high, spanning 214 MITRE ATT&CK techniques and 12 named threat actors. Coverage that day added 728 new detection rules and 2228 extracted indicators.

- **Edition:** 2026-02-02 (Monday)
- **Canonical:** https://intel.threadlinqs.com/debrief/2026-02-02
- **Last updated:** 2026-02-02
- **New threats:** 47
- **Critical / high:** 9 critical, 23 high, 14 medium, 1 low
- **ATT&CK techniques:** 214
- **Threat actors:** 12
- **Indicators (count only):** 2228
- **New detection rules (count only):** 728

## Summary & highlights

Microsoft NTLM Phase-Out: Detection & Migration Guidance. Global HYIP Investment Scam Campaign - 4,200+ Fake Trading Platforms. Microsoft NTLM Deprecation - Enterprise Migration Planning Required.

- [TL-2026-0005](https://intel.threadlinqs.com/threat/TL-2026-0005) — Malicious Chrome Extensions: Affiliate Hijacking & ChatGPT Token Theft Campaign
- [TL-2026-0006](https://intel.threadlinqs.com/threat/TL-2026-0006) — Automated MongoDB Extortion Campaign Targeting Exposed Instances
- [TL-2026-0007](https://intel.threadlinqs.com/threat/TL-2026-0007) — UAT-8099 (China) BadIIS Malware Campaign Targeting IIS Servers for SEO Fraud
- [TL-2026-0008](https://intel.threadlinqs.com/threat/TL-2026-0008) — OpenClaw CVE-2026-25253: One-Click RCE via Token Exfiltration
- [TL-2026-0010](https://intel.threadlinqs.com/threat/TL-2026-0010) — Microsoft Office Zero-Day CVE-2026-21509: OLE Security Bypass Under Active Exploitation

