/
source_confidence:researcher_report × criticity:medium × latest_source_host:gbhackers.com × limpar

Resultados

3 casos · pág. 1/1

gbhackers.com · · 2 fontes · 2 atualizações exploit público medium

Chinese-speaking actor abuses Flowise honeypot to harvest secrets and use its LLM agent for recon against a gambling network's Nightingale server

In late August 2026, Sekoia TDR observed an attacker interact with an unauthenticated Flowise honeypot emulating v2.2.8. The attacker enumerated chatflows and stored credentials, created a rogue "System Status" chatflow with a callback to attacker infrastructure (154.217.251.226), and used prompt injection to turn the LLM agent into an of…

CVE-2025-59528 CVE-2026-41264 CVE-2024-31621 gambling ai_platforms
gbhackers.com · · 3 fontes · 3 atualizações medium

Check Point: AI-integrated antidetect browsers Kameleo, AdsPower and MultiLogin scale account takeover, fraud and influence operations

Check Point Research reports that commercial antidetect browsers, notably Kameleo, AdsPower and MultiLogin, are widely referenced on Russian-language underground forums and marketplaces. They are used for account takeover, payment card fraud (carding), fraudulent loan applications, ad-revenue fraud, bulk creation of fake accounts and coor…

social media e-commerce
gbhackers.com · medium

Flare analysis separates Scattered Spider, LAPSUS$ and ShinyHunters as distinct intrusion clusters within The Com

A Flare analysis argues that Scattered Spider, LAPSUS$ and ShinyHunters are distinct intrusion clusters within The Com, a decentralized, mostly English-speaking cybercriminal subculture, and not interchangeable names for one group. It describes SP1D3R HUNTERS (also called Scattered LAPSUS$ Hunters, SLH) as a shared brand and coordination …

Scattered Spider LAPSUS$