Security Insights

Latest threat analysis, industry news, and security best practices from our expert team.

Has:
telegram-c28 articles
Sep 30, 2026

Carbonato Botnet Deploys AI Agent on Hacked Docker Hosts — Detection and Hardening Guide

Introduction A botnet tracked as Carbonato is actively compromising internet-exposed Docker hosts and doing something we haven't seen at sca...

criticalzero-daycve
Vulnerability ManagementRead Now
Sep 28, 2026

Carbonato Botnet Hijacks Exposed Docker Daemons to Deploy Telegram-Controlled Hermes AI Agent — Detection and Remediation Guide

Introduction ThreatDown researchers have disclosed a new compromised-device network tracked as Carbonato that is actively scanning for and c...

criticalzero-daycve
Vulnerability ManagementRead Now
Sep 18, 2026

MovieReaper Torrent Loader, HEAVYGRAM Telegram Backdoor & Fake HTS Ransomware: OTX Pulse Analysis — Enterprise Detection Pack

Threat Summary Three concurrent OTX pulses published on 2026-09-18 reveal a converging threat landscape where commodity criminal tooling, su...

darkwebotx-pulsedarkweb-malware
Darkweb MalwareRead Now
Sep 15, 2026

Iranian Telegram-Controlled Spyware Targeting Dissidents and Journalists: Detection and Defense Guide

Iranian State Spyware Uses Telegram as C2 — What Defenders Need to Know Now Cybersecurity agencies from the United States, the United Kingdo...

sigma-rulekql-detectionthreat-hunting
SOC & MDRRead Now
Jul 27, 2026

TELESHIM & BINDCLOAK: Defending Against Telegram C2 Attacks in Government Sectors

TELESHIM & BINDCLOAK: Defending Against Telegram C2 Attacks in Government Sectors Introduction Security operations centers (SOCs) supporting...

managed-socmdrsecurity-monitoring
SOC & MDRRead Now
Jul 25, 2026

Y2K Operators: Millenium RAT v4 (C++) Telegram C2 Campaign — OTX Pulse Analysis

Threat Summary Analysis of OTX Pulse data reveals the Y2K Operators threat group actively utilizing Millenium RAT v4, a Remote Access Trojan...

darkwebotx-pulsedarkweb-apt
Darkweb AptRead Now
Jul 21, 2026

TELESHIM, MIXEDKEY, BINDCLOAK: Targeted Middle East Government Attack — OTX Pulse Analysis

Threat Summary In July 2026, AlienVault OTX detected a sophisticated, multi-stage malware campaign specifically targeting government entitie...

darkwebotx-pulsedarkweb-malware
Darkweb MalwareRead Now
Apr 18, 2026

Runningcrab Supply Chain & LeakNet Ransomware: Speagle Infostealer, Deno Loaders & Telegram C2 Analysis

Intelligence Briefing Threat Summary Recent OTX pulses indicate a surge in diverse cyber-espionage and ransomware activities utilizing advan...

darkwebotx-pulsedarkweb-apt
Darkweb AptRead Now