Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Operation RapidRust (APT36) + Mirage2FA AiTM Phishing Kit: Rust-Based Backdoors and M365 Session Theft — OTX Detection Pack
Operation RapidRust (APT36) + Mirage2FA AiTM Phishing Kit: OTX Pulse Analysis Two fresh pulses out of AlienVault OTX (modified 2026-09-17, T...
N0va Phishkit AiTM Campaigns Target US and EU Enterprises: Detection and Identity Hardening Guide
Introduction A new phishing kit tracked as N0va is actively targeting organizations across North America and Europe, and it represents the l...
ShinyHunters Passkey Phishing Campaign Targets Microsoft 365: Detection and Defense Guide for SSO Social Engineering Attacks
Introduction Microsoft has confirmed that threat actors affiliated with ShinyHunters, Helix, and other extortion-focused criminal groups are...
Armored Likho 'Still Toolkit' Rust Espionage + Storm-3121 Passkey AiTM Phishing: OTX Pulse Analysis — Credential Theft Detection Pack
Armored Likho 'Still Toolkit' Rust Espionage + Storm-3121 Passkey AiTM Phishing: OTX Pulse Analysis Two fresh AlienVault OTX pulses converge...
Storm-3121/Storm-3032 Passkey AiTM Phishing + AI-Driven PaperCut Exploitation: OTX Pulse Analysis — Identity & Credential Defense Pack
From The Dark Side: Threat Intelligence Briefing Threat Summary Two converging credential-theft operations dominate this reporting window, a...
Midnight Blizzard CaptiveCrunch, LegionLoader ClickFix & Passkey AiTM Campaigns: OTX Pulse Analysis — Identity Theft Detection Pack
Midnight Blizzard CaptiveCrunch, LegionLoader ClickFix & Passkey AiTM Campaigns: OTX Pulse Analysis — Identity Theft Detection Pack Threat S...
njRAT/DCRAT, GhostDesk Chrome Spyware, PaperCut CVEs & Storm-3121 Passkey AiTM: OTX Credential-Theft Detection Pack
Threat Summary The four OTX pulses converge on one enterprise risk: credential and identity material is being harvested at scale through use...
Identity Attacks Drove Half of All Confirmed Intrusions in Q2 2026: Detection and Hardening Guide for the Top 4 Attack Patterns
Introduction Between May and July 2026, Prophet Security investigated every alert across its customer environments — not a sampled subset, n...
BigBear 2.0 Evilginx2 PhaaS Campaign: AiTM Microsoft 365 Credential Theft — OTX Detection Pack
BigBear 2.0 Evilginx2 PhaaS Campaign: AiTM Microsoft 365 Credential Theft — OTX Detection Pack A newly rebranded phishing-as-a-service (Phaa...