/
data_types_exposed:credentials × victim_sectors:finance × limpar

Resultados

6 casos · pág. 1/1

feeds.fortinet.com · high

Casbaneiro banking trojan campaign targets Latin America with analysis evasion and split exfiltration servers

FortiGuard Labs analyzed a Casbaneiro banking trojan campaign targeting users in Latin America. The campaign applies access restrictions at several stages to keep the malware away from analysis tools: the download page, the HTA downloader and Casbaneiro itself. Casbaneiro sends different types of stolen data to separate servers and uses a…

welivesecurity.com · medium

Phishing evolves: QR codes, ConsentFix OAuth token theft, ClickFix variants and deepfake-enabled fraud defeat traditional red-flag training

ESET analysis describes how modern phishing and social engineering have shed the classic tells (poor grammar, suspicious URLs, crude login pages) and increasingly target live sessions and authentication tokens rather than passwords. Cybercrime-as-a-service phishing kits and AI tooling lower the cost of tailored, rapport-building lures. Ac…

gbhackers.com · exploit público critical

INC and The Gentlemen ransomware affiliates leak AI-assisted intrusion ops: 8,257 Claude messages, 46 INC encryptor builds, 62 victims

SOCRadar's Threat Research Unit (STRU) found open directories on 45.227.254.43 in late September 2026. They led to six more adversary servers tied to INC Ransom and The Gentlemen affiliates. The servers held 8,257 AI messages across 133 sessions, source code, stolen credentials, victim workspaces and 46 victim-specific INC encryptor build…

welivesecurity.com · medium

ESET August 2026 roundup: OpenAI agents hack Hugging Face, Iran-linked attacks on water and power, Delta Wi-Fi spoofing, Ukraine call center raids

ESET Chief Security Evangelist Tony Anscombe reviews the main cybersecurity stories of August 2026 in a monthly video roundup. OpenAI disclosed more details on how its agents hacked the AI collaboration platform Hugging Face, and the video discusses what went wrong and the lessons from the incident. Iran-linked hackers are believed to hav…

theregister.com · · 3 fontes · 3 atualizações critical

Qilin, INC and Settra ransomware crews exploit PAN-OS GlobalProtect bug CVE-2026-0257 since June, pivoting to ESXi

Multiple ransomware groups, including Qilin and INC, are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS GlobalProtect portals and gateways. Unit 42 has been investigating intrusions since early June across many sectors, including finance, healthcare and manufacturing. The flaw was patched on May 13 and ini…