
August 2026 Detection Highlights: 10 New VTIs, 50+ YARA Rules, 4 Config Extractors
Source: YouTube · VMRay · published Aug 27, 2026 · 33:28
VMware Labs debuts 10 new threat identifiers, 4 config extractors, and previews the H1 2026 threat landscape, highlighting Web3-based malware and the rise of identity attacks 2:47.
Key Takeaways:
• New VTIs detect Web3 dead drop C2 resolution (e.g., Air Traffic abusing Polygon smart contracts) and 4Pex botnet UDP peer-to-peer communication 4:30
• VTIs also flag multi-step redirect chains that obscure link destinations 5:35
• Three VTIs target phishing email patterns (urgency, brand impersonation, logo loading), plus "meta VTIs" detecting Sneaky 2FA and Tycoon 2FA kits 9:01
• New config extractors cover 4Pex, NetSupport, ScreenConnect, and Valyrian—legitimate remote tools frequently abused for initial access 12:31
• H1 2026 preview: ransomware stays dominant, identity compromises and exploits increasingly lead IR cases, and AI serves mainly to automate attacks, not run them autonomously 23:40
These updates expand visibility from blockchain-based malware to abuse of legitimate tools, with the full H1 2026 report coming soon.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
All right, good to see some folks jumping in. Thanks for joining us today. We're going to wait till the top of the hour and we'll go ahead and get started. Thanks everyone who's joined so far. We're going to give it another 2 minutes till the top of the hour and we will get started. So thanks for hanging out with us until then. All right, we'll give it one more minute here and we'll get started. Thanks everyone for joining today. All right, I have the top of the hour so we will go ahead and get started. Good morning, afternoon, and evening everyone. Thanks for joining us. I see some familiar faces today. It's always good to see everybody. Uh so welcome to our August 2026 iteration of the detection and highlights webinar. In this session, we're going to explore the latest detection innovati…