# IntelFusions

> IntelFusions (www.intelfusions.com) is a cyber threat intelligence platform that connects threat actors to their MITRE ATT&CK techniques, malware and tools, detection rules, and live ransomware incidents — one continuously updated, citable graph for security professionals.

The platform tracks 560+ threat actor profiles (nation-state APTs, ransomware operations, hacktivists, each with aliases, TTPs, targeted sectors, tools, and IoCs), 13,000+ ransomware leak-site incident claims imported automatically every 12 hours, 800+ malware and tool profiles, 3,700+ Sigma/YARA detection rules, and the full MITRE ATT&CK technique catalog — all cross-linked, plus original intelligence briefings on ransomware, vulnerabilities, nation-state operations, cyber incidents, and AI security. Threat actors carry proprietary Atomic Fusion names whose noun encodes the actor category (e.g. Isotope = Russia APT, Flux = ransomware); vendor aliases are preserved on every profile. Pages are server-rendered for crawlers with schema.org JSON-LD.

## Hubs

- [Home](https://www.intelfusions.com/): platform overview, latest briefings, and popular threat actors
- [News](https://www.intelfusions.com/news): intelligence briefings — ransomware, vulnerabilities, nation-state, cyber incidents, AI security
- [Threat Actors](https://www.intelfusions.com/threat-actors): structured profiles of 560+ APT groups, ransomware operations, and hacktivists
- [Incidents](https://www.intelfusions.com/incidents): live ransomware and cyber-incident tracker with victim, actor, sector, and country
- [Malware](https://www.intelfusions.com/malware): 800+ malware families and attacker tools mapped to techniques and detections
- [Detection Rules](https://www.intelfusions.com/rules): 3,700+ Sigma and YARA rules linked to ATT&CK techniques and malware
- [ATT&CK Techniques](https://www.intelfusions.com/attack): MITRE ATT&CK techniques cross-referenced with rules, malware, and actors
- [Taxonomy](https://www.intelfusions.com/taxonomy): the Atomic Fusion threat-actor naming scheme explained
- [About](https://www.intelfusions.com/about): mission and methodology

## Feeds

- [Sitemap index](https://www.intelfusions.com/sitemap.xml): core URLs, plus the rules, malware, attack and CVE children. Since 2026-08-07 those four child sets render `noindex, follow` — still crawlable, still linked, deliberately not indexed. They stay listed here so crawlers reach them; the hub pages above are the indexable entry points.
- [News sitemap](https://www.intelfusions.com/news-sitemap.xml): articles from the last 48 hours (Google News format)
- [RSS](https://www.intelfusions.com/rss.xml): latest intelligence briefings, RSS 2.0

## Contact

- [Contact page](https://www.intelfusions.com/contact): editorial and research inquiries