Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Zer0day Stealer + ENIGMA Locker Build-Path Attribution: OTX Pulse Analysis — Rust Infostealer, HVNC, and Ransomware Detection Pack
Zer0day Stealer + ENIGMA Locker: One Build Path, Three Malware Families A newly published AlienVault OTX pulse (TLP:WHITE, modified 2026-10-...
CVE-2026-88771 Citrix NetScaler Pre-Auth Command Injection: pitboss/NSPPE Web Shell and Credential-Theft Hunt Pack
Threat Summary Live OTX pulse data from AlienVault and LevelBlue THOR indicates active exploitation of CVE-2026-88771, a critical pre-authen...
Spring Ring Teams Vishing Campaign + Gryxa AI-Built RMM Toolkit: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two OTX pulses published 2026-09-30 paint a converging picture of how intrusion crews are industrializing social engineering ...
UAT-11587 'Antino' Rust Backdoor Campaign: China-Nexus APT Targeting Asian Governments via M365 C2 — OTX Detection Pack
Threat Summary AlienVault OTX pulse data, sourced from Cisco Talos research, exposes an active China-nexus intrusion cluster tracked as UAT-...
Packagist iOS Spyware Chain (CVE-2025-31277/CVE-2025-43529) + RMM Phishing Credential Theft: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two converging campaigns surfaced in this morning's OTX feed, and together they paint a clear picture of where credential and...
ClickFix Social Engineering Delivers Lumma Stealer & SectopRAT; Void Arachne's ValleyRAT Hides in QN Wallpaper Adware — OTX Pulse Detection Pack
Threat Summary Two concurrent OTX pulses paint a picture of a maturing social-engineering-to-RAT pipeline that enterprise defenders must tre...
ClickFix-Custom-GPT Malvertising Chain Delivers Lumma, SectopRAT & AMOS + JSCeal V8 Bytecode Stealer: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two AlienVault OTX pulses published 2026-09-29/30 converge on a single theme dominating the credential-theft landscape in lat...
DarkSword Exploit Chain via Fake iPhone Duo Preorder Pages: OTX Pulse Analysis — Safari Zero-Click Detection Pack
Threat Summary A newly surfaced OTX pulse documents an active drive-by exploitation campaign weaponizing the hype around a purported "iPhone...
RATHat Android Banking Trojan: From BlackCat Panel to Panda Workshop — ADB Exploitation C2 Detection Pack
Threat Summary A new pulse published to AlienVault OTX by AlienVault Labs (drawing on Cleafy research) documents the evolution of the RATHat...