Security Insights

Articles, threat intel, community forums, and security simulation — all in one place.

Latest Articles

Threat analysis, detection techniques, and security operations guidance

Aug 26, 2026darkweb-malware

RMM Phishing Campaign (Fake CRA T4 / SSA Lures): Living-Off-the-Land RMM Abuse — OTX Pulse Detection Pack

Phishing operation impersonating CRA, SSA & Adobe delivers legitimate RMM tooling via password-protected archives; 46 countries hit, 45% US. Hunt now.

Aug 26, 2026darkweb-apt

AMOS Stealer + XMRig macOS ClickFix Crimekit: EtherHiding C2 on Polygon Blockchain — OTX Detection Pack

macOS ClickFix crimekit uses fake CAPTCHA AppleScript lures to drop AMOS stealer + XMRig miner, hiding C2 in Polygon smart contracts. High urgency for Mac fleets.

Aug 26, 2026darkweb-credentials

AMOS Stealer EtherHiding C2, EKZ Stealer via Fortinet CVE-2026-35616 & RecruitTrap OAuth Phishing: OTX Pulse Analysis — Enterprise Detection Pack

OTX pulses reveal AMOS/XMRig macOS ClickFix campaign with blockchain C2, EKZ Stealer deployed via Fortinet EMS CVE-2026-35616, and RecruitTrap credential phishing. Enterprise detection pack included.

Aug 26, 2026darkweb-ransomware

SHADOWBYT3$ Ransomware Gang: 3 New Victims Posted in 24 Hours — Agriculture, Tech & Education Targeting Analysis with Detection Rules

SHADOWBYT3$ posted 3 new victims in 24 hours spanning agriculture, technology, and education across Indonesia and the UK. Defenders should act on KEV-listed edge and RMM vulnerabilities now.

Aug 26, 2026soc-mdr

SLEEPWALKER Backdoor: Detecting Dormant DLL Implants Triggered by a Single Crafted Packet

A newly documented Windows implant hides in memory until one crafted packet arrives, then runs custom bytecode. Here's how to hunt and harden against it.

Aug 26, 2026healthcare