Intel 471
Cyber threat intelligence company. It monitors criminal underground forums and markets to warn businesses and governments about ransomware, access brokers and malware.
At a glance
- Entity level
- Organisation
- Type
- Company (private)
- Flagship output
- Cyber Threat Trends and Outlook (latest: 2026 Cyber Threat Trends and Outlook, 23 December 2025)
- Category
- Cyber & technology risk
- Tier
- Tier 2: Cyber underground intelligence specialist; annual trends and outlook
- Headquarters
- Wilmington, United States
- Coverage
- Cyber underground, ransomware, hacktivism
- Public access
- Free
- Latest activity seen
- 23 Dec 2025
- Evidence
- Active in 2025 to 26
How it produces intelligence
Human intelligence collection from cyber-underground forums and channels, plus malware tracking, analysed by in-house researchers and delivered through its platform.
Risk themes
Focus regions
Links
What it publishes
| Output | Type | Cadence | Latest edition | Date | |
|---|---|---|---|---|---|
| Cyber Threat Trends and Outlook | Threat report | Annual | 2026 Cyber Threat Trends and Outlook | 23 Dec 2025 | Read report |
| Annual Threat Report | Threat report | Annual | ATR 2026 | Read report |
Latest findings
Recent public risk calls by Intel 471, summarised in our own words. They are its views, not 311's. Follow each source for the original.
Intel 471 judges that AI speeds up criminal operations but is not the main driver of profit-motivated attacks.
23 Dec 2025 · Horizon: 2026 · Source: Intel 471: 2026 Cyber Threat Trends and OutlookExtortion rose 63% in 2025, driven by supply-chain attacks, and Qilin became the dominant ransomware-as-a-service group.
23 Dec 2025 · Horizon: 2025 to 2026 · Source: Intel 471: 2026 Cyber Threat Trends and OutlookAccess-broker claims fell 27% from 2024 even as new brokers entered. Lumma, Stealc and Vidar were the most-downloaded infostealers.
23 Dec 2025 · Horizon: 2025 · Source: Intel 471: 2026 Cyber Threat Trends and OutlookOf more than 700 hacktivist responses tracked, over 80% were propaganda or DDoS. About 80% of 500-plus reported vulnerabilities were weaponised.
23 Dec 2025 · Horizon: 2025 · Source: Intel 471: 2026 Cyber Threat Trends and Outlook
Questions about Intel 471
What is Intel 471?
Cyber threat intelligence company. It monitors criminal underground forums and markets to warn businesses and governments about ransomware, access brokers and malware.
How does Intel 471 produce its intelligence?
Human intelligence collection from cyber-underground forums and channels, plus malware tracking, analysed by in-house researchers and delivered through its platform.
Where is Intel 471 based?
Intel 471 is based in Wilmington, United States.
What does Intel 471 cover?
Its work covers cyber, terrorism & crime, technology & ai, with a focus on Global.
Profile compiled by the 311 Strategic Intelligence Unit from public sources. Last checked 21 Oct 2026. Listing is not a ranking or an endorsement. Evidence source. Is this your organisation? Request a correction.