Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ClickFix Social Engineering Campaign: Fake Claude Installer Detection and Defense
Introduction Social engineering remains one of the most effective initial access vectors for threat actors, and the recent resurgence of "Cl...
NWHStealer, notnullOSX & ClickFix: OTX Analysis of Multi-Platform Infostealer Surge
Intelligence Briefing: Multi-Platform Infostealer Ecosystem Date: 2026-04-16 Category: Infostealer & Credential Theft --- Threat Summary Rec...
OtterCookie, NWHStealer, and ClickFix: Multi-Vector Infostealer Surge — OTX Pulse Analysis
Intelligence Briefing: Multi-Vector Infostealer Campaigns Date: 2026-04-16 Threat Summary Recent OTX pulses indicate a coordinated surge in ...
Multi-Platform Infostealer Surge: OtterCookie npm Supply Chain, NWHStealer, and Chrome Extension Session Hijacking
Intelligence Briefing: Multi-Platform Credential Theft Campaigns Date: 2026-04-15 Category: Infostealer & Credential Theft Threat Summary Re...
DPRK Supply Chain & ClickFix Operations: OtterCookie, Vidar, and Chrome Extension Stealers
Intelligence Briefing: NPM Supply Chain, ClickFix, and Infostealer Surge Date: 2026-04-15 Analyst: Principal Security Engineer, Security Ars...
MacSync, OtterCookie & ClickFix Banking Stealer: Multi-Platform Infostealer Surge — OTX Pulse Analysis
Threat Summary Recent OTX pulses indicate a coordinated surge in infostealer activity targeting distinct platforms and sectors. The campaign...
Venom Stealer MaaS: Detecting and Blocking ClickFix Social Engineering Attacks
Introduction The commoditization of cybercrime continues to accelerate with the emergence of Venom Stealer, a new Malware-as-a-Service (MaaS...
DeepLoad Malware: Detecting ClickFix Attacks and WMI Persistence
DeepLoad Malware: Detecting ClickFix Attacks and WMI Persistence Date: March 2026 Author: Senior Security Consultant, Security Arsenal Intro...
How to Protect Against the WordPress ClickFix Campaign Targeting Credentials and Digital Wallets
How to Protect Against the WordPress ClickFix Campaign Targeting Credentials and Digital Wallets Executive Summary Rapid7 Labs has identifie...