Collaborate Disseminate
Research from Infoblox reveals a massive Click2SMS fraud scheme using fake CAPTCHAs and back button hijacking to trick victims into sending costly international texts. Continue reading Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts
Fake CAPTCHA ClickFix attack tricks users into running malicious commands, using cmdkey and regsvr32 to maintain persistence and avoid detection on Windows Continue reading New ClickFix attack Hides in Native Windows Tools to Reduce Detection Risk
GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools. Continue reading TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware
French police arrest HexDex hacker, a 20-year-old suspect accused of mass data theft and leaks targeting government, sports groups, and firms. Continue reading French Police Arrest HexDex Hacker Over Mass Data Theft and Leaks
New GoGra Linux malware linked to Harvester APT targets systems in South Asia, using fake PDFs and Microsoft APIs for covert command and control. Continue reading Harvester APT Expands Spying Operations with New GoGra Linux Malware
Cybersecurity researchers at Forcepoint uncover new indirect prompt injection attacks that use hidden website code to exploit AI assistants like GitHub Copilot. Continue reading Hackers Use Hidden Website Instructions in New Attacks on AI Assistants
Acronis reveals Mustang Panda is using an updated version of LOTUSLITE backdoor to target Indian banks and Korean diplomats. Learn how this DLL sideloading attack works. Continue reading Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor
Bluesky is back online after a roughly 24-hour DDoS attack disrupted services, with the Iran-linked 313 Team claiming responsibility and no data breach reported. Continue reading Bluesky Back Online After DDoS Attack, as Iran-Linked 313 Team Takes Credit
Microsoft vulnerabilities fall, but critical flaws double, BeyondTrust report highlights rising risk in Microsoft Office, Azure, and cloud systems. Continue reading Microsoft Vulnerabilities Drop, But Critical Flaws Double, Report Warns
Grinex exchange collapses after $13.7M breach, blames Western spies as Chainalysis flags possible exit scam and sanctions evasion network links claims. Continue reading Grinex crypto exchange shuts down, blames Western agencies for $13.7M breach