Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
MacSync Stealer ClickFix Campaign: Fake CAPTCHA Terminal Commands Deploy Crypto-Draining Mach-O Payloads — OTX Pulse Analysis & Detection Pack
Threat Summary A live OTX pulse authored by AlienVault documents an active macOS stealer campaign attributed to the MacSync malware family, ...
MacSync Stealer + ClickFix Fake CAPTCHA Campaign: OTX Pulse Analysis — macOS Credential & Crypto Wallet Detection Pack
Threat Summary A single AlienVault OTX pulse published 2026-09-05 documents an active macOS infostealer campaign distributing the MacSync st...
XCSSET v40 Supply Chain Surge + SakDriver Kernel Rootkit + Teams Help Desk Intrusion: OTX Detection Pack
Threat Summary Three concurrent OTX pulses published 2026-09-02 paint a picture of adversaries moving up and down the trust stack simultaneo...
AMOS Stealer + XMRig macOS ClickFix Crimekit: EtherHiding C2 on Polygon Blockchain — OTX Detection Pack
AMOS Stealer + XMRig macOS ClickFix Crimekit: EtherHiding C2 on Polygon Blockchain — OTX Detection Pack Classification: TLP:WHITE | Intellig...
MacSync Stealer: Hunting macOS Infostealer C2 Infrastructure with Behavioral Pivots — Detection and Response Guide
Introduction Microsoft's threat hunting team just published a case study that every SOC should read and operationalize: MacSync Stealer, a m...
AmnesiaStealer macOS Malware: ClickFix Delivery and Browser Session Hijacking — Detection and Response Guide
The Threat: Infostealer Meets Interactive Browser Control Security researchers have disclosed a new information-stealing malware family targ...
Go-Based macOS Infostealer Targets Crypto Wallets and Credentials — Detection and Response Guide
A Cross-Platform Language Is Now a Cross-Platform Problem Security researchers have identified a new macOS malware variant written in Go tha...
ClickFix macOS Campaign Delivers Go-Based Crypto Stealer: Detection and Defense Guide for SOC Teams
Introduction The ClickFix social-engineering playbook — which has been hammering Windows environments with fake CAPTCHA and 'fix this error'...
ClickFix macOS Infostealer Campaign: Detecting and Defeating Go-Based Crypto Theft Malware
Introduction The ClickFix social engineering technique has crossed a meaningful threshold: it is now being used to deliver a Go-based infost...