logo

News related to
theft

  Cybercriminals have used artificial intelligence to identify and weaponise a previously unknown software flaw, marking a significant escalation in the use of AI for offensive cyber operations. The attempted campaign targeted a widely used open-source, web-based system administration tool and centred on a zero-day vulnerability that could bypass two-factor authentication when valid user credentials were already available. The operation was disrupted before it could be used […]

Cybercriminals are using fake Claude Code installation pages to push a PowerShell-based information stealer at developers, marking a sharper turn in attacks that exploit the rush to adopt AI coding tools. The campaign impersonates Anthropic’s Claude Code, a command-line assistant used by software teams to write, review and debug code. Victims are drawn through sponsored search results or cloned documentation pages that resemble legitimate installation guides. Instead […]

Binance Bahrain has renewed its ISO/IEC 27001 and ISO/IEC 27701 certifications, strengthening its information security and privacy credentials as regulated crypto platforms face rising scrutiny over user protection, operational resilience and compliance standards across the Gulf. The Manama-based crypto asset platform said the renewed certifications cover its information security management and privacy information management systems. The development places data governance at the centre of its Bahrain operations, […]

Cybercriminals are exploiting interest in OpenClaw with a counterfeit installer that delivers a Rust-based information stealer designed to harvest cryptocurrency wallet data, browser secrets and password-manager credentials. The campaign centres on a fake OpenClaw download site and a typosquatted GitHub organisation that impersonates the legitimate open-source AI assistant project. Victims are lured into downloading what appears to be a Windows installer, but the archive instead contains a […]

Mac users searching for Claude installation help are being targeted by a malvertising campaign that turns Google-sponsored results and legitimate Claude shared-chat pages into a malware delivery route. The campaign, disclosed on 10 May by security researcher Berk Albayrak, uses search ads that appear to point to Anthropic’s real claude. ai domain. Users looking for terms such as “Claude mac download” are led to a shared Claude […]

Windows users seeking Claude-branded desktop tools have been targeted by a fake Anthropic-themed website distributing Beagle, a previously undocumented backdoor delivered through a DLL sideloading chain that gives attackers remote control over infected machines. The campaign used the domain claude-pro[.]com to imitate Claude’s official interface and lure visitors into downloading a supposed Claude-Pro Relay installer aimed at developers working with Claude Code. The fraudulent site copied the […]

Arabian Post Staff -Dubai Abu Dhabi has moved to sharpen protection for factories, utilities and critical infrastructure after the UAE Cyber Security Council and Siemens signed an MoU to strengthen operational technology cyber resilience across industrial sectors. The agreement, signed on the sidelines of the fifth Make it in the Emirates, creates a framework for cyber defence, knowledge sharing and local security capabilities. It calls for a […]

Advertisements

Hackers are exploiting demand for OpenClaw by circulating a counterfeit installer that delivers Hologram, a Rust-based information-stealing framework built to harvest credentials from crypto wallets, password managers and browser extensions. Security analysis of the campaign shows a polished fake installer site distributing an archive named OpenClawx64.7z. Inside it is OpenClawx64. exe, a bloated 130MB executable designed to appear legitimate while frustrating automated sandbox checks. The payload is […]

Cloud security teams are facing a new credential-theft campaign after researchers identified PCPJack, a worm-like malware framework built to compromise exposed container, database and cloud-native systems while stripping away traces of rival TeamPCP tooling. The framework targets internet-facing Docker APIs, Kubernetes environments, Redis and MongoDB instances, Ray dashboards and vulnerable web applications. Its operators appear less interested in cryptomining, a familiar revenue stream in cloud intrusions, and […]

Cybersecurity researchers have identified a targeted espionage-style malware campaign that uses GitHub Releases to conceal payload delivery, combining phishing, trusted cloud infrastructure and a fileless Python implant to steal sensitive data from Windows systems. The operation, tracked as Operation HumanitarianBait, begins with phishing emails carrying a malicious Windows shortcut file inside a RAR archive. The lure is built around Russian-language humanitarian aid material, including what appears to […]

Commercial artificial intelligence models helped an unidentified adversary plan and conduct a cyber intrusion against the operational technology environment of a water and drainage utility in Mexico, sharpening concern over how widely available AI systems can accelerate attacks on critical infrastructure. Industrial security specialists at Dragos said the campaign targeted a municipal utility serving the Monterrey metropolitan area after a wider compromise of Mexican government organisations between […]

Adnoc Distribution will roll out an artificial intelligence-powered self-checkout system across 50 Oasis by Adnoc convenience stores from the second quarter of 2026, marking a new phase in the company’s push to turn its fuel-station retail network into a digitally enabled mobility and convenience platform. The agreement with UAE-based DTEK. ai will introduce SWIFT, a computer-vision and machine-learning checkout system designed to recognise products instantly and allow […]

Corporate login credentials have become a growing internal security weakness, with one in eight workers admitting they have sold access to company systems or know someone who has done so over the past year. The finding points to a shift in workplace fraud risk from external hacking alone to insider-enabled access, where criminals can enter corporate systems through legitimate credentials rather than breaking through technical defences. The […]

Malicious NuGet packages masquerading as familiar. NET libraries have put developer workstations and build environments at risk of credential theft, with attackers using plausible package names, hidden version histories and obfuscated payloads to target users in Chinese software ecosystems. Five packages identified in the campaign — IR. DantUI, IR. OscarUI, IR. Infrastructure. Core, IR. Infrastructure. DataService. Core and IR. iplus32 — were published through the same account, […]

