Your next case starts with a clue.
ThreatHunter: Bad Apples is a cybersecurity adventure where you step into the life of a threat hunter. Explore miniature 3D worlds, investigate suspicious activity and take on the threat actors behind it.
A suspicious app. A stolen session. Files that refuse to open. Talk to people, collect evidence and work out what happened before choosing your response.
FOLLOW THE EVIDENCE
Inspect artifacts, compare findings and piece together timelines. Decode clues, sort evidence and experiment with detection rules as you uncover each case. Use your Field Toolbox and Field Journal to keep the investigation moving.
CONTAIN THE MALWARE
Investigate infected Macs in simulated incidents. Trace the access path, decide what needs protecting and choose the next containment or recovery step. Put your deductions to work in tactical boss encounters, where timing, Focus and your next move matter.
TAKE THE HUNT WORLDWIDE
Travel from the canals of Amsterdam and the streets of New York to the beaches of Maui. Meet researchers, explore new neighborhoods and take on local cases. Between investigations, hop on a bike or head out for a surf.
MAKE IT YOUR HUNT
Create your hunter, earn XP and unlock equipment and new looks. Recruit Byte, Aegis and Patch, build your companion team and fill your ThreatDex with malware research dossiers.
LEARN THROUGH PLAY
Choose Guided mode for more help or Analyst mode for a tougher deduction challenge. Practice with evidence puzzles, decoding exercises and YARA labs, with hints and explanations to help you understand your findings. Cases use fictional scenarios and simulated evidence inspired by security research.
Follow the evidence. Contain the malware. Beat the bad apples.
