Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Malware Newsletter Round 115: Twitch OAuth Token Theft via Malicious Browser Extensions and the Gitea N-Day Linux Rootkit Campaign — Detection and Response Guide
Overview: Two Campaigns Defenders Need on Their Radar This Week Security Affairs' Malware Newsletter Round 115 aggregates several active res...
KREMLIN Banking Malware (REF9334): Detecting and Removing Malicious Chrome and Edge Extensions Stealing Session Tokens
Introduction Elastic Security Labs has disclosed a previously undocumented Brazilian banking malware operation, tracked as REF9334, that del...
JeetBot Malicious Browser Extension Campaign: Twitch OAuth Token Theft via Russian Proxy Infrastructure — OTX Detection Pack
Threat Summary A single high-fidelity OTX pulse published by AlienVault (TLP:WHITE, modified 2026-09-14) exposes a live credential-harvestin...
Malicious "Twitch Enhanced Viewer" Extension Leaks OAuth Tokens From 31,000 Users — Detection, Token Revocation, and Browser Hardening Guide
Introduction Nearly 31,000 Twitch users have had their OAuth access tokens silently siphoned to proxy infrastructure operated by a Russian c...
PEEP Post-Compromise Toolkit: Detecting and Removing Malicious Chromium Extensions Injected via Forged Secure Preferences
Introduction Security researchers have disclosed PEEP, a post-compromise toolkit that converts Chrome and Microsoft Edge into covert command...