Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Armored Likho Still Toolkit (Rust) + Multi-Stage Phishing Relay Chains: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three concurrent OTX pulses paint a coherent picture of an escalating credential-theft and surveillance ecosystem. The most s...
Aeternum Blockchain C2, Midnight Blizzard 'CaptiveCrunch' M365 Credential Theft, and GoldDigger Android Banking Trojan: OTX Pulse Analysis — Enterprise Detection Pack
Aeternum Blockchain C2, Midnight Blizzard 'CaptiveCrunch', and GoldDigger: Multi-Vector Threat Intelligence Briefing Three concurrent OTX pu...
LiteLLM PyPI Supply-Chain Attack: 2,100+ Organizations Exposed — Detection, Hunt Queries, and Credential Rotation Guide
What Happened In March 2026, two malicious releases of LiteLLM — one of the most widely deployed Python libraries for brokering calls to lar...
Abyssos Modular RAT: LLVM-Obfuscated Credential Theft and VNC Access — OTX Pulse Detection Pack
Threat Summary AlienVault OTX pulse data confirms the emergence of Abyssos, a previously undocumented modular remote administration tool (RA...
Levi Strauss Social Engineering Breach: Defending Against Helpdesk Scams and Corporate Data Exfiltration
Introduction Levi Strauss & Co. has disclosed a cyberattack in which a threat actor used social engineering to gain access to the computers ...
Webmail CSS Injection Attacks: Defending Against Credential Theft, Session Hijacking, and AI Email Tool Manipulation
Introduction A new class of attack demonstrated by PortSwigger researcher Gareth Heyes should force every organization running webmail — or ...
Vanta Stealer: Python-Based Cross-Platform Infostealer Targets Browser Credentials, Discord Tokens & Crypto Wallets — OTX Detection Pack
Vanta Stealer: Python-Based Cross-Platform Infostealer Targets Browser Credentials, Discord Tokens & Crypto Wallets A new pulse from AlienVa...
Fake IT Help Desk Phishing Campaign Hits Blackstone, Bridgewater, KKR: Detecting and Defeating MFA Credential Theft
Fake IT Help Desks Are Stealing MFA Credentials from Wall Street's Biggest Firms A coordinated phishing campaign operating under the aliases...
npm Supply Chain Compromise: keyv & cacheable Packages Poisoned with Ethereum C2 Credential Stealer — OTX Pulse Analysis
npm Supply Chain Compromise: keyv & cacheable Packages Poisoned with Ethereum C2 Credential Stealer Threat Summary AlienVault OTX pulse data...