Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
EMPERADOR Ransomware Gang: 5 New Leak-Site Listings — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-09-29 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
RATHat Android Banking Trojan: From BlackCat Panel to Panda Workshop — ADB Exploitation C2 Detection Pack
Threat Summary A new pulse published to AlienVault OTX by AlienVault Labs (drawing on Cleafy research) documents the evolution of the RATHat...
Fake VPN Chrome Extension Proxy Farm: OTX Pulse Analysis — Enterprise Browser Traffic Interception Detection Pack
Threat Summary AlienVault OTX flags a coordinated cluster of 31 Russian-language Chrome extensions impersonating VPN access for RuTracker, Y...
M3RX Ransomware Gang: 6 Leak-Site Listings Posted — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-09-29 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
N0N Ransomware Gang: 3 New Leak-Site Listings Targeting Manufacturing & Technology — Sector Analysis and Detection Engineering
Classification: TLP:CLEAR | Publication Date: 2026-09-29 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
MEDUSALOCKER Claims 4 New Listings Across Finance, Government, Agriculture and Energy — Detection & Hunt Brief
Classification: TLP:CLEAR | Publication Date: 2026-09-29 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
The Stealer Factory: Python-Based MaaS Infostealer Builder — OTX Pulse Analysis with Enterprise Detection Pack
Threat Summary AlienVault OTX pulse analysis dated 2026-09-28 exposes an active Malware-as-a-Service (MaaS) infostealer builder documented b...
THREEAM Ransomware Gang: 7 New Leak-Site Listings — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-09-29 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
ShinyHunters (UNC6240) Mass Exploitation of Oracle PeopleSoft CVE-2026-35273: SIDEEYE Backdoor, Neo-reGeorg Tunnels & MeshAgent — OTX Detection Pack
Threat Summary AlienVault OTX pulse data confirms that UNC6240, the intrusion set publicly tracked as ShinyHunters, has resumed a mass-explo...