Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Help Desk Vishing + AitM Token Theft: Defending Microsoft 365 Against Executive-Targeted Data Theft and Extortion
The Threat: Voice-Based Social Engineering Meets Token Theft Threat hunters have disclosed a widespread data theft and extortion threat clus...
UNC6671 Multi-Brand Vishing Extortion: Okta-Themed AiTM Phishing Infrastructure — OTX Pulse Detection Pack
UNC6671 Multi-Brand Vishing Extortion: Okta-Themed AiTM Phishing Infrastructure — OTX Pulse Detection Pack Threat Summary Live OTX pulse dat...
ShinyHunters Impersonates Security Staff to Breach ReliaQuest: Detecting and Defeating Help Desk Social Engineering
Introduction ReliaQuest — a well-known managed detection and response provider — has publicly confirmed that one of its own employees was ta...
Operation ASTERIX Crypto-Fraud Pipeline, FakeMBAM Deceptive Downloads & ScreenConnect Phishing: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three concurrent OTX pulses paint a picture of a maturing cybercrime-as-a-service ecosystem that blends classic social engine...
Shadow-HVNC Loader Kit + Operation ASTERIX & Fake AML Checker Crypto-Drain Campaigns: OTX Pulse Detection Pack
Threat Summary Three concurrent OTX pulses paint a coherent picture of a maturing crypto-crime ecosystem in which commoditized remote-access...
Vishing Attack on Quantum Health: Defending Healthcare Networks Against Voice-Based Social Engineering and Help Desk Exploitation
Introduction Quantum Health, a major healthcare navigation and care coordination company, has disclosed a data breach after threat actors ga...
Operation ASTERIX: Detecting the AI-Built Crypto Fraud Pipeline — Fake Wallets, Vishing Panels, and Telegram Exfiltration
Introduction Rapid7's Operation ASTERIX investigation is one of the more instructive disclosures of 2025-2026 — not because the tradecraft i...
Ukraine Dismantles 94 Fraudulent Call Centers: Defending Your Organization Against Vishing and Investment Scam Operations
Ukraine's Takedown of 94 Fraudulent Call Centers: What Defenders Need to Know Ukrainian law enforcement, in coordinated raids across the cou...
UNC6671 Vishing Campaign Targets Personal Phones to Bypass MFA and Steal SaaS Data — Detection and Hardening Guide
Introduction A data extortion group tracked as UNC6671 is running an active voice phishing (vishing) campaign against financial services, pr...