Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Lunex Stealer BYOVD Chain, Operation Master AdaptixC2 Pipeline & PureRAT Japan Campaign: OTX Pulse Analysis — Enterprise Infostealer Detection Pack
Threat Summary This week's OTX pulse cluster paints a coherent picture of a maturing credential-theft economy: five distinct operations, all...
Rydox Marketplace Admin Pleads Guilty: Detecting and Containing the Credential Theft Pipeline Feeding Cybercrime Markets
Introduction A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that trafficked in stolen personal...
Lunex Stealer Abuses AMD Driver for BYOVD EDR-Kill and Browser Credential Theft — Detection and Defense Guide
Executive Summary Ontinue researchers have detailed a four-stage attack chain delivering Psychedelic Stealer, an infostealer sold as part of...
MacSync macOS Stealer + HookBot/ERMAC Android Banking Leak: OTX Pulse Analysis — Credential-Theft Detection Pack
MacSync macOS Stealer + HookBot/ERMAC Android Banking Leak: OTX Pulse Analysis — Credential-Theft Detection Pack Threat Summary Two OTX puls...
DarkMe RAT, RemControl Banking Trojan & ClickFix Loader Chains: OTX Pulse Analysis — Credential Theft Detection Pack
DarkMe RAT, RemControl & ClickFix Loader Chains: Credential Theft Intelligence Briefing Threat Summary Four concurrent OTX pulses paint a co...
Vidar Stealer VM-Based String Obfuscation & Custom ChaCha20-Style Ciphers: OTX Pulse Analysis — Enterprise Detection Pack
Vidar Stealer VM-Based String Obfuscation & Custom Stream Ciphers: Enterprise Detection Pack Threat Summary A new OTX pulse published by Ali...
Fake LastPass Installers Deploy Kernel-Level EDR Killer and 'Rapuncel' Stealer: Detection and Defense Guide
Fake LastPass Installers Push Kernel-Level EDR Killer and 'Rapuncel' Stealer Security researchers have uncovered an active malware distribut...
WaterPlum DPRK Campaign: 30,000 Devices Infected, $10.7M in Crypto Stolen — Detection and Remediation Guide
The Campaign: Scale, Attribution, and Impact A joint law enforcement advisory published this month confirms that WaterPlum, a North Korean s...
WeaselBiscuit Stealer: 13 Malicious npm Packages Target Chrome Extension Storage — Detection and Response Guide
Introduction Open source registries remain one of the highest-leverage intrusion vectors available to state-sponsored actors, and the latest...