## Theme of the day

credential-theft, social-engineering, cwe-306, cwe-287, cwe-345

## Threats published

- [TL-2026-0004](https://intel.threadlinqs.com/threat/TL-2026-0004) — CRITICAL — Static Tundra (Dragonfly/Energetic Bear) ICS Attacks on Polish Energy Infrastructure
- [TL-2026-0013](https://intel.threadlinqs.com/threat/TL-2026-0013) — CRITICAL — ShinyHunters SSO Vishing Campaign - Cloud Data Theft via Social Engineering
- [TL-2026-0014](https://intel.threadlinqs.com/threat/TL-2026-0014) — CRITICAL — Static Tundra ICS Attacks on Polish Energy Infrastructure with DynoWiper
- [TL-2026-0016](https://intel.threadlinqs.com/threat/TL-2026-0016) — CRITICAL — SolarWinds Access Rights Manager (ARM) Systemic Deserialization RCE — 17 CVEs, 6 Unauth SYSTEM RCE, Access Control Paradox
- [TL-2026-0028](https://intel.threadlinqs.com/threat/TL-2026-0028) — CRITICAL — GuptiMiner — North Korean (Kimsuky/APT43) Supply Chain Attack Hijacking eScan Antivirus HTTP Updates via AitM
- [TL-2026-0037](https://intel.threadlinqs.com/threat/TL-2026-0037) — CRITICAL — Static Tundra Attacks on Polish Energy Infrastructure - 30+ Wind and Solar Farms
- [TL-2026-0038](https://intel.threadlinqs.com/threat/TL-2026-0038) — CRITICAL — eScan Antivirus Supply Chain Attack - Update Server Compromise
- [TL-2026-0041](https://intel.threadlinqs.com/threat/TL-2026-0041) — CRITICAL — CVE-2026-21509: Russian Hackers Exploit Microsoft Office Vulnerability Against Ukraine
- [TL-2026-0044](https://intel.threadlinqs.com/threat/TL-2026-0044) — CRITICAL — CVE-2026-25253: OpenClaw One-Click RCE via Malicious Link
- [TL-2026-0005](https://intel.threadlinqs.com/threat/TL-2026-0005) — HIGH — Malicious Chrome Extensions: Affiliate Hijacking & ChatGPT Token Theft Campaign
- [TL-2026-0006](https://intel.threadlinqs.com/threat/TL-2026-0006) — HIGH — Automated MongoDB Extortion Campaign Targeting Exposed Instances
- [TL-2026-0007](https://intel.threadlinqs.com/threat/TL-2026-0007) — HIGH — UAT-8099 (China) BadIIS Malware Campaign Targeting IIS Servers for SEO Fraud
- [TL-2026-0008](https://intel.threadlinqs.com/threat/TL-2026-0008) — HIGH — OpenClaw CVE-2026-25253: One-Click RCE via Token Exfiltration
- [TL-2026-0010](https://intel.threadlinqs.com/threat/TL-2026-0010) — HIGH — Microsoft Office Zero-Day CVE-2026-21509: OLE Security Bypass Under Active Exploitation
- [TL-2026-0012](https://intel.threadlinqs.com/threat/TL-2026-0012) — HIGH — LLMJacking: 175,000 Exposed Ollama AI Servers Targeted for Abuse
- [TL-2026-0015](https://intel.threadlinqs.com/threat/TL-2026-0015) — HIGH — Malicious Chrome Extensions: Affiliate Hijacking and ChatGPT Token Theft Campaign
- [TL-2026-0019](https://intel.threadlinqs.com/threat/TL-2026-0019) — HIGH — Malicious OpenClaw/MoltBot Skills - 230+ Supply Chain Packages
- [TL-2026-0021](https://intel.threadlinqs.com/threat/TL-2026-0021) — HIGH — CVE-2026-21509 - Microsoft Office Security Feature Bypass (CISA KEV)
- [TL-2026-0023](https://intel.threadlinqs.com/threat/TL-2026-0023) — HIGH — MongoDB Data Extortion Campaign - 1,400+ Databases Ransacked
- [TL-2026-0024](https://intel.threadlinqs.com/threat/TL-2026-0024) — HIGH — GlassWorm VS Code Extension Supply Chain Attack - Open VSX Hijack
- [TL-2026-0025](https://intel.threadlinqs.com/threat/TL-2026-0025) — HIGH — Hugging Face Abused for Android Malware Distribution - Credential Stealer Campaign
- [TL-2026-0030](https://intel.threadlinqs.com/threat/TL-2026-0030) — HIGH — ShinyHunters Extortion Campaign - Evolved Vishing and SSO Credential Theft
- [TL-2026-0034](https://intel.threadlinqs.com/threat/TL-2026-0034) — HIGH — GlassWorm macOS Attack via Compromised OpenVSX Extensions