Mac users are being targeted by a widening ClickFix campaign that disguises malicious commands as disk-cleaning and system-maintenance advice, turning routine troubleshooting into a route for credential theft, wallet compromise and cloud-data exposure. The attacks use pages that appear to offer help with storage optimisation, system clean-up or utility installation. Victims are instructed to copy commands into Terminal, or in some variants to trigger Apple’s Script Editor, […]

Cybersecurity investigators have linked a Microsoft Teams-based credential theft operation to MuddyWater, the state-sponsored threat group associated with Iran’s intelligence apparatus, after an intrusion first presented itself as an ordinary Chaos ransomware attack. The operation, detected in early 2026 and detailed this week, shows how trusted workplace collaboration tools are being turned into entry points for espionage. Attackers used Teams chats and screen-sharing sessions to trick employees […]

Cybersecurity teams are tracking a more capable strain of Salat Stealer, a Windows-focused malware family that has moved beyond routine credential theft into full remote access, surveillance and stealthy command-and-control activity. The Go-based tool, also tracked as WEB_RAT, combines the functions of an infostealer and a Remote Access Trojan. Its operators can harvest browser passwords, cookies, Telegram sessions, cryptocurrency wallet data and system details, while also opening […]

Cybercriminals are exploiting Microsoft’s Phone Link app to intercept text messages and one-time passwords from connected smartphones without installing malware on the phone itself, exposing a fresh weakness in cross-device authentication systems. The activity centres on CloudZ, a modular remote access trojan deployed on Windows machines, and a previously undocumented plugin called Pheno. The malware has been observed in an intrusion active since at least January 2026, […]

Cybersecurity investigators have linked a deceptive ransomware-style intrusion to MuddyWater, a state-sponsored hacking group associated with Tehran’s intelligence apparatus, after forensic evidence showed the operation was built around espionage rather than financial extortion. The campaign, observed in early 2026, was presented to victims as an attack by an affiliate of the Chaos ransomware-as-a-service ecosystem. Yet the intrusion lacked a defining feature of ransomware: there was no file […]

Omani government networks have been hit by a wide-ranging espionage campaign attributed to Iran-linked operators, with evidence pointing to the theft of judicial records, identity data, staff credentials and internal system files from multiple state entities. The operation centred on the Ministry of Justice and Legal Affairs, where attackers used a custom ASP. NET webshell to maintain access, issue commands and extract data. Exposed attacker infrastructure showed […]

A newly documented Linux remote access trojan has sharpened concerns over software supply-chain security after researchers found it was built to steal developer and DevOps credentials that could be used to compromise trusted code repositories, cloud systems and package registries. The malware, known as Quasar Linux or QLNX, combines remote access functions with a rootkit, a Pluggable Authentication Module backdoor, keylogging and credential-harvesting features. Its design suggests […]

Microsoft has warned of a large-scale credential theft operation that used fake workplace compliance emails to target more than 35,000 users across over 13,000 organisations in 26 countries, underscoring how cybercriminals are refining corporate-style social engineering to bypass both human caution and automated defences. The campaign, observed between April 14 and 16, 2026, relied on emails that appeared to come from internal human resources, regulatory or conduct […]

North Korea-linked hackers compromised a gaming platform used by ethnic Koreans in China’s Yanbian region, turning Windows and Android game software into surveillance tools aimed at users in a strategically sensitive border community. Cybersecurity researchers identified the operation as the work of ScarCruft, also tracked as APT37, Reaper and Ricochet Chollima, a long-running espionage group aligned with Pyongyang. The campaign appears to have been active since late […]

OpenAI plans to open its Trusted Access for Cyber programme to government cyber defenders across federal, state and local levels, marking a broader push to place advanced artificial intelligence tools in the hands of public agencies responsible for protecting critical systems. The expansion is aimed at agencies handling national security, emergency response, public health systems, benefits delivery, municipal infrastructure and other services that face rising digital threats. […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
Lancet researchers seek global health emergency recognition for climate // Lancet researchers seek global health emergency recognition for climate // CPM role in Mammootty cyber attacks ruled out // 10 CENTS CAPITAL Completes US$20 Million Financing and Sets Out a Phased Deployment Plan // 10 CENTS CAPITAL Completes US$20 Million Financing and Sets Out a Phased Deployment Plan // ZJLD Group Returns to Hong Kong Wine & Dine Festival 2026 // Hill’s Enhances Cat and Dog Food with Prebiotics to Support Senior Pet Health in Hong Kong // Sharjah Islamic Bank’s $500 million sukuk joins Nasdaq Dubai // US intelligence suspects Megaspeed executive of Chinese espionage // A Better Start, Ready for the Day: Green SM Elevates the Urban Mobility Experience in the U.S. // Lancet researchers seek global health emergency recognition for climate // Lancet researchers seek global health emergency recognition for climate // Binance estimates $6.3 billion impact from security breach // Strategy drives listed companies’ Bitcoin holdings to 1.3 million // US intelligence suspects Megaspeed executive of Chinese espionage // Lancet researchers seek global health emergency recognition for climate // Crown Workspace wins Gold and special Trinity recognition at HR Vendors of the Year Awards 2026 // Polymarket restores trading after third-party security breach // Ex-Kochi police chief rejects judicial interference // UK competition watchdog examines Meta publisher contract terms //