Threat Overview We have identified a new threat report published by AlienVault on October 9, 2025. The report highlights the exploitation of Velociraptor, an open-source digital forensics tool, in ransomware attacks. This activity is attributed to
Continue ReadingBlog
BRICKSTORM Malware Facilitates Espionage in Tech and Legal Industries
Threat Overview The Google Threat Intelligence Group (GTIG) has recently identified a significant cyber threat known as BRICKSTORM malware. This advanced persistent threat (APT) is being used to maintain long-term access to victim organizations, primarily in
Continue ReadingWARMCOOKIE Malware Evolves With New Features After One Year
Threat Overview The cybersecurity landscape is constantly evolving, and one of the latest developments involves the WARMCOOKIE backdoor. Published by AlienVault on October 6, 2025, the threat report titled WARMCOOKIE One Year Later: New Features and
Continue ReadingInvestigating XWorm V6 Malware Variants
Threat Overview Published Date: October 6, 2025 Report Name: XWorm V6: Exploring Pivotal Plugins Confidence Level: 100% Reliability of the Report: A - Completely reliable Introduction The release of XWorm V6.0 on June 4, 2025, has
Continue ReadingXWorm V6 Malware Unveiled Exploring Key Plugins
Threat Overview On October 6, 2025, AlienVault published a comprehensive threat report detailing the emergence and rapid adoption of XWorm V6.0 malware. This report provides critical insights into the tactics, techniques, and procedures (TTPs) employed by
Continue ReadingCritical Oracle E Business Suite Vulnerability Alert CVE 2025 61882
Threat Overview A critical security vulnerability designated as CVE-2025-61882 has been identified in Oracle E-Business Suite versions ranging from 12.2.3 to 12.2.14. This alarming flaw presents a significant risk due to its ability to be exploited
Continue ReadingCyber Threats Exploit SEO Poisoning to Spread Malicious Microsoft Teams Installers
Threat Overview A newly published threat report by AlienVault on October 2, 2025, sheds light on a sophisticated cyber campaign that leverages SEO poisoning and malicious advertisements to distribute backdoored Microsoft Teams installers. This campaign is
Continue ReadingProactive Hardening Against UNC6040 Cyber Threats
Threat Overview A newly published threat report by AlienVault on October 1, 2025, sheds light on a significant cyber threat posed by the financially motivated group known as UNC6040. This analysis focuses on their sophisticated voice
Continue ReadingNew Syscall Hooking Method Targets Linux Kernel
Threat Overview A recently published threat report by AlienVault, titled FlipSwitch: a Novel Syscall Hooking Technique, sheds light on an advanced and stealthy method used to compromise Linux systems. This report, released on September 30, 2025,
Continue ReadingPhishing Campaign Using Browser In The Middle Techniques
Threat Overview The AlienVault threat report published on September 26, 2025, highlights a sophisticated phishing campaign leveraging Browser-in-the-Middle (BitM) pages. This campaign employs advanced tactics to intercept and manipulate browser traffic, potentially enabling attackers to harvest
Continue Reading