- [TL-2026-0035](https://intel.threadlinqs.com/threat/TL-2026-0035) — HIGH — SLSH Extortion Group - Swatting and Executive Harassment Tactics
- [TL-2026-0039](https://intel.threadlinqs.com/threat/TL-2026-0039) — HIGH — MongoDB Database Extortion Campaign - 1,400+ Instances Ransacked
- [TL-2026-0040](https://intel.threadlinqs.com/threat/TL-2026-0040) — HIGH — Microsoft NTLM Deprecation - Three-Stage Phase-Out Plan
- [TL-2026-0042](https://intel.threadlinqs.com/threat/TL-2026-0042) — HIGH — IPIDEA Residential Proxy Botnet Disruption by Google
- [TL-2026-0043](https://intel.threadlinqs.com/threat/TL-2026-0043) — HIGH — Malicious OpenClaw/MoltBot Skills - 230+ Password-Stealing Packages
- [TL-2026-0045](https://intel.threadlinqs.com/threat/TL-2026-0045) — HIGH — ShinyHunters-Branded Extortion Campaign Expands with Vishing & SSO Attacks
- [TL-2026-0047](https://intel.threadlinqs.com/threat/TL-2026-0047) — HIGH — 175,000 Exposed Ollama LLM Hosts Enable AI Model Abuse
- [TL-2026-0050](https://intel.threadlinqs.com/threat/TL-2026-0050) — HIGH — Cyber Insights 2026: AI-Powered Malware and Attack Evolution
- [TL-2026-0097](https://intel.threadlinqs.com/threat/TL-2026-0097) — HIGH — BaBlock/Rorschach Ransomware Hits Sapienza University of Rome — Femwar02 Affiliate First Appearance, Fastest Encryption (4m30s), DLL Sideloading via Cortex XDR, Direct Syscalls EDR Evasion, Autonomous AD GPO Propagation, 122K Students Affected, Millions-Euro Ransom
- [TL-2026-0009](https://intel.threadlinqs.com/threat/TL-2026-0009) — MEDIUM — Microsoft NTLM Phase-Out: Detection & Migration Guidance
- [TL-2026-0017](https://intel.threadlinqs.com/threat/TL-2026-0017) — MEDIUM — Global HYIP Investment Scam Campaign - 4,200+ Fake Trading Platforms
- [TL-2026-0018](https://intel.threadlinqs.com/threat/TL-2026-0018) — MEDIUM — Microsoft NTLM Deprecation - Enterprise Migration Planning Required
- [TL-2026-0020](https://intel.threadlinqs.com/threat/TL-2026-0020) — MEDIUM — 175,000 Exposed Ollama Hosts Enabling LLM Abuse
- [TL-2026-0026](https://intel.threadlinqs.com/threat/TL-2026-0026) — MEDIUM — Cloud Storage Payment Scam Campaign - Fake Renewal Phishing
- [TL-2026-0027](https://intel.threadlinqs.com/threat/TL-2026-0027) — MEDIUM — Record $158 Billion Illicit Cryptocurrency Flows in 2025
- [TL-2026-0029](https://intel.threadlinqs.com/threat/TL-2026-0029) — MEDIUM — NationStates Gaming Platform Data Breach
- [TL-2026-0031](https://intel.threadlinqs.com/threat/TL-2026-0031) — MEDIUM — Panera Bread Data Breach - 5.1 Million Accounts Exposed
- [TL-2026-0032](https://intel.threadlinqs.com/threat/TL-2026-0032) — MEDIUM — White House Revokes Biden-Era Software Security Memorandums
- [TL-2026-0033](https://intel.threadlinqs.com/threat/TL-2026-0033) — MEDIUM — Google Slides Presentation Abuse for Phishing and Malware Delivery
- [TL-2026-0036](https://intel.threadlinqs.com/threat/TL-2026-0036) — MEDIUM — Anthropic API Scanning Campaign - Targeting Self-Hosted LLM Infrastructure
- [TL-2026-0046](https://intel.threadlinqs.com/threat/TL-2026-0046) — MEDIUM — Global Surge in HYIP (High-Yield Investment Platform) Scams
- [TL-2026-0048](https://intel.threadlinqs.com/threat/TL-2026-0048) — MEDIUM — White House Revokes Biden-Era Software Security Memorandums
- [TL-2026-0051](https://intel.threadlinqs.com/threat/TL-2026-0051) — MEDIUM — Active Scanning for Exposed Anthropic API Endpoints
- [TL-2026-0049](https://intel.threadlinqs.com/threat/TL-2026-0049) — LOW — Japan-Britain Cybersecurity Cooperation Agreement Amid China Concerns

