Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Russian APT BlueDelta Uses HOOKEDGE to Target Defense and
BlueDelta, a Russian GRU-linked APT, uses HOOKEDGE malware to target European defense and diplomatic organizations, hiding traffic via webhook.
Dark Caracal Deploys GoCaracal Malware
Dark Caracal targets Venezuela with GoCaracal, an upgraded Bandook toolkit using Ethereum-based C2 fallback, per Arctic Wolf Labs.
Spark RAT Hits Cambodia via OPSWAT Driver Exploit
A campaign targets Cambodia with Spark RAT, using diverse lures and abusing a vulnerable OPSWAT driver to disable security tools.
GoCaracal Malware Uses Ethereum Smart Contract for C2
Arctic Wolf links GoCaracal to Dark Caracal, used in a June 2026 attack on a Venezuelan communications firm.
ICS Malware Block Rate Drops to 19.15% in Q2 2026
In Q2 2026, the share of ICS computers blocking malicious objects fell to 19.15%, the lowest since 2022, indicating a continued decline in threats.
Maliklang Package Added to PyPI
A package named maliklang has been added to PyPI. Details are limited due to a page loading error.
FBI seizes Chinese hacking tools used against NASA, Senate
The FBI disrupted a Chinese state-sponsored botnet and seized QScan and QTRouter platforms used to hack US agencies since 2018.
Dark Caracal Debuts GoCaracal Malware Framework
Dark Caracal has added GoCaracal, a modular malware framework, to its arsenal for data theft and persistent access.
Nimbus Manticore Adds Backdoor, SSH Tunneler
Researchers found new Nimbus Manticore malware, including a TWOSTROKE-like backdoor and SSH tunneler, expanding the Iranian APT's toolset.
Android Malware Targets Car Head Units via Updates
A click-fraud botnet is abusing legitimate update mechanisms to infect Android-based car infotainment systems, spreading malware to vehicles.
AI Malware: Faster Development, Low Success Rate
Palo Alto Networks Unit 42 analyzed 405 AI-linked malware samples, finding only 12 reached production endpoints, indicating AI speeds up development b
Iranian Group Tortoiseshell Adds Backdoor, SSH Tunnel
Iranian-linked threat actor Tortoiseshell has expanded its malware toolset with a new backdoor and reverse SSH tunneling utility, with infrastructure