Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ScreenConnect RAT + ValleyRAT Crypto Fraud + Telerik Exploitation: OTX Pulse Analysis — Enterprise Detection Pack
ScreenConnect RAT + ValleyRAT Crypto Fraud + Telerik Exploitation: OTX Pulse Analysis Executive Summary Three distinct but converging threat...
YobaLoader + Overlord RAT DLL Sideloading Wave: OTX Pulse Analysis — Fake AI Tools, VBScript Banking Trojans & CMS.exe Compromise
YobaLoader + Overlord RAT DLL Sideloading Wave: OTX Pulse Analysis — Fake AI Tools, VBScript Banking Trojans & CMS.exe Compromise Threat Sum...
Gheist Campaign: PolinRider Malware Abuses Stolen GitHub Tokens for Mass Secret Exfiltration — OTX Pulse Analysis
Threat Summary Security Arsenal has identified an active automated campaign designated Gheist that leverages compromised GitHub tokens for l...
Magento Magecart Loader 'deepveindrilling' + Gheist GitHub Token Abuse: OTX Pulse Analysis — Enterprise Detection Pack
Magento CMS Block Loader + Gheist GitHub Token Campaign: OTX Threat Intelligence Briefing Threat Summary Two concurrent criminal operations ...
SilentXMRMiner On-Endpoint Compilation via Samsung MagicINFO CVE-2025-4632: OTX Pulse Analysis — Rogue AnyDesk, 'oldadministrator' Persistence & Monero Mining Detection Pack
Threat Summary AlienVault OTX pulse data (TLP:WHITE, modified 2026-10-24) documents an active intrusion campaign in which an unidentified th...
PHP2Shell CVE-2026-109618/109619 Pre-Patch Leak, VelvetCake PowerShell RAT (Opal Sleet / Konni), and RatHat Android Intrusion Campaign: OTX Pulse Analysis — Enterprise Detection Pack
PHP2Shell CVE-2026-109618/109619 Pre-Patch Leak, VelvetCake PowerShell RAT (Opal Sleet / Konni), and RatHat Android Intrusion Campaign: OTX ...
BlueHammer (CVE-2026-33825): Eight-Stage Windows Defender Privilege Escalation Chain — OTX Pulse Analysis & Enterprise Detection Pack
Threat Summary AlienVault OTX has published a pulse covering BlueHammer (CVE-2026-33825), an eight-stage local privilege-escalation chain ta...
Midnight Mimosa Android Firmware Supply-Chain Campaign: Phantom, Joker, and DxFactory Loader Detection Pack
Threat Summary The OTX pulse identifies Midnight Mimosa as a widespread Android firmware supply-chain campaign affecting low-cost MediaTek-b...
WHIPSHOT & SLAPSHOT Webshells via Chained NetScaler CVE-2026-88771 / CVE-2026-88779: OTX Pulse Analysis — Edge Device Detection Pack
Threat Summary A fresh OTX pulse (AlienVault, TLP:WHITE, modified 2026-10-20) documents an active intrusion campaign against Citrix NetScale...