Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ICMacOS RAT, Convertr Magecart Skimmer & Hidden Hawk DNS Shadowing: OTX Pulse Analysis — Multi-Vector Detection Pack
ICMacOS RAT, Convertr Magecart Skimmer & Hidden Hawk DNS Shadowing: OTX Pulse Analysis Three concurrent OTX pulses published 2026-10-27 reve...
ICMacOS Stealer-to-RAT Evolution + DarkCore Session-Hijacking RAT: OTX Pulse Analysis — Enterprise Detection Pack
ICMacOS Stealer-to-RAT Evolution + DarkCore Session-Hijacking RAT: Enterprise Detection Pack Two concurrent OTX pulses published 2026-10-27 ...
CloudSyncD: Fake Zoom macOS Installer Hides Stolen Passwords in Zero-Width Unicode — Detection and Removal Guide
Introduction Jamf Threat Labs has disclosed a new macOS backdoor dubbed CloudSyncD, delivered through a trojanized Zoom installer. The campa...
Contagious Interview + OtterCookie: DPRK Trojanized macOS Installers Expand Beyond Developer Workflows — OTX Pulse Detection Pack
Contagious Interview + OtterCookie: DPRK Trojanized macOS Installers Expand Beyond Developer Workflows Threat Summary A live OTX pulse autho...
Contagious Interview Expands to Trojanized macOS Installers: DPRK OtterCookie Campaign — OTX Pulse Analysis & Detection Pack
Contagious Interview Expands to Trojanized macOS Installers: DPRK OtterCookie Campaign Classification: TLP:WHITE | Pulse Author: AlienVault ...
Macfinger ClickFix Campaign: Detecting and Blocking Fake-CAPTCHA Malware Delivery on macOS
Introduction The SANS Internet Storm Center recently published an analysis of malicious software tied to the Macfinger ClickFix campaign — a...
PamStealer macOS Stealer Evolves: Live C2-Side Decryption and Multi-Layer Persistence — Detection and Response Guide
Introduction Jamf Threat Labs has published new research on an evolved version of PamStealer, a macOS information stealer that has materiall...
Jade Sleet Breaches Indian IT Provider With FLATROOF and ROOFDECK Backdoors — Developer-Focused Detection and Hardening Guide
Introduction SentinelOne has attributed a fresh intrusion at an India-based IT services provider to Jade Sleet, the North Korean state-align...
MacSync Stealer ClickFix Campaign: Fake CAPTCHA Terminal Commands Deploy Crypto-Draining Mach-O Payloads — OTX Pulse Analysis & Detection Pack
Threat Summary A live OTX pulse authored by AlienVault documents an active macOS stealer campaign attributed to the MacSync malware family, ...