Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
FLATROOF/ROOFDECK Trojanized Terraform Campaign, ARTEX Agentic-AI Attacks & AWS Bedrock Credential Testing: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three concurrent OTX pulses paint a coherent picture of a credential-theft and developer-targeting ecosystem that has matured...
'Raabby WaIIet' Malicious Firefox Extension Campaign: Cryptocurrency Seed Phrase Theft via Cloudflare Workers C2 — OTX Detection Pack
Threat Summary A coordinated supply-chain-style campaign has been identified in the Mozilla Firefox Add-ons ecosystem: 16 malicious browser ...
Fake ChatGPT, Gemini, and Claude Ad Portals Steal Credentials and MFA Codes: Detection and Defense Guide
Introduction Researchers have disclosed an active, human-operated social engineering platform that impersonates advertising and business pro...
BigBear 2.0 Evilginx2 PhaaS + Fake AI Ads BitB Campaign: Credential Theft & Cloud Token-Jacking Wave — OTX Pulse Analysis
BigBear 2.0 Evilginx2 PhaaS + Fake AI Ads BitB Campaign: Credential Theft & Cloud Token-Jacking Wave Threat Summary Four concurrent OTX puls...
Iranian University Phishing Campaign Extradition: Detecting and Remediating Mailbox Credential Harvesting and Mass Email Exfiltration
Introduction Montenegro's courts have approved the extradition of Amir Barati — a 40-year-old dual Turkish-Iranian national — to the United ...
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack Threat Summary Two li...
AnonyMousKIT AI-Powered PhaaS Supply Chain: 506-Domain Apple Activation Lock Phishing Network — OTX Detection Pack
AnonyMousKIT AI-Powered PhaaS Supply Chain: 506-Domain Apple Activation Lock Phishing Network Threat Summary A new AlienVault OTX pulse publ...
Typosquatted AI Platform Malware Distribution: 'claude.ai.download-app.us' Credential-Harvesting Campaign — OTX Detection Pack
Threat Summary A new OTX pulse (AlienVault, TLP:WHITE) confirms what our dark web monitoring has been forecasting for two quarters: trusted ...
EtherHiding Blockchain C2, BlackHatSect0r/DXQRTXX Go C2, Balonx Spyroid PhaaS: OTX Enterprise Detection Pack
EtherHiding Blockchain C2, BlackHatSect0r/DXQRTXX Go C2, Balonx Spyroid PhaaS: OTX Enterprise Detection Pack Threat Summary Three TLP:white ...