/
authors:[email protected] × limpar

Resultados

5 casos · pág. 1/1

research.checkpoint.com · · 2 fontes · 2 atualizações medium

Check Point: AI-integrated antidetect browsers (Kameleo, AdsPower, MultiLogin) fuel account takeover, fraud and influence operations

Check Point Research reports that commercial antidetect browsers Kameleo, AdsPower and MultiLogin are widely referenced on Russian-language underground forums and are used for account takeover, carding, fraudulent loan applications, ad-revenue fraud and coordinated inauthentic behavior (CIB). The tools spoof browser fingerprints, manage p…

blog.checkpoint.com · medium

Leak site 'The Luna Moth Files' claims to expose internal Silent Ransom Group (Luna Moth) extortion operations material

Around October 5, 2026, an anonymous onion site called The Luna Moth Files claimed to expose internal material from Silent Ransom Group (SRG), also tracked as Luna Moth and UNC3753. The purported archive includes chat exports, a vishing document, screenshots and a purported fake employee résumé. The publisher and the way the archive was o…

blog.checkpoint.com · high

Check Point Research discloses two high-risk LiteLLM LLM gateway flaws, CVE-2026-35029 and CVE-2026-59823

Check Point Research disclosed two high-risk vulnerabilities in LiteLLM, the open source LLM gateway that organizations use to connect applications to AI providers such as OpenAI, Google and Anthropic. The project is widely deployed, with about 97 million downloads per month and over 59,000 GitHub stars. CVE-2026-35029 let any user, inclu…

blog.checkpoint.com · medium

Check Point uncovers multi-region phishing infrastructure hiding live campaigns behind blank 404 pages across thousands of rotating domains

Check Point Exposure Management researchers uncovered a large, multi-region phishing infrastructure that conceals active campaigns behind domains that look inactive. Root domains return blank or generic "Not Found" pages, while the phishing content is served only through concealed regional paths (for example /it, /de, /pa) and under speci…

blog.checkpoint.com · medium

Q3 2026 brand phishing: Microsoft hits 33% of impersonation; lures target Claude, Antigravity, Apple, Docusign users

Check Point Research's Q3 2026 Brand Phishing Report finds Microsoft was the most impersonated brand, at 33% of all attempts (up from 23% in Q2) and roughly four times the share of any other brand. Apple, Google, LinkedIn and Amazon completed the top five, together accounting for more than half of attempts. Dropbox (up ten places to eight…