Cyber CrimeGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
> Search
9 results for “credential-theft”
Cyber Crime
Cyber CrimeChina-Linked TA419 Hits US AI Policy Experts
Proofpoint attributes credential phishing targeting US AI policy experts to China-aligned TA419, which impersonated figures including an Anthropic employee.
Cyber CrimeClaude abused across 1.8M Android apps
Anthropic says threat groups tied to ShinyHunters, Russia, and China misused Claude for credential harvesting, malware, and espionage.
Cyber CrimeSlim Spider Targets Crypto Custody in Brazil
CrowdStrike uncovers Brazil-based threat actor Slim Spider stealing cloud credentials to access cryptocurrency custody secrets.
Cyber CrimeJSCeal Expands Beyond Stolen Google Sessions
A complex JavaScript-based malware that can replay stolen browser sessions to breach Google accounts keeps evolving, researchers warn.
SecurityReal-time phishing platform steers attacks
A phishing platform gives attackers live control over victim sessions, adapting prompts as credentials are harvested.
Cyber CrimeFake Solidity Extensions Steal Crypto Wallets
A malicious VS Code extension pack targets developers, exfiltrating wallets, credentials, and API keys via Telegram.
SecurityCaptiveCrunch Exploits Hospitality Wi-Fi
Threat actors are hijacking hotel network gateways to push fraudulent software updates and capture user credentials via deceptive portals.
SecurityBudibase REST Datasource Credential Theft
A critical vulnerability in Budibase allows unauthenticated attackers to steal stored REST datasource credentials via a cross-origin request leak.