September 2026 Detection Highlights: 50+ YARA Rules, New Phishing Detections & Smart Link Detonation
Source: YouTube · VMRay · published Sep 29, 2026 · 35:27
VMRay's September Detection Highlights webinar covers seven new VTIs, Smart Link Detonation upgrades, config extractors, 50+ YARA rules, and a RedLine investigation exposing maritime BEC infrastructure 1:23.
Key Takeaways:
• New VTIs span the attack chain: tracking pixels and CAPTCHA-gated phishing kits pre-click; script downloads and high-risk TLDs at staging; fake image files and C2 beaconing on host 3:05
• Tracking pixels confirm live addresses; as they have legitimate uses, the VTI is heuristic and weighed with other indicators 5:02
• Smart Link Detonation now analyzes the real destination hidden behind a link's label 14:58
• New Metasploit and Amaterasu Stealer config extractors plus 50+ YARA rules cover 54 families, including 23 info stealers and three macOS stealers 16:01
• A single RedLine C2 fingerprint led to spear-phishing targeting South Korea's Kangrim Heavy Industries, exposing attacker-owned and fraudulent domains—BEC losses hit $2.77B in 2024 20:18
Malware was the entry point, but infrastructure was the story—blocking attacker domains at the email gateway defends against future waves. A 60-day Unique Signal trial is available 30:00.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
All right, I see we have some folks starting to join. Thanks everyone for jumping on today. We'll give it another minute or two here as other people jump in and go ahead and get started. Thanks for hanging out with us. See some folks still joining. Give it one more minute here and then we will get things going. Thanks everyone for joining today. All right. Awesome. I have the top of the hour. So, let's go ahead and jump into things. Thanks everyone for joining us today. Seeing a lot of familiar faces, which is awesome. So, welcome to our September Detection Highlights webinar. Today we're joined by Fadi everyone knows Fadi's been on several of these. He's our senior security product manager at VMware. We're excited to have him take us through the latest updates from the VMware Labs team. W…