4 casos · pág. 1/1
Infoblox links the long-running Help TDS traffic distribution system, active since at least 2017, to the Russian-language affiliate program Hotejka, assessed with high confidence to be a rebrand of the traffic monetization operation ROI777. Help TDS supplies PHP templates and a malicious WordPress plugin that affiliates install on comprom…
Infoblox attributes the long-running Help TDS traffic distribution system, active since at least April 2017, to Hotejka, a small Russian-language affiliate program that appears to be a rebrand of ROI777 (exposed in 2018). The TDS fingerprints visitors and redirects them to browser-lock tech support scams that push victims to call centers,…
Unit 42 Threat Intelligence published its overview of the top five initial access threat vectors observed in September 2026. Adversary activity relied heavily on external edge exploitation and identity compromise, with public-facing infrastructure and legitimate credential abuse as the primary footholds for intrusion campaigns. Social eng…
Researchers at Hacktron disclosed a vulnerability chain in Cluely, an Electron-based AI assistant that reads the user's screen and microphone. They found it in July 2025 and published in February 2026. The main window had no will-navigate handler, so a link in the AI's markdown response could navigate the whole app to an attacker-controll…
