Cyber CrimeNewn0n's AI habit cost $7K, leaked its playbook
A newcomer extortion crew used AI to script attacks on 23 organizations, then left its own server wide open for researchers to read.
> Search
29 results for “credential theft”
Cyber CrimeNew
Cyber CrimeGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
Cyber CrimeAI Agent SDK Hit by Worm's Latest Strike
Shai-Hulud worm compromised Tensorlake's npm SDK version 0.5.144, stolen credentials and cloud keys at risk for developers.
Cyber CrimeASOS breach traced to impersonation tactic
ASOS says an employee's stolen credentials, obtained through social engineering, exposed names and contact details held on third-party platforms.
Cyber CrimeFake Firefox Wallets Target Recovery Phrases
Sixteen malicious Firefox extensions cloned Rabby and OKX wallet interfaces to intercept recovery phrases and private keys, researchers say.
CloudAWS Agent Flaws Expose Control Gap
Repeated AWS agent security fixes that later resurfaced show the tension between agent autonomy and isolation, researchers say.
Cyber CrimeFortiBleed Credential Theft Still Active, FBI Says
The FBI and Secret Service say the FortiBleed campaign remains active, with 86,644 Fortinet device credentials amassed across 194 countries.
Cyber CrimeZimbra Bug Exploited for Mailbox Theft
Microsoft says attackers chained a patched Zimbra command-injection flaw into web shells, credential theft and cloud exfiltration.
SecurityRogue MFA Provider Can Siphon Passwords
Researchers show how a compromised Entra admin account can turn a trusted external MFA provider into a credential-stealing prompt.
Cyber CrimeFake Twilio npm Probe Hid Credential Theft
Researchers say a package posing as an authorized Twilio bug-bounty probe went through 11 versions before trying to exfiltrate API credentials.
AI & MLAI malware cuts humans out of C2 loop
Cisco Talos says it has identified CLOSEDQUORUM, a proof-of-concept implant that uses an LLM panel to drive an attack without a live operator.
Cyber CrimeSigned Driver, Dead AV: A Fake LastPass Trap
A counterfeit GitHub installer for LastPass Authenticator loads a Microsoft-signed kernel driver that kills security tools before stealing passwords.
Cyber CrimeRust Developers Hit by Fake Job Call Scam
Rust team members and crate owners are being targeted by attackers who pose as recruiters to hijack credentials and push malicious packages.
Cyber CrimeRatHat Android Trojan Turns to GenAI
A new Android malware family linked to suspected China-based actors uses a generative AI engine to automate credential and bank data theft.
Cyber CrimeKREMLIN Malware Hijacks Chrome and Edge
Elastic Security Labs details a Brazilian banking malware toolkit that abuses browser extension installs and Ethereum smart contracts to steal credentials and sessions.
AI & MLAI assets become prime targets for attackers
Google's threat intelligence unit reports that espionage and criminal groups are stealing models, prompts, and API keys to power their own AI operations.
Cyber CrimeTwitch Extension Token Leak Hits 31K Users
A cross-store Twitch extension sent OAuth tokens for roughly 31,000 users to operator proxies, Socket reports.
SecurityPhishing Tests Miss What Happens After the Click
New Pistachio research argues click rate alone misleads, and that credential leaks and reporting matter just as much.
SecurityPaperCut Attacks Target Education Sector
Attackers exploit two PaperCut flaws to steal credentials from schools and universities in the U.S. and Europe.
SecurityAndroid Banking Trojans Gain On-Device Fraud Tools
ToxicPanda 2.0 and GoldDigger expand targets with automated fraud and credential theft.
SecurityMLflow SSRF Flaw Exploited for Cloud Credential Theft
Attackers are exploiting critical MLflow and FUXA vulnerabilities to steal cloud credentials and execute code.
SecurityAmnesiaStealer Browser Hijack Raises Stakes for macOS
New macOS infostealer AmnesiaStealer combines credential theft with silent remote browser control, researchers report.
SecurityFake CCleaner sites push Chrome spyware
Malwarebytes finds fake CCleaner downloads installing GhostDesk Chrome extension for credential theft and surveillance.
Cyber CrimeInsurance Phishing Pivots to Real-Time
New research details how threat actors are ditching delayed credential harvesting for live, session-based account hijacking.
SecurityBudibase REST Datasource Credential Theft
A critical vulnerability in Budibase allows unauthenticated attackers to steal stored REST datasource credentials via a cross-origin request leak.
SecurityNadMesh Botnet Turns AI Tools Into Hooks
A newly identified Go-based botnet is pivoting from simple compute-hijacking to harvesting cloud credentials from exposed AI services.
Cyber CrimeJob Search Lures Hide Stealthy Malware
North Korean threat actors are using fake coding tests and steganography to compromise developer systems and steal sensitive data.
SecurityThe Paste-and-Run Malware Trap
ACR Stealer exploits user-executed commands to siphon session tokens and files, bypassing traditional software vulnerabilities.
SecuritySupply Chain Breach Targets npm Ecosystem
Compromised AsyncAPI and Jscrambler packages expose developers to credential theft via automated malicious injection.