Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
UAT-11587 'Antino' Rust Backdoor Campaign: China-Nexus APT Targeting Asian Governments via M365 C2 — OTX Detection Pack
Threat Summary AlienVault OTX pulse data, sourced from Cisco Talos research, exposes an active China-nexus intrusion cluster tracked as UAT-...
ClickFix Social Engineering Delivers Lumma Stealer & SectopRAT; Void Arachne's ValleyRAT Hides in QN Wallpaper Adware — OTX Pulse Detection Pack
Threat Summary Two concurrent OTX pulses paint a picture of a maturing social-engineering-to-RAT pipeline that enterprise defenders must tre...
SectopRAT via Fake Claude Desktop Installers: Bing Malvertising, EtherHiding C2 & DLL Sideloading — OTX Detection Pack
SectopRAT via Fake Claude Desktop Installers: Bing Malvertising, EtherHiding C2 & DLL Sideloading — OTX Detection Pack Classification: TLP:W...
ValleyRAT via Signed Overwolf Sideloading + SilkParasite SpiceRAT C2 Cluster: OTX Pulse Analysis — Enterprise Detection Pack
ValleyRAT via Signed Overwolf Sideloading + SilkParasite SpiceRAT C2 Cluster: OTX Pulse Analysis — Enterprise Detection Pack Two fresh OTX p...
FDMTP Implant via QuickFox Supply Chain Attack + ENDLESSDOORS Router Backdoor (CVE-2026-66747): OTX Detection Pack
Threat Summary Two concurrent supply chain compromises surfaced in AlienVault OTX this cycle, and together they illustrate a sobering trend:...
TA416 Mustang Panda EU Espionage: PlugX/Korplug + TONESHELL/PUBLOAD OTX Detection Pack
Threat Summary Live OTX pulse data attributes renewed European government and diplomatic targeting to TA416, tracked as MUSTANG PANDA and as...
ValleyRAT Delivered via Legitimate Adware: Detecting DLL Sideloading and Silver Fox Intrusion Activity
ValleyRAT Doesn't Need a Crack — It Needs Your Trust A newly documented ValleyRAT campaign illustrates a shift defenders need to internalize...
ValleyRAT Backdoor Disguised as QN Wallpaper Adware: Void Arachne DLL Sideloading Campaign — OTX Detection Pack
ValleyRAT Backdoor Disguised as QN Wallpaper Adware: Void Arachne DLL Sideloading Campaign Classification: TLP:WHITE | Pulse Date: 2026-08-3...
TerminalFix ClickFix Campaign: Defending Against Fake CAPTCHA Lures, DLL Sideloading, and Reverse Tunnel Persistence
Introduction Microsoft Threat Intelligence has published analysis of TerminalFix, a multistage intrusion campaign that combines three techni...