Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
SleepyDuck Ethereum C2 Backdoor + Contagious Interview: Supply-Chain Compromise Campaign Analysis — Enterprise Detection Pack
Threat Summary A sophisticated threat campaign is actively targeting the software development and cryptocurrency ecosystems through a multi-...
Equation of Compromise: npm Supply-Chain Loader with Ethereum Smart Contract C2 — OTX Pulse Detection Pack
Equation of Compromise: npm Supply-Chain Loader with Ethereum Smart Contract C2 TLP: WHITE | Intelligence Category: Active Malware Campaigns...
GoCaracal Malware Uses Ethereum Smart Contracts for C2 Dead-Drop Resolution — Detection and Hunting Guide
Introduction Arctic Wolf has attributed, with medium confidence, a June 2026 intrusion at an unnamed Venezuelan communications organization ...
npm Supply Chain Attack: Six Malicious Packages Resolved C2 Servers via Ethereum Wallet — Detection and Remediation Guide
Security researchers have disclosed a campaign in which six malicious npm packages embedded a novel command-and-control (C2) resolution mech...
npm Supply Chain Compromise: keyv & cacheable Packages Poisoned with Ethereum C2 Credential Stealer — OTX Pulse Analysis
npm Supply Chain Compromise: keyv & cacheable Packages Poisoned with Ethereum C2 Credential Stealer Threat Summary AlienVault OTX pulse data...