Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Abyssos Modular RAT: LLVM-Obfuscated Credential Theft and VNC Access — OTX Pulse Detection Pack
Threat Summary AlienVault OTX pulse data confirms the emergence of Abyssos, a previously undocumented modular remote administration tool (RA...
Levi Strauss Social Engineering Breach: Defending Against Helpdesk Scams and Corporate Data Exfiltration
Introduction Levi Strauss & Co. has disclosed a cyberattack in which a threat actor used social engineering to gain access to the computers ...
Webmail CSS Injection Attacks: Defending Against Credential Theft, Session Hijacking, and AI Email Tool Manipulation
Introduction A new class of attack demonstrated by PortSwigger researcher Gareth Heyes should force every organization running webmail — or ...
Vanta Stealer: Python-Based Cross-Platform Infostealer Targets Browser Credentials, Discord Tokens & Crypto Wallets — OTX Detection Pack
Vanta Stealer: Python-Based Cross-Platform Infostealer Targets Browser Credentials, Discord Tokens & Crypto Wallets A new pulse from AlienVa...
Fake IT Help Desk Phishing Campaign Hits Blackstone, Bridgewater, KKR: Detecting and Defeating MFA Credential Theft
Fake IT Help Desks Are Stealing MFA Credentials from Wall Street's Biggest Firms A coordinated phishing campaign operating under the aliases...
npm Supply Chain Compromise: keyv & cacheable Packages Poisoned with Ethereum C2 Credential Stealer — OTX Pulse Analysis
npm Supply Chain Compromise: keyv & cacheable Packages Poisoned with Ethereum C2 Credential Stealer Threat Summary AlienVault OTX pulse data...
Powercat Java Stealer via Fake Xeno Roblox Cheats + keyv/cacheable npm Supply Chain Compromise: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two concurrent OTX pulses published on 2026-08-05 reveal a broad infostealer and credential-theft wave hitting both consumer ...
ClickFix Campaign: Starland RAT + WLDR Framework Targeting US Financial Sector — OTX Intelligence Briefing
ClickFix Campaign: Starland RAT + WLDR Framework Targeting US Financial Sector — OTX Intelligence Briefing Threat Summary A Russian-speaking...
Larva-24009 (HeptaX) Phishing: QuasarRAT & UltraVNC via LNK — OTX Pulse Analysis
Threat Summary The Larva-24009 threat actor (also known as HeptaX) is conducting an active phishing campaign targeting the healthcare sector...