Skip to content
skopnix
← adversaries
Unknown

Prolific Puma

misp-galaxyrefreshed 2026-09-15

sigil

Analyst brief

Prolific Puma provides an underground link shortening service to criminals. Infoblox states that during analysis, no legitimate content was observed being served through their shortener. For operation they use a registered domain generation algorithm (RDGA), based upon which they registered between 35k-75k domain names.

Take it with you
References
Early access

Track Prolific Puma on the wire.

Early access opens the actor API and MCP server first — and an alert every time this adversary lands on the wire. One email when it's ready.

bot-protected