Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
APT37 Ted Backdoor + CL-CRI-1171 PPI Nexus: OTX Pulse Detection Pack — Trojanized Linux Daemons, HAProxy Implants, SEO Poisoning
APT37 Ted Backdoor + CL-CRI-1171 PPI Nexus: OTX Pulse Detection Pack — Trojanized Linux Daemons, HAProxy Implants, SEO Poisoning Two TLP:whi...
APT37 'Ted' Backdoor Linux Toolkit + Abyssos RAT: OTX Pulse Analysis — Infostealer Detection Pack
Two fresh OTX pulses paint a consistent picture: adversaries are investing heavily in stealthy, low-detection tooling built specifically to ...
Operation Capsule Vault: APT37 RokRAT v2 Phishing Campaign — OTX Pulse Analysis
Threat Summary Recent OTX pulse data has uncovered a sophisticated spear-phishing campaign attributed to the North Korean threat actor APT37...
SessionGate, RemusStealer, PCPJack & APT37 Supply Chain: OTX Pulse Analysis — Enterprise Detection Pack
Executive Summary Recent OTX pulses have unveiled a convergence of high-threat activity ranging from financially motivated malware ecosystem...
Potemkin Loader, AsyncRAT AI Lures & APT37 NarwhalRAT: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Recent OTX pulse data indicates a surge in diverse, high-efficacy malware campaigns utilizing distinct social engineering vec...
NarwhalRAT Delivery via Fake Microsoft Account Alerts — Detection and Incident Response
NarwhalRAT Delivery via Fake Microsoft Account Alerts — Detection and Incident Response Introduction Security Arsenal has detected a concern...
AsyncRAT, APT37 NarwhalRAT & OnyxC2: OTX Pulse Analysis of Active RAT & Stealer Campaigns
AsyncRAT, APT37 NarwhalRAT & OnyxC2: OTX Pulse Analysis of Active RAT & Stealer Campaigns Excerpt Active campaigns delivering AsyncRAT via A...
APT37 BirdCall Android Campaign: Supply Chain Attack Detection and Hardening
APT37 BirdCall Android Campaign: Supply Chain Attack Detection and Hardening Introduction The North Korean state-sponsored threat actor APT3...
APT37 RokRAT Campaign: Facebook Social Engineering Detection and Hardening Guide
Introduction A recently observed campaign attributed to the North Korean threat group APT37 (also known as ScarCruft or Reaper) highlights a...