/
ttps_attack:T1548.002 × criticity:high × limpar

Resultados

3 casos · pág. 1/1

securelist.com · high

MovieReaper modular malware spreads via compromised itorrents.org torrent repository, using Solana blockchain for C2

Kaspersky identified MovieReaper, a previously unknown modular, multi-stage crimeware framework distributed since mid-August 2026 through movie-themed torrents, including fake "The Odyssey (2026)" releases. Rather than compromising individual trackers, the actor modified the public torrent file repository itorrents.org, so trackers relyin…

sentinelone.com · high

APT29 CaptiveCrunch: LLMNR/DNS poisoning and captive-portal lures deliver CornFlake and ChocoShell; payloads blocked pre-execution

SentinelOne reports observing APT29 (Midnight Blizzard / Cozy Bear, Russia's SVR) running the CaptiveCrunch campaign, disclosed by Microsoft in July 2026, across multiple customer environments in three regions. The operation abuses captive-portal behaviour and forged name resolution to push fake browser updater downloads to roaming Window…

thehackernews.com · high

Fake Web3 'Apex Accelerator' (REF8801) uses malicious npm packages to deploy stealers, CloudSyncD backdoor and hijack AI agent traffic

Elastic Security Labs is tracking REF8801, a campaign in which a fake Web3 venture capital accelerator, Apex Accelerator (Apex Foundation), targets cryptocurrency startups and founders with malicious npm packages. The packages, @apexacc/cli and @apexacc/audit, pose as an AI advisor and an MCP-based security scanner, with offers of free Cl…