/
ttps_attack:T1078 × victim_sectors:banking × limpar

Resultados

4 casos · pág. 1/1

olhardigital.com.br · high

SLIM SPIDER breaches Brazilian financial institution's cloud to steal credentials and stage mass unauthorized Pix transfers

CrowdStrike reports that the cybercriminal group SLIM SPIDER breached a Brazilian financial institution in late March 2026 to obtain credentials and information tied to digital assets. The group did not attack Pix or the Central Bank directly. It targeted the cloud environments that banks and fintechs use. CrowdStrike also recorded a 171%…

recordedfuture.com · · 2 fontes · 2 atualizações high

TAG-217 used AI tools (ARTEX, Claude Code, DeepSeek, Grok) in preparations linked to South Korean bank breaches affecting 68,000+

Recorded Future's Insikt Group tracks the actor behind the October 2026 intrusions into South Korean financial institutions as TAG-217, a suspected Chinese-speaking operator. It is not confirmed as state-backed (gbhackers.com). South Korea's Financial Services Commission (FSC) disclosed the attacks in early October (recordedfuture.com). P…

thehackernews.com · medium

Generative AI erodes behavioral email detection: Proofpoint details AI-crafted BEC, device-code phishing and real estate lure campaigns

Proofpoint reported at its Protect 2026 conference that generative AI is removing the behavioral tells (awkward language, reused templates, repeated infrastructure) that email filters have relied on. Attackers can now produce fluent, personalized, unique messages for each recipient, which weakens behavior-only detection. The vendor cites …

thehackernews.com · critical

Qilin and Settra exploit PAN-OS CVE-2026-0257; ThreatsDay roundup of new RATs, stealers, WordPress backdoor and Meta GitHub breach

Qilin and Settra ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass in PAN-OS GlobalProtect and Prisma Access disclosed in May 2026, according to ReliaQuest. Because access arrives through the victim's own VPN, it can resemble legitimate remote work and go unnoticed until credential theft, lateral movement, …