Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
BigBear 2.0 Evilginx2 PhaaS + Fake AI Ads BitB Campaign: Credential Theft & Cloud Token-Jacking Wave — OTX Pulse Analysis
BigBear 2.0 Evilginx2 PhaaS + Fake AI Ads BitB Campaign: Credential Theft & Cloud Token-Jacking Wave Threat Summary Four concurrent OTX puls...
Iranian University Phishing Campaign Extradition: Detecting and Remediating Mailbox Credential Harvesting and Mass Email Exfiltration
Introduction Montenegro's courts have approved the extradition of Amir Barati — a 40-year-old dual Turkish-Iranian national — to the United ...
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack Threat Summary Two li...
AnonyMousKIT AI-Powered PhaaS Supply Chain: 506-Domain Apple Activation Lock Phishing Network — OTX Detection Pack
AnonyMousKIT AI-Powered PhaaS Supply Chain: 506-Domain Apple Activation Lock Phishing Network Threat Summary A new AlienVault OTX pulse publ...
Typosquatted AI Platform Malware Distribution: 'claude.ai.download-app.us' Credential-Harvesting Campaign — OTX Detection Pack
Threat Summary A new OTX pulse (AlienVault, TLP:WHITE) confirms what our dark web monitoring has been forecasting for two quarters: trusted ...
EtherHiding Blockchain C2, BlackHatSect0r/DXQRTXX Go C2, Balonx Spyroid PhaaS: OTX Enterprise Detection Pack
EtherHiding Blockchain C2, BlackHatSect0r/DXQRTXX Go C2, Balonx Spyroid PhaaS: OTX Enterprise Detection Pack Threat Summary Three TLP:white ...
Phishing Research Analysis: 2.47M Simulated Attacks Prove Click Rates Alone Fail — Measuring Credential Leaks and Reporting for Real Defense
Introduction A new analysis of 2.47 million simulated phishing attacks, reported by SecurityWeek, is forcing a long-overdue reckoning in how...
AI-Assisted Secrets Harvesting: How Threat Groups Abused Claude to Extract Credentials from 1.8M Android Apps — Defense Playbook
AI Is Now a Force Multiplier for Secrets Harvesting — and Your Mobile Apps Are the Target Anthropic has disclosed that multiple threat group...
Storm-3121/Storm-3032 Passkey AiTM Phishing + AI-Driven PaperCut Exploitation: OTX Pulse Analysis — Identity & Credential Defense Pack
From The Dark Side: Threat Intelligence Briefing Threat Summary Two converging credential-theft operations dominate this reporting window, a...