Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Malicious Custom GPTs Weaponize ChatGPT and Google Domains in ClickFix RAT Campaign — Detection and Hardening Guide
A Trusted Domain Is the New Phishing Page Security researchers have uncovered an active ClickFix-style campaign in which threat actors abuse...
ClickFix Lures via ChatGPT Custom GPTs: Defending Against RAT Delivery Through Abused AI Platform Features
When Trusted AI Platforms Become the Lure In late September 2026, Huntress published findings on a campaign that should concern every organi...
Supply Chain Attack: Cross-Platform RAT via Malicious npm Packages Targeting Alibaba Tools
Supply Chain Attack: Cross-Platform RAT via Malicious npm Packages Targeting Alibaba Tools Introduction Security Arsenal is tracking an acti...
ValleyRAT Resurgence: SilverFox Fake Installer Campaigns & BYOVD Techniques
Threat Summary Recent OTX pulse data indicates a significant resurgence in SilverFox activity, utilizing the ValleyRAT malware family. Detec...
Supply Chain Attack: lib-mtop & aone-cli RAT Cluster — OTX Pulse Analysis
Threat Summary A sophisticated supply chain attack has been detected targeting the software development ecosystem, specifically focusing on ...
Compromised @joyfill npm Packages Delivering DEV#POPPER RAT — Detection and Remediation Guide
Compromised @joyfill npm Packages Delivering DEVPOPPER RAT — Detection and Remediation Guide Introduction A concerning supply chain attack i...
AsyncRAT & Remcos RATs + BabaDeda Loader: Multi-Stage Phishing & ClickFix Campaigns — Enterprise Detection Pack
Threat Summary Recent intelligence from the AlienVault OTX community highlights two active and sophisticated malware distribution campaigns ...
Dolphin X RAT: Defending Against AI-Driven Victim Profiling and Target Prioritization
Dolphin X RAT: Defending Against AI-Driven Victim Profiling and Target Prioritization Introduction The commoditization of cybercrime continu...
SectopRAT & StealC: Claude AI Malvertising and Supply Chain CRM Theft
SectopRAT & StealC: Claude AI Malvertising and Supply Chain CRM Theft Excerpt: Active malvertising pushes SectopRAT via Claude AI lures; Sup...