Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Luna Moth Playbook Leak: Defending Against Callback Phishing and RMM-Based Data Extortion
Introduction Leaked internal documents attributed to Luna Moth — also tracked as Silent Ransom Group — have given defenders an unusually cle...
Silent Ransom Group's $207M Vishing Extortion Campaign Against Law Firms — Detection and Hardening Guide
When the Ransom Note Arrives by Phone For the better part of a decade, the ransomware defense conversation has centered on encryption: stopp...
RMM Tool Abuse in the Wild: Detecting and Blocking Unauthorized Remote Access Software After ScreenConnect Campaigns
Introduction The SANS Internet Storm Center is tracking a sustained and growing trend that every SOC needs to take seriously: threat actors ...
Rogue ScreenConnect Worm-Like Propagation (XMRig) + SockTz AI-Enabled LATAM Campaign: OTX Pulse Analysis — Enterprise Detection Pack
Rogue ScreenConnect Worm-Like Propagation (XMRig) + SockTz AI-Enabled LATAM Campaign: OTX Pulse Analysis — Enterprise Detection Pack Threat ...
MSP360 RMM Abused to Deploy ScreenConnect: Detection and Response Guide for Dual-RMM Social Engineering Attacks
Introduction Microsoft has issued a warning about an active social engineering campaign in which threat actors distribute a legitimate MSP36...
Spring Ring Teams Vishing Campaign + Gryxa AI-Built RMM Toolkit: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two OTX pulses published 2026-09-30 paint a converging picture of how intrusion crews are industrializing social engineering ...
Packagist iOS Spyware Chain (CVE-2025-31277/CVE-2025-43529) + RMM Phishing Credential Theft: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two converging campaigns surfaced in this morning's OTX feed, and together they paint a clear picture of where credential and...
CVE-2024-21762 FortiGate SSL-VPN Exploitation + MeshCentral RMM Persistence: Thai Telecom Intrusion — OTX Detection Pack
CVE-2024-21762 FortiGate Exploitation + MeshCentral Persistence: Thai Telecom Intrusion Analysis Threat Summary An AlienVault OTX pulse publ...
3BB Intrusion: Attacker Abused MeshCentral RMM for Root Access and Subscriber Credential Theft — Detection and Response Guide
3BB Intrusion: Attacker Abused MeshCentral RMM for Root Access and Subscriber Credential Theft — Detection and Response Guide The Short Vers...