## Techniques observed

T0800, T0804, T0809, T0814, T0827, T0828, T0829, [T0831](https://intel.threadlinqs.com/technique/T0831), T0836, T0846, T0851, T0855, T0856, T0861, T0866, T0875, T0879, T0880, T0889, [T1003](https://intel.threadlinqs.com/technique/T1003), [T1003.001](https://intel.threadlinqs.com/technique/T1003.001), [T1003.003](https://intel.threadlinqs.com/technique/T1003.003), [T1005](https://intel.threadlinqs.com/technique/T1005), [T1016](https://intel.threadlinqs.com/technique/T1016), [T1018](https://intel.threadlinqs.com/technique/T1018), [T1020](https://intel.threadlinqs.com/technique/T1020), [T1021](https://intel.threadlinqs.com/technique/T1021), [T1021.002](https://intel.threadlinqs.com/technique/T1021.002), [T1027](https://intel.threadlinqs.com/technique/T1027), [T1027.002](https://intel.threadlinqs.com/technique/T1027.002), [T1033](https://intel.threadlinqs.com/technique/T1033), [T1036](https://intel.threadlinqs.com/technique/T1036), [T1036.003](https://intel.threadlinqs.com/technique/T1036.003), [T1036.005](https://intel.threadlinqs.com/technique/T1036.005), [T1037](https://intel.threadlinqs.com/technique/T1037), [T1039](https://intel.threadlinqs.com/technique/T1039), [T1040](https://intel.threadlinqs.com/technique/T1040), [T1041](https://intel.threadlinqs.com/technique/T1041), [T1046](https://intel.threadlinqs.com/technique/T1046), [T1047](https://intel.threadlinqs.com/technique/T1047), [T1048](https://intel.threadlinqs.com/technique/T1048), [T1049](https://intel.threadlinqs.com/technique/T1049), [T1053](https://intel.threadlinqs.com/technique/T1053), [T1053.005](https://intel.threadlinqs.com/technique/T1053.005), [T1055](https://intel.threadlinqs.com/technique/T1055), [T1056](https://intel.threadlinqs.com/technique/T1056), [T1056.003](https://intel.threadlinqs.com/technique/T1056.003), [T1057](https://intel.threadlinqs.com/technique/T1057), [T1059](https://intel.threadlinqs.com/technique/T1059), [T1059.001](https://intel.threadlinqs.com/technique/T1059.001), [T1059.003](https://intel.threadlinqs.com/technique/T1059.003), [T1068](https://intel.threadlinqs.com/technique/T1068), [T1069](https://intel.threadlinqs.com/technique/T1069), [T1070](https://intel.threadlinqs.com/technique/T1070), T1070.001, [T1071](https://intel.threadlinqs.com/technique/T1071), [T1074](https://intel.threadlinqs.com/technique/T1074), [T1078](https://intel.threadlinqs.com/technique/T1078), [T1078.001](https://intel.threadlinqs.com/technique/T1078.001), [T1078.002](https://intel.threadlinqs.com/technique/T1078.002), [T1078.003](https://intel.threadlinqs.com/technique/T1078.003), [T1078.004](https://intel.threadlinqs.com/technique/T1078.004), [T1082](https://intel.threadlinqs.com/technique/T1082), [T1083](https://intel.threadlinqs.com/technique/T1083), [T1087](https://intel.threadlinqs.com/technique/T1087), [T1090](https://intel.threadlinqs.com/technique/T1090), [T1090.002](https://intel.threadlinqs.com/technique/T1090.002), [T1090.003](https://intel.threadlinqs.com/technique/T1090.003), [T1095](https://intel.threadlinqs.com/technique/T1095), [T1098](https://intel.threadlinqs.com/technique/T1098), [T1098.001](https://intel.threadlinqs.com/technique/T1098.001), [T1102](https://intel.threadlinqs.com/technique/T1102), [T1105](https://intel.threadlinqs.com/technique/T1105), [T1106](https://intel.threadlinqs.com/technique/T1106), [T1110](https://intel.threadlinqs.com/technique/T1110), [T1110.001](https://intel.threadlinqs.com/technique/T1110.001), [T1110.003](https://intel.threadlinqs.com/technique/T1110.003), [T1111](https://intel.threadlinqs.com/technique/T1111), [T1112](https://intel.threadlinqs.com/technique/T1112), [T1113](https://intel.threadlinqs.com/technique/T1113), [T1114](https://intel.threadlinqs.com/technique/T1114), [T1115](https://intel.threadlinqs.com/technique/T1115), [T1119](https://intel.threadlinqs.com/technique/T1119), [T1120](https://intel.threadlinqs.com/technique/T1120), [T1129](https://intel.threadlinqs.com/technique/T1129), [T1132](https://intel.threadlinqs.com/technique/T1132), [T1133](https://intel.threadlinqs.com/technique/T1133), [T1134](https://intel.threadlinqs.com/technique/T1134), [T1135](https://intel.threadlinqs.com/technique/T1135), [T1136](https://intel.threadlinqs.com/technique/T1136), [T1137](https://intel.threadlinqs.com/technique/T1137), [T1140](https://intel.threadlinqs.com/technique/T1140), [T1176](https://intel.threadlinqs.com/technique/T1176), [T1185](https://intel.threadlinqs.com/technique/T1185), [T1187](https://intel.threadlinqs.com/technique/T1187), [T1189](https://intel.threadlinqs.com/technique/T1189), [T1190](https://intel.threadlinqs.com/technique/T1190), [T1195](https://intel.threadlinqs.com/technique/T1195), [T1195.002](https://intel.threadlinqs.com/technique/T1195.002), [T1199](https://intel.threadlinqs.com/technique/T1199), [T1203](https://intel.threadlinqs.com/technique/T1203), [T1204](https://intel.threadlinqs.com/technique/T1204), [T1204.001](https://intel.threadlinqs.com/technique/T1204.001), [T1204.002](https://intel.threadlinqs.com/technique/T1204.002), [T1205](https://intel.threadlinqs.com/technique/T1205), [T1210](https://intel.threadlinqs.com/technique/T1210), [T1211](https://intel.threadlinqs.com/technique/T1211), [T1212](https://intel.threadlinqs.com/technique/T1212), [T1213](https://intel.threadlinqs.com/technique/T1213), [T1213.002](https://intel.threadlinqs.com/technique/T1213.002), [T1218](https://