10 casos · pág. 1/1
The weekly InfoStealers report for 12-19 October 2026 summarises stealer-log telemetry on compromised machines, credentials and sessions. The United States ranks 8 by country of infection with 438 machines. Gmail is the most affected email provider with 1,225,748 users, followed by Hotmail (90,554) and Yahoo (33,493). Sessions and saved c…
Nikkei Inc. disclosed a third data breach in about a month, exposing 1.83 million records stored in the cloud. Attackers used stolen credentials to access a development system in the early hours of October 7. About 150,000 records contained at least one of: full names, email addresses, physical addresses, phone numbers or dates of birth, …
Symantec's Threat Hunter Team reports that new versions of the Aoki infostealer now target credential and session files used by AI coding assistants. Earlier versions focused on browser, cryptocurrency wallet and password manager data. Aoki is a relatively new and sparsely documented stealer, first observed earlier in 2026, and its AI-rel…
Episode 484 of the Smashing Security podcast, hosted by Graham Cluley with guest Danny Palmer, covers several security stories. The lead item is audio fingerprinting: a user named Matt found that an open AliExpress page, playing silent audio at zero volume, kept his multipoint Bluetooth headphones from switching to his phone. The episode …
Authorities in North Macedonia have filed charges against the alleged administrator of OLVX, a cybercrime marketplace that sold stolen personal data, credentials and malicious tools from 2023 to 2025. The suspect is a 20-year-old North Macedonian national, identified only as "E.A.", and is charged with computer fraud, misuse of personal d…
Huntress researchers identified a fake page impersonating the WatchGuard download portal that harvested VPN server addresses, usernames and passwords before offering the legitimate Mobile VPN with SSL installer. The investigation began after suspicious activity involving an administrator at a managed service provider (MSP), who found the …
Microsoft, working with industry partners and Japanese police, disrupted a Chinese-language phishing-as-a-service (PhaaS) ecosystem centered on Yam Store, an underground marketplace tracked as Storm-3119. The phishing kits sold there were responsible for over a billion phishing emails and texts sent to more than 75,000 organizations since…
In late August 2026, Sekoia's TDR team observed an attacker compromise an unauthenticated Flowise honeypot (emulating v2.2.8). The attacker harvested stored credentials, tried to plant a malicious chatflow with a callback to 154.217.251.226, and used prompt injection to turn the LLM agent into an offensive analysis assistant. The activity…
CISA ran concurrent red team assessments at two organizations: Organization A (Government Services and Facilities) and Organization B (Water and Wastewater Systems). Both reached full domain compromise and accessed sensitive business systems (SBSs) and cloud resources. Organization A did not detect or contain the activity. Organization B …
A modular phishing campaign targets YouTube creators with personalized sponsorship offers from fake brand representatives. One variant impersonates Hollyland, a maker of wireless video transmission equipment, and also Nike and Spotify. Victims are led through a convincing fake collaboration platform to a bogus "Sign in with Google" page t…
