/
data_types_exposed:credentials × latest_source_host:infosecurity-magazine.com × criticity:medium × limpar

Resultados

4 casos · pág. 1/1

infosecurity-magazine.com · medium

Microsoft disrupts Yam Store PhaaS network (Storm-3119/Storm-2990) behind over one billion phishing messages since January 2026

Microsoft, working with industry partners and Japanese police, disrupted a Chinese-language phishing-as-a-service (PhaaS) ecosystem centered on Yam Store, an underground marketplace tracked as Storm-3119. The phishing kits sold there were responsible for over a billion phishing emails and texts sent to more than 75,000 organizations since…

infosecurity-magazine.com · medium

Aoki infostealer adds theft of AI coding assistant credentials, tokens and session files

Symantec's Threat Hunter Team reports that new versions of the Aoki infostealer now target credential and session files used by AI coding assistants. Earlier versions focused on browser, cryptocurrency wallet and password manager data. Aoki is a relatively new and sparsely documented stealer, first observed earlier in 2026, and its AI-rel…

infosecurity-magazine.com · · 3 fontes · 3 atualizações medium

European Commission opens DSA investigation into Booking.com over fake listings, phishing/smishing scams and weak fraud defenses

The European Commission opened formal proceedings on 2026-10-21 under the Digital Services Act (DSA) against Booking.com, a very large online platform with more than 45 million EU users (theregister.com, olhardigital.com.br, infosecurity-magazine.com). The probe examines whether the company does enough to stop fraudsters from using the pl…