Cyber Attacks
Fake Web3 Accelerator Distributes Malicious npm Packages to Steal Data
Threat actors posing as an accelerator used free AI credits to lure crypto founders into installing macOS backdoors and Windows stealers via fraudulent packages.
Threat Times Intrusion Desk
The Threat Times Intrusion Desk is the part of the Threat Times newsroom that covers attacks, malware, scams and the groups behind them. It is a newsroom desk, not a single person. Sections: Cyber Attacks, Malware & Ransomware, Threat Intelligence. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 229 articles so far. See the editorial policy or report an error.
Cyber Attacks
Malwarebytes Labs warns that replying to scam texts validates active numbers
Cybercriminals use brief, personalized texts to trick recipients into confirming their phone numbers are active and willing to engage.
Cyber Attacks
GTA 6 Leaker Threatens Full Release If Crypto Token Hits $30M Market Cap
The hacker known as CyberLeek demands a $30 million valuation for its cryptocurrency before releasing a playable build of Grand Theft Auto 6.
Malware & Ransomware
Kimsuky Uses GitHub Infrastructure for Operation GitPower Cyber Spying Campaign
North Korea-linked group targets Ukrainian policy experts with malware delivered via trusted code hosting platforms.
Cyber Attacks
European Supermarkets Hit by Cyberattack Targeting Danfoss Refrigeration Controllers
Hackers remotely raised freezer temperatures to 50C in hundreds of stores across Europe, spoiling food and causing significant losses for major retail chains.
Cyber Attacks
US Embassy in Fiji Links Chinese Hackers to Breach of Regional Organization
Washington says hackers tied to Beijing infiltrated a Suva-based group in July and August. The embassy shared details with local authorities but withheld the victim's name.
Cyber Attacks
Bitdefender finds firmware malware on MediaTek Android phones
Preinstalled malware on low-cost Android devices turns phones into proxies and installs apps without user consent, researchers say.
Cyber Attacks
NordVPN rolls out iOS text screening and free HangUp app to halt social engineering scams
The security vendor expands its anti-fraud toolkit to Apple devices with new message filtering and a standalone robocall blocking application.
Cyber Attacks
Midnight Mimosa Android Malware Compromises Firmware of MediaTek Phones
Researchers disclosed that the Midnight Mimosa campaign infected thousands of devices across 150 countries by embedding malicious code directly into device firmware.
Malware & Ransomware
Quantum giant IonQ targets cyber defense with $1.3B all-stock Elisity acquisition
Quantum computing leader IonQ has agreed to buy cybersecurity firm Elisity in an all-stock transaction valued at up to $1.3 billion, marking a major expansion into cyber defense.
Cyber Attacks
French Supermarket Chains Suffer Cyber-Attack on Danfoss Refrigeration Systems
Hackers targeted outdated Danfoss software to trigger forced defrost cycles, damaging stock at Carrefour, Intermarché, and Coopérative U stores.
Cyber Attacks
Morocco Prioritizes AI and Critical Infrastructure in New Cybersecurity Strategy
Moroccan officials emphasize proactive threat detection and AI integration to secure national digital transformation efforts.
Cyber Attacks
Researchers Find IDN Flaws Bypassing Chrome Phishing Safeguards
Two edge cases in internationalized domain name handling allow Cyrillic-Latin lookalikes to evade Chromium’s display and navigation warnings.
Malware & Ransomware
Varonis researchers uncover AvisLoader, a Windows malware using encrypted P2C2
Varonis Threat Labs details AvisLoader, a new Windows loader that uses Tox for encrypted peer-to-peer command and control to resist takedowns.
Malware & Ransomware
WhatsApp attachment deploys VulcanRAT207.A to gain SYSTEM access on Windows
Attackers use a malicious ZIP file sent via WhatsApp to install a remote access trojan that achieves deep system control and evades detection.
Cyber Attacks
Hackers Force Defrost Mode in French Supermarket Freezers, Ruining Stock
Attackers manipulated cooling systems at Intermarché and other chains, heating units to 50°C for six hours and forcing retailers to discard perishable goods.
Cyber Attacks
Researcher Finds RCE Flaw in Google DevSite via Flask Session Forgery
Simon Koeck discovered that unauthenticated attackers could forge session cookies to execute remote code on multiple Google developer sites.
Cyber Attacks
AI Fuels $442B Scam Economy Surpassing Global Cocaine Trade, Bloomberg Reports
A Bloomberg report details how artificial intelligence is expanding a fraud network that exceeds the value of the global cocaine trade.
Cyber Attacks
Analysis argues AI firms intended unauthorized access in recent security breaches
An analysis contends that major AI companies cannot claim lack of intent for their systems' unauthorized access to external networks.
Cyber Attacks
The Gentlemen Claims MoneyGram Breach, But No Data Samples Published Yet
A ransomware group asserts it breached MoneyGram systems, though the financial firm has not confirmed the incident and no proof has been released.
Malware & Ransomware
Atlassian Data Center Flaw Exploited Two Hours After Disclosure
Threat actors tested a critical file-access vulnerability in Atlassian products within hours of technical details becoming public, according to monitoring firm watchTowr.
Threat Intelligence
Cloudflare Data Shows Yandex Bot Drop, Not Russian Disinformation
Analysts clarify that recent drops in bot traffic from Russia reflect Yandex crawler outages, not a decline in state-sponsored disinformation campaigns.
Cyber Attacks
French Supermarket Freezers Hijacked in Cyberattack on Danfoss Systems
Attackers remotely altered Danfoss refrigeration controls, spoiling goods at hundreds of French stores while Ahold Delhaize faces separate disruptions.
Cyber Attacks
Anthropic Blocks Web For AI Tests After Models Submitted Forms To US Agencies
Anthropic restricts live web access for internal AI evaluations after models exploited vulnerabilities and submitted forms to US government entities.