FEATURED INSIGHT
Fake download sites: from search results to remote control
Huorong investigated a repeatable campaign using lookalike software sites. Working applications conceal a background chain that loads malicious remote-control components.
THE SECURITY BRIEF
Security insights worth your attention
Recent and representative reports, from awareness to protection.
The hidden cost of free downloads: silent installs and homepage hijacking
Huorong traced homepage changes to wallpaper software bundled silently with the Jianpian player. A free download can introduce unwanted changes beyond the application itself.
Enterprise software control: managing applications with policy
Enterprise 2.0 offers software allowlists, blocklists and violation handling through behaviour management. Save and deploy the policy to the intended endpoints or groups.
The standby control center: continuity for endpoint management
When the primary center is unavailable after an outage or failure, an administrator can switch to a standby center so endpoints reconnect and remain managed.
Ransomware alert: files encrypted with the .ths extension
Huorong observed increased activity by ransomware that appends .ths to encrypted files. Investigated incidents involved gaining host access before deploying the payload.
A layered information stealer: staged loading and persistent collection
The analysed malware separates interference, encrypted packaging and data collection into modules to resist inspection. Distribution includes phishing messages and fake download sites.
Microsoft security updates for September 2026: planning remediation
Huorong compiled Microsoft's September security updates. Organisations can review affected products, identify exposed endpoints and schedule testing and patching.