​Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and agencies in 6 other… Read More »FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

​Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The Tokyo-based… Read More »Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

​Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen testing tool named ARTEX to carry out the… Read More »ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

​The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN. According to TrendAI, the malware has been… Read More »UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

​Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls… Read More »Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

​Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. “The extensions masquerade as wallet portals,… Read More »16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

​The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptors… Read More »MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data

​The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in… Read More »U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

​The npm package known as “tensorlake,” a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain… Read More »Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm