Cyber CrimeAI Coding Assistant Now a Ransomware Weapon
Aurora ransomware actors use Cursor Agent AI to automate post-exploitation tasks, per Gambit Security research.
Cyber Crime
Data breaches, ransomware payouts, and phishing operations rarely make the news until the damage is already done. This is where Xploitwire tracks the attackers — who they are, how they got in, and what it means for the organizations and people caught in the blast radius.
Cyber Crime
Cyber CrimeTeamPCP arrests expose supply chain risk
Alleged masterminds of TeamPCP, tied to Shai-Hulud worm, arrested in Perth with FBI help.
Cyber CrimeCRPx0's big claims and where they lead
CRPx0's victim count rose from under 10 to 48 organizations since June, but experts urge caution over unverified claims.
Cyber CrimeUK Airport Group Data Breach Hits Pre-Holiday Travelers
MAG says customer data was stolen from its systems, warning of phishing risks ahead of peak travel.
Cyber CrimeNemoClaw Flaw Opens Local AI Agents to Browser-Based Attacks
A single website visit can hijack NemoClaw's local Ollama model server via DNS rebinding, according to new research.
Cyber CrimeTortoiseshell Expands Toolset With Backdoor, SSH Tunnel
Iran-linked Tortoiseshell adds reverse SSH tunneling and a C++ backdoor, with new infrastructure hinting at wider targeting.
Cyber CrimePhishing kit targets iPhone Lock screen
AnonyMousKIT uses AI calls to trick iPhone owners into giving up passcodes.
Cyber CrimeU.S. Sanctions Iran Cyber Actors in Financial Crackdown
Treasury targets Iran-linked hackers behind critical infrastructure breaches in 'Operation Economic Outcast'.
Cyber Crimenpm Mirrors Turned into Phishing Hosts
Attackers abuse npm mirrors to host HTML phishing pages, bypassing security filters by serving from legitimate domains.
Cyber CrimeSession Theft Threat Escalates as 4,532 Firms Targeted
Mirage2FA campaign hit 4,532 companies, bypassing MFA and stealing sessions.
Cyber CrimeGlobal Dragnet Hits West African Cybercrime Rings
Operation Jackal IV arrests 58, targets Black Axe syndicate across 22 countries over eight months.
Cyber CrimeFake Codex Site Lures macOS Users via Google Ads
Cato Networks found a campaign abusing Google Sites to spread macOS malware through ClickFix tactics.
Cyber CrimeTeams Helpdesk Scam Spreads SynkLoader Backdoor
Cybercriminals are using fake IT helpdesk messages on Microsoft Teams to deliver a new backdoor malware, researchers warn.
Cyber CrimeNotion, PDFs, and PaaS: Token Theft's New Shape
Threat actor Doubloon Dredger exploits Notion and device codes to steal authentication tokens, researchers say.
Cyber CrimeVenezuelan Gets Record Federal ATM Sentence
Juan Manuel Gouveia-Aguilera sentenced to 96 months for ATM jackpotting, with DOJ citing $3.5 million in losses.
Cyber CrimeAgent Tesla Variant Counters Detection With Emoji
New Agent Tesla v4 infostealer uses emoji obfuscation to evade detection and target finance departments.
Cyber CrimeRust Supply Chain Attack Tied to North Korea
Wiz links a crates.io compromise to Sapphire Sleet, warning of broad developer exposure.
Cyber CrimeMalicious Firefox Add-ons Target Web3 Wallets
Researchers found 40 malicious Firefox extensions impersonating Web3 products to steal wallet secrets.
Cyber CrimeManic malware taps nearby devices to steal data
New Android malware Manic can exfiltrate data through nearby infected devices using Wi-Fi Direct or Bluetooth.
Cyber CrimeCheap Criminal AI Service Resells Bypassed Models
Researchers find Kriminal AI service routes requests through Grok, Claude, and others via jailbreaks for as little as $12.99 a month.