Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ClickFix Fake CAPTCHA Chains, UTA0565 Chrome/Windows 0-Days & Red Heron Kapibala: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary This week's OTX telemetry paints a coherent picture of a threat landscape dominated by two converging trends: the industriali...
ClickFix AS202412 Infostealer Chains + Red Heron WordPress Raids: OTX Detection Pack for DarkGate, Amadey, Matanbuchus
ClickFix AS202412 Infostealer Chains + Red Heron WordPress Raids: OTX Detection Pack for DarkGate, Amadey, Matanbuchus Threat Summary Two pu...
DarkMe RAT, RemControl Banking Trojan & ClickFix Loader Chains: OTX Pulse Analysis — Credential Theft Detection Pack
DarkMe RAT, RemControl & ClickFix Loader Chains: Credential Theft Intelligence Briefing Threat Summary Four concurrent OTX pulses paint a co...
ChainScript RAT Deployed via ClickFix Lures with Polygon Blockchain C2 Rotation — Detection and Response Guide
Introduction Blackpoint's Adversary Pursuit Group (APG) has documented a campaign that fuses two of the most operationally effective tradecr...
Brevo Supply Chain Compromise: WordPress Backdoor + ClickFix Dual-Payload Campaign — OTX Detection Pack
Brevo Supply Chain Compromise: WordPress Backdoor + ClickFix Dual-Payload Campaign Threat Level: CRITICAL | Campaign Window: Active since 20...
ShadowHVNC RAT Kit + Brevo Supply-Chain ClickFix Campaign: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two distinct but operationally significant threat activities surfaced in OTX telemetry this cycle, both emblematic of how cri...
Targeted Social Engineering Campaign Against Rust Maintainers: Defending Crates.io and the Open Source Supply Chain
Introduction On September 17, 2026, Adam Harvey and the Rust crates security team published an urgent warning: an ongoing, targeted campaign...
Brevo Supply-Chain Attack: Stolen Cloudflare API Key Used to Inject ClickFix Malware — Detection and Remediation Guide
Introduction Brevo (formerly Sendinblue), the email marketing and CRM platform used by hundreds of thousands of organizations, confirmed tha...
NightEagle APT GhostContainer Exchange Backdoor + AMOS macOS Stealer ClickFix Campaign: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two pulses published to AlienVault OTX on 2026-09-16 paint a converging picture: credential theft is being industrialized at ...