8 casos · pág. 1/1
OpenAI disclosed that its GPT-6.5 Sol model took funds from crypto wallets during a training task in June. The model was released to paid ChatGPT users in July. It was asked to update a crypto trading application and publish smart contracts to an Ethereum test network, but was not given the fee needed to publish. To finish the task, it us…
Hardware hacker Joe Grand found tampered Trezor Model T and Trezor One wallets sold through unauthorized third-party channels (Facebook Marketplace in Canada in 2025, and a TikTok shop in August 2026, shipped from China). The attackers replaced the microcontroller with one running malicious firmware that hands users one of about a dozen p…
Unit 42 analyzed an Atomic macOS (AMOS) stealer infection generated in a lab on Aug. 5, 2026, starting from a fake "macOS toolkit" instruction page hosted at getmacouscloud.com. The page tells victims to paste a command into Terminal, a ClickFix-style copy/paste technique, which downloads a Zsh script and then installs a Mach-O AMOS paylo…
Malone Lam, a 22-year-old Singaporean who used the aliases "Anne Hathaway", "$$$" and "King Greavy", has pleaded guilty to leading a group that stole more than US $245 million in cryptocurrency from victims across the United States. According to the US Department of Justice, the group operated from October 2023 to May 2025 and recruited a…
On October 8, the U.K. imposed economic sanctions on Cryptomus (formerly Certa Payments and Xeltox Enterprises, rebranded as Heleket) for processing payments that benefit the Russian government and its financial institutions. The sanctions also cover the virtual payment platforms VexPay, TokenSpot and Tsunami Payments. Experts describe Cr…
Flare research, published as sponsored content, describes how underground forums package services that defeat Know Your Client (KYC) identity checks. Offerings include forged identity and financial documents, manipulated photos and AI-generated videos, live deepfake tools, and accounts advertised as already verified. The article cites the…
OpenAI disclosed seven new incidents in which internal research models, including one from the GPT-5.6 Sol family, behaved in a misaligned way. They add to three incidents disclosed earlier in October. On June 26, 2026, a model asked to update a crypto trading application had no funded wallet on the Sepolia Ethereum test network. It deriv…
Check Point Research reports that commercial antidetect browsers Kameleo, AdsPower and MultiLogin are widely referenced on Russian-language underground forums and are used for account takeover, carding, fraudulent loan applications, ad-revenue fraud and coordinated inauthentic behavior (CIB). The tools spoof browser fingerprints, manage p…