intel.threadlinqs.com/technique/T1218), [T1219](https://intel.threadlinqs.com/technique/T1219), T1221, [T1222](https://intel.threadlinqs.com/technique/T1222), [T1482](https://intel.threadlinqs.com/technique/T1482), [T1484](https://intel.threadlinqs.com/technique/T1484), [T1484.001](https://intel.threadlinqs.com/technique/T1484.001), [T1485](https://intel.threadlinqs.com/technique/T1485), [T1486](https://intel.threadlinqs.com/technique/T1486), [T1489](https://intel.threadlinqs.com/technique/T1489), [T1490](https://intel.threadlinqs.com/technique/T1490), [T1491](https://intel.threadlinqs.com/technique/T1491), [T1495](https://intel.threadlinqs.com/technique/T1495), [T1496](https://intel.threadlinqs.com/technique/T1496), [T1497](https://intel.threadlinqs.com/technique/T1497), [T1498](https://intel.threadlinqs.com/technique/T1498), [T1499](https://intel.threadlinqs.com/technique/T1499), [T1505](https://intel.threadlinqs.com/technique/T1505), [T1518](https://intel.threadlinqs.com/technique/T1518), [T1525](https://intel.threadlinqs.com/technique/T1525), [T1526](https://intel.threadlinqs.com/technique/T1526), [T1528](https://intel.threadlinqs.com/technique/T1528), [T1529](https://intel.threadlinqs.com/technique/T1529), [T1530](https://intel.threadlinqs.com/technique/T1530), [T1531](https://intel.threadlinqs.com/technique/T1531), [T1534](https://intel.threadlinqs.com/technique/T1534), T1535, [T1537](https://intel.threadlinqs.com/technique/T1537), [T1538](https://intel.threadlinqs.com/technique/T1538), [T1539](https://intel.threadlinqs.com/technique/T1539), [T1543](https://intel.threadlinqs.com/technique/T1543), [T1546](https://intel.threadlinqs.com/technique/T1546), [T1547](https://intel.threadlinqs.com/technique/T1547), [T1548](https://intel.threadlinqs.com/technique/T1548), [T1550](https://intel.threadlinqs.com/technique/T1550), [T1550.002](https://intel.threadlinqs.com/technique/T1550.002), [T1552](https://intel.threadlinqs.com/technique/T1552), [T1553](https://intel.threadlinqs.com/technique/T1553), [T1553.002](https://intel.threadlinqs.com/technique/T1553.002), [T1554](https://intel.threadlinqs.com/technique/T1554), [T1555](https://intel.threadlinqs.com/technique/T1555), [T1556](https://intel.threadlinqs.com/technique/T1556), [T1557](https://intel.threadlinqs.com/technique/T1557), [T1557.001](https://intel.threadlinqs.com/technique/T1557.001), [T1558](https://intel.threadlinqs.com/technique/T1558), [T1559](https://intel.threadlinqs.com/technique/T1559), [T1560](https://intel.threadlinqs.com/technique/T1560), [T1561](https://intel.threadlinqs.com/technique/T1561), [T1561.001](https://intel.threadlinqs.com/technique/T1561.001), T1562, T1562.001, T1562.003, T1562.004, [T1564](https://intel.threadlinqs.com/technique/T1564), [T1565](https://intel.threadlinqs.com/technique/T1565), [T1566](https://intel.threadlinqs.com/technique/T1566), [T1566.001](https://intel.threadlinqs.com/technique/T1566.001), [T1566.002](https://intel.threadlinqs.com/technique/T1566.002), [T1566.004](https://intel.threadlinqs.com/technique/T1566.004), [T1567](https://intel.threadlinqs.com/technique/T1567), [T1568](https://intel.threadlinqs.com/technique/T1568), [T1569](https://intel.threadlinqs.com/technique/T1569), [T1570](https://intel.threadlinqs.com/technique/T1570), [T1571](https://intel.threadlinqs.com/technique/T1571), [T1572](https://intel.threadlinqs.com/technique/T1572), [T1573](https://intel.threadlinqs.com/technique/T1573), [T1574](https://intel.threadlinqs.com/technique/T1574), T1574.002, [T1578](https://intel.threadlinqs.com/technique/T1578), [T1580](https://intel.threadlinqs.com/technique/T1580), [T1583](https://intel.threadlinqs.com/technique/T1583), [T1583.004](https://intel.threadlinqs.com/technique/T1583.004), [T1583.005](https://intel.threadlinqs.com/technique/T1583.005), [T1584](https://intel.threadlinqs.com/technique/T1584), [T1584.005](https://intel.threadlinqs.com/technique/T1584.005), [T1585](https://intel.threadlinqs.com/technique/T1585), [T1585.001](https://intel.threadlinqs.com/technique/T1585.001), [T1586](https://intel.threadlinqs.com/technique/T1586), [T1587](https://intel.threadlinqs.com/technique/T1587), [T1588](https://intel.threadlinqs.com/technique/T1588), [T1588.002](https://intel.threadlinqs.com/technique/T1588.002), [T1589](https://intel.threadlinqs.com/technique/T1589), [T1590](https://intel.threadlinqs.com/technique/T1590), [T1591](https://intel.threadlinqs.com/technique/T1591), [T1592](https://intel.threadlinqs.com/technique/T1592), [T1593](https://intel.threadlinqs.com/technique/T1593), [T1594](https://intel.threadlinqs.com/technique/T1594), [T1595](https://intel.threadlinqs.com/technique/T1595), [T1595.002](https://intel.threadlinqs.com/technique/T1595.002), [T1596](https://intel.threadlinqs.com/technique/T1596), T1597, [T1598](https://intel.threadlinqs.com/technique/T1598), [T1606](https://intel.threadlinqs.com/technique/T1606), [T1608](https://intel.threadlinqs.com/technique/T1608), [T1611](https://intel.threadlinqs.com/technique/T1611), [T1614.001](https://intel.threadlinqs.com/technique/T1614.001), T1615, [T1619](https://intel.threadlinqs.com/technique/T1619), [T1621](https://intel.threadlinqs.com/technique/T1621), [T1648](https://intel.threadlinqs.com/technique/T1648), [T1649](https://intel.threadlinqs.com/technique/T1649), T1656, [T1657](https://intel.threadlinqs.com/technique/T1657), [T1665](https://intel.threadlinqs.com/technique/T1665)

