Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Shai-Hulud NPM Worm & ClickFix WebDAV: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Recent OTX Pulse data reveals a coordinated surge in credential theft operations targeting both development environments and ...
Multi-Vector Credential Theft: Malicious VPN Extensions, NPM Worms, and Phishing Infrastructure — OTX Pulse Analysis
Threat Summary Recent OTX pulse data indicates a surge in multi-vector credential theft campaigns targeting both end-users and developer env...
Flying Eagle RAT, Shai-Hulud NPM Worm & ClickFix: Cross-Vector Credential Theft Campaigns — Detection Pack
Threat Summary Recent OTX pulses reveal a coordinated surge in credential theft operations spanning mobile ecosystems, software supply chain...
Fake Corepack Supply Chain Attack: OpenShield & Apprunner Distribution
Fake Corepack Supply Chain Attack: OpenShield & Apprunner Distribution Excerpt: Fake Corepack site targeting developers with OpenShield info...
LokiBot Resurgence & GitHub Actions Supply Chain Attacks: OTX Pulse Analysis
Threat Summary Recent OTX pulses indicate a convergence of legacy malware persistence and modern infrastructure abuse. A mature LokiBot info...
CyberStrike Harvester & TAG-195 MaaS: Credential Harvesting & AI Supply Chain Attacks — OTX Pulse Analysis
Threat Summary A complex wave of credential theft and espionage activity has been identified across five distinct OTX pulses. The primary th...
Dolphin X Stealer & Kontraktnik AI-Driven Infostealer Campaign — Enterprise Detection Pack
Threat Summary Recent intelligence from the AlienVault OTX community has uncovered the "Dolphin X" stealer, a sophisticated infostealer and ...
Dolphin X & Phantom Stealer v3.5: AI-Driven & Multi-Stage Infostealer Campaigns — Enterprise Detection Pack
Threat Summary Recent OTX pulses reveal two concurrent infostealer campaigns actively targeting enterprise credentials and cloud infrastruct...
AI-Assisted Social Engineering: Detecting WebDAV Delivery and Infostealer Campaigns
AI-Assisted Social Engineering: Detecting WebDAV Delivery and Infostealer Campaigns Introduction The discovery of an exposed command-and-con...