3 casos · pág. 1/1
On October 5, 2026, the RubyGems account reqthrottle3474 published 42 malicious gems within about an hour. Most are named for cryptocurrency developer tooling (e.g. eth-keystore-utils, bip39-wordlist-utils, btc-wallet-tools), and the last 16 typosquat real gems (bitcion, etheremu.rb, kecack, solaan-ruby). The code runs during gem install …
SentinelOne reports observing APT29 (Midnight Blizzard / Cozy Bear, Russia's SVR) running the CaptiveCrunch campaign, disclosed by Microsoft in July 2026, across multiple customer environments in three regions. The operation abuses captive-portal behaviour and forged name resolution to push fake browser updater downloads to roaming Window…
ESET documented an intrusion at a Ukrainian grain logistics company in which UAC-0099 (aka Earth Sirrush, per thehackernews.com) gained initial access on July 16, 2025 through a spearphishing email with a malicious attachment, then handed access to Sandworm. Sandworm wiped data on September 17, 2025, more than two months after the first f…