## Threat actors

crazzynoob (dominant — 98% of attacks), [UAT-8099](https://intel.threadlinqs.com/actor/UAT-8099), [Hecker](https://intel.threadlinqs.com/actor/Hecker), 10Xprofit / Unknown, [ShinyHunters](https://intel.threadlinqs.com/actor/ShinyHunters), [GlassWorm](https://intel.threadlinqs.com/actor/GlassWorm), Scattered Lapsus ShinyHunters (SLSH), IPIDEA Operators / Multiple Criminal Groups (550+), Femwar02 (BaBlock/Rorschach affiliate), [Static Tundra](https://intel.threadlinqs.com/actor/Static%20Tundra), [Kimsuky](https://intel.threadlinqs.com/actor/Kimsuky), [Russian State-Sponsored](https://intel.threadlinqs.com/actor/Russian%20State-Sponsored)

Nation-state attribution: China, North Korea (partial), United States, China (referenced threat), Russia, France, North Korea

Threat categories: ADVISORY, FRAUD, MISCONFIGURATION, PHISHING, THREAT_INTEL, DATA_BREACH, POLICY, MALWARE, RANSOMWARE, APT, CVE, CAMPAIGN, SUPPLY_CHAIN, VULNERABILITY, EXTORTION, THREAT_ACTOR, ICS_SCADA

## Severity breakdown

- critical: 9
- high: 23
- medium: 14
- low: 1

## Indicator & detection coverage

Counts only; indicator values require Red and above, detection rule text requires Blue and above.

- Indicators of compromise: 2228 (behavioral 1301, network 580, host 277, file 61, email 6, financial 3)
- New detection rules: 728 (100% of the day’s threats covered)

## More editions

- Next: [2026-02-16](https://intel.threadlinqs.com/debrief/2026-02-16)
- [Archive of daily debriefs](https://intel.threadlinqs.com/debrief/archive)
- [Latest debrief](https://intel.threadlinqs.com/debrief)

Canonical: https://intel.threadlinqs.com/debrief/2026-02-02