5 min read
ThreatBook Research Team: 6 April 2026, 12:04 AM
Overview TA558 (also known as "SteganoAmor") is a financially motivated cybercriminal organization that has been active since 2018. Its attacks are centered on Latin America and have spread to North America, Western Europe, Russia, and numerous...
Read More
4 min read
ThreatBook Research Team: 1 April 2026, 12:04 AM
Regarding yesterday's Axios npm supply chain poisoning incident, ThreatBook has conducted in-depth sample analysis and attack tracing. Drawing on...
3 min read
ThreatBook Research Team: 31 March 2026, 02:03 PM
Axios — one of the most foundational dependencies in the JavaScript ecosystem, with over 3.6 billion annual downloads — was compromised on npm on...
3 min read
ThreatBook Research Team: 25 March 2026, 03:03 PM
On March 24, 2026, ThreatBook Research Team detected a large-scale supply chain attack targeting LiteLLM — a core component widely used across the AI...
2 min read
Nicholas Tan: 24 March 2026, 08:03 AM
A security director at a mid-sized enterprise came to us recently with a question that sounds simple but turns out to be surprisingly hard to answer:...
3 min read
ThreatBook Research Team: 20 March 2026, 08:03 AM
ThreatBook Research and Response Team has identified and tracked an organized threat group conducting a large-scale malware distribution campaign...
3 min read
ThreatBook Research Team: 20 March 2026, 08:03 AM
This is the full technical companion to our campaign overview published in Part 1. It documents the Windows and macOS malware chains in detail, and...
2 min read
ThreatBook Research Team: 18 March 2026, 08:03 AM
Last week, ThreatBook's endpoint detection product, OneSEC EDR, identified and fully captured an active attack targeting OpenClaw users. The attack...
3 min read
ThreatBook Research Team: 16 March 2026, 12:03 AM
The Threat Landscape An Open Economy, an Outsized Target Singapore's unique geographic position and economic standing have made it a frontline...
2 min read
ThreatBook Research Team: 16 March 2026, 12:03 AM
The Threat Landscape A City Built on Commerce — and Cross-Border Risk Hong Kong's cyberattack landscape reflects the city's unique position. Unlike...