Tag: victims

  • The Register: ‘FileFix’ attacks use fake Facebook security alerts to trick victims into running infostealers

    Source URL: https://www.theregister.com/2025/09/16/filefix_attacks_facebook_security_alert/ Source: The Register Title: ‘FileFix’ attacks use fake Facebook security alerts to trick victims into running infostealers Feedly Summary: Tech evolved from PoC to global campaign in under two months An attack called FileFix is masquerading as a Facebook security alert before ultimately dropping the widely used StealC infostealer and malware downloader.……

  • The Register: More packages poisoned in npm attack, but would-be crypto thieves left pocket change

    Source URL: https://www.theregister.com/2025/09/09/npm_supply_chain_attack/ Source: The Register Title: More packages poisoned in npm attack, but would-be crypto thieves left pocket change Feedly Summary: Miscreants cost victims time rather than money During the two-hour window on Monday in which hijacked npm versions were available for download, malware-laced packages reached one in 10 cloud environments, according to Wiz…

  • Schneier on Security: Generative AI as a Cybercrime Assistant

    Source URL: https://www.schneier.com/blog/archives/2025/09/generative-ai-as-a-cybercrime-assistant.html Source: Schneier on Security Title: Generative AI as a Cybercrime Assistant Feedly Summary: Anthropic reports on a Claude user: We recently disrupted a sophisticated cybercriminal that used Claude Code to commit large-scale theft and extortion of personal data. The actor targeted at least 17 distinct organizations, including in healthcare, the emergency services,…

  • Slashdot: FBI Warns Chinese Hacking Campaign Has Expanded, Reaching 80 Countries

    Source URL: https://it.slashdot.org/story/25/08/27/1644221/fbi-warns-chinese-hacking-campaign-has-expanded-reaching-80-countries?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: FBI Warns Chinese Hacking Campaign Has Expanded, Reaching 80 Countries Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant Chinese-government hacking campaign that has affected various industries and numerous organizations globally, including U.S. telecommunications. This situation raises concerns about privacy violations and security implications for…

  • Unit 42: Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth

    Source URL: https://unit42.paloaltonetworks.com/attackers-sell-your-bandwidth-using-sdks/ Source: Unit 42 Title: Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth Feedly Summary: A campaign leverages CVE-2024-36401 to stealthily monetize victims’ bandwidth where legitimate software development kits (SDKs) are deployed for passive income. The post Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth…