Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Operation ASTERIX Crypto-Fraud Pipeline, FakeMBAM Deceptive Downloads & ScreenConnect Phishing: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three concurrent OTX pulses paint a picture of a maturing cybercrime-as-a-service ecosystem that blends classic social engine...
Shadow-HVNC Loader Kit + Operation ASTERIX & Fake AML Checker Crypto-Drain Campaigns: OTX Pulse Detection Pack
Threat Summary Three concurrent OTX pulses paint a coherent picture of a maturing crypto-crime ecosystem in which commoditized remote-access...
Vishing Attack on Quantum Health: Defending Healthcare Networks Against Voice-Based Social Engineering and Help Desk Exploitation
Introduction Quantum Health, a major healthcare navigation and care coordination company, has disclosed a data breach after threat actors ga...
Operation ASTERIX: Detecting the AI-Built Crypto Fraud Pipeline — Fake Wallets, Vishing Panels, and Telegram Exfiltration
Introduction Rapid7's Operation ASTERIX investigation is one of the more instructive disclosures of 2025-2026 — not because the tradecraft i...
Ukraine Dismantles 94 Fraudulent Call Centers: Defending Your Organization Against Vishing and Investment Scam Operations
Ukraine's Takedown of 94 Fraudulent Call Centers: What Defenders Need to Know Ukrainian law enforcement, in coordinated raids across the cou...
UNC6671 Vishing Campaign Targets Personal Phones to Bypass MFA and Steal SaaS Data — Detection and Hardening Guide
Introduction A data extortion group tracked as UNC6671 is running an active voice phishing (vishing) campaign against financial services, pr...
Defending Against Microsoft Teams Vishing and Chaos Ransomware
Defending Against Microsoft Teams Vishing and Chaos Ransomware Introduction Security Arsenal has tracked a concerning shift in the threat la...
GoGRPC Backdoor & Teams Vishing Campaign: Helpdesk Hijacker IAB Tactics — OTX Pulse Analysis
Threat Summary The latest OTX pulse highlights an active Initial Access Broker (IAB) campaign, tracked since January 2026, that employs a so...
APT-C-36 AsyncRAT Toolkit Evolution & O-UNC-066 Entra Passkey Vishing: OTX Pulse Analysis
Threat Summary Recent OTX pulses highlight a dual-vector threat landscape targeting financial credentials and identity infrastructure. APT-C...