Threat Research

Malicious OpenClaw Skills Used to Distribute Atomic macOS Stealer describes a campaign in which threat actors shifted Atomic (AMOS) Stealer from cracked software distribution to a supply chain-style attack targeting AI agentic workflows on platforms like OpenClaw....

UNC5142 is a financially motivated threat actor known for distributing infostealers such as ATOMIC, VIDAR, LUMMAC.V2, and RADTHIEF using a technique called EtherHiding, which involves storing malicious code within smart contracts on the BNB Smart Chain to evade traditional detection methods....

We’ve observed a growing wave of attacks targeting macOS users across various regions and industries. Our research highlights three prominent macOS infostealers—Poseidon, Atomic, and Cthulhu—responsible for exfiltrating sensitive credentials, financial data, and intellectual property, often leading to breaches and financial losses....