Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CyberDakait Android Banking Trojans + Firefox Crypto-Wallet Impersonators: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three concurrent OTX pulses published 2026-10-27/28 paint a consistent picture: financially-motivated threat actors are indus...
Operation MASTER, MR ROBOT MaaS, and Lzveil Infostealers: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary OTX telemetry for late October 2026 reveals a converged threat landscape where initial access brokers, Malware-as-a-Service (...
SkyW4lker Device-Code Phishing Kit + Brazilian Magecart Convertr Skimmer: OTX Pulse Analysis — Enterprise Detection Pack
SkyW4lker Device-Code Phishing Kit + Brazilian Magecart Convertr Skimmer: OTX Pulse Analysis Threat Summary Two live OTX pulses published on...
SkyW4lker Device-Code Phishing Kit + Poseidon RAT AI Harness Takeover: OTX Pulse Analysis — Enterprise Detection Pack
SkyW4lker Device-Code Phishing Kit + Poseidon RAT AI Harness Takeover: OTX Pulse Analysis — Enterprise Detection Pack Threat Summary Three c...
AI-Generated Phishing Pages and MFA Session Theft: A Defender's Guide to Detecting and Stopping AiTM Account Takeovers
The Phishing Bar Just Hit the Floor Fake login pages are the oldest trick in the credential-theft playbook. What's changed in 2026 is not th...
Shai-Hulud npm Supply Chain Attack: Why SBOMs Fail and How to Detect Self-Propagating Package Worms
Introduction The Shai-Hulud npm supply chain campaign is a watershed moment for software supply chain defense, and not for the reasons most ...
ICMacOS Stealer-to-RAT Evolution + DarkCore Session-Hijacking RAT: OTX Pulse Analysis — Enterprise Detection Pack
ICMacOS Stealer-to-RAT Evolution + DarkCore Session-Hijacking RAT: Enterprise Detection Pack Two concurrent OTX pulses published 2026-10-27 ...
Gheist Campaign: PolinRider Malware Abuses Stolen GitHub Tokens for Mass Secret Exfiltration — OTX Pulse Analysis
Threat Summary Security Arsenal has identified an active automated campaign designated Gheist that leverages compromised GitHub tokens for l...
PureRAT + PureLogs Infostealer Campaign Hits Japanese Enterprises: OTX Pulse Analysis — Phishing-to-Process-Hollowing Detection Pack
PureRAT + PureLogs Infostealer Campaign Hits Japanese Enterprises Classification: TLP:WHITE | Intelligence Category: Infostealer & Credentia...