/
source_confidence:researcher_report × latest_source_host:blog.checkpoint.com × limpar

Resultados

6 casos · pág. 1/1

blog.checkpoint.com · medium

Aokigahara infostealer targets AI assistant sessions, Git, SSH and cloud credentials on developer endpoints

Check Point Research (CPR) analyzed Aokigahara, a newly observed infostealer seen in the wild that explicitly targets authentication files, session data and configuration files of AI applications and developer tools. Targeted tools include Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI and JetBrains AI Assist…

blog.checkpoint.com · medium

Scam campaign seeds fake airline and travel support numbers via PDFs on trusted sites, search results and Meta AI summaries

Check Point Exposure Management researchers identified a campaign that mass-produces fraudulent customer support PDFs and posts impersonating more than 20 travel brands, including airlines, travel agencies and transportation companies. The documents are uploaded to trusted university, government and commercial websites through public uplo…

blog.checkpoint.com · medium

Leak site 'The Luna Moth Files' claims to expose internal Silent Ransom Group (Luna Moth) extortion operations material

Around October 5, 2026, an anonymous onion site called The Luna Moth Files claimed to expose internal material from Silent Ransom Group (SRG), also tracked as Luna Moth and UNC3753. The purported archive includes chat exports, a vishing document, screenshots and a purported fake employee résumé. The publisher and the way the archive was o…

blog.checkpoint.com · medium

Election scams blur with genuine campaign outreach ahead of 2026 US midterms, with phishing, spoofing and exposed election-staff credentials

Check Point Exposure Management reports that fraudulent voter-registration messages and legitimate political outreach are converging ahead of the 2026 US midterms, making it harder for voters to tell real messages from fake ones. Between July and September, election offices in Rhode Island and Washington warned of fake emails and texts as…

blog.checkpoint.com · medium

Check Point uncovers multi-region phishing infrastructure hiding live campaigns behind blank 404 pages across thousands of rotating domains

Check Point Exposure Management researchers uncovered a large, multi-region phishing infrastructure that conceals active campaigns behind domains that look inactive. Root domains return blank or generic "Not Found" pages, while the phishing content is served only through concealed regional paths (for example /it, /de, /pa) and under speci…