/
ttps_attack:T1555.001 × victim_sectors:"software development" × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · medium

Sponsored analysis: stolen GitHub tokens, ClickFix lures for Claude Code and help desk vishing enable data theft within minutes

A vendor-sponsored analysis by Exaforce (published on bleepingcomputer.com) says attackers are enumerating or exfiltrating data within about 15 minutes of gaining access. It describes three patterns: stolen developer GitHub OAuth tokens, ClickFix lures that impersonate Claude Code install instructions to deliver a macOS stealer, and help …

Scattered Spider technology software development
securelist.com · high

MacSync macOS stealer returns with binary droppers, iCloud calendar staging and a backdoor targeting crypto users and developers

Kaspersky researchers describe a new MacSync macOS infostealer variant, first seen in the wild in September 2026, that replaces the earlier AppleScript-based droppers with FAT Mach-O binaries written in Objective-C and Swift. MacSync is sold as malware-as-a-service, so delivery varies by operator. In this campaign it spread through malici…

cryptocurrency software development