Threat Research

Threat Research Blog

In-depth analysis of AI-enabled attacks, cloud-enabled attacks, web threats, and malware.

All AI Auth Botnet Cloud Command and Control Credential Theft Crypto Espionage Malware Phishing Ransomware Remote Access Social Engineering Supply Chain Vulnerability

AI Agents and the OAuth Trust Problem at Scale

AI Agents and the OAuth Trust Problem at Scale

June 11, 20266 min read

Malware Supply Chain

Shai-Hulud-Style npm Worm Hits @tanstack

May 12, 20262 min read

Vulnerability Malware

DirtyFrag: Two Kernel Bugs Give Root on All Major Linux Distros

May 8, 20262 min read

OpenClaw's Hologram: Fake Installer Ships Rust Infostealer

Malware Credential Theft

OpenClaw's Hologram: Fake Installer Ships Rust Infostealer

May 7, 202615 min read

Malware Supply Chain

Shai-Hulud Resurfaces: Intercom-client@7.0.4 Harvesting Github Credentials

April 30, 20261 min read

macOS ClickFix Campaign: AppleScript Stealers & New Terminal Protections

Malware Credential Theft

macOS ClickFix Campaign: AppleScript Stealers & New Terminal Protections

April 20, 20266 min read

From ClickFix to MaaS: Exposing a Modular Windows RAT and Its Admin Panel

From ClickFix to MaaS: Exposing a Modular Windows RAT and Its Admin Panel

April 6, 20268 min read

OpenClaw Trap: AI-Assisted Lure Factory Targets Developers & Gamers

Malware Supply Chain

OpenClaw Trap: AI-Assisted Lure Factory Targets Developers & Gamers

March 23, 202613 min read

Attackers Weaponize Signed RMM Tools via Zoom, Meet, & Teams Lures

Phishing Malware

Attackers Weaponize Signed RMM Tools via Zoom, Meet, & Teams Lures

February 12, 20263 min read

Malicious Bing Ads Lead to Widespread Azure Tech Support Scams

Malicious Bing Ads Lead to Widespread Azure Tech Support Scams

February 5, 20262 min read

OpenClaw/MoltBot/ClawdBot: The Risky Personal AI Agent and Netskope Protection

January 28, 20263 min read

Malware Supply Chain

Shai-Hulud 2.0: Aggressive, Automated, and Fast Spreading

November 26, 202526 min read