logo

News related to
theft

Cybersecurity investigators have linked a Microsoft Teams-based credential theft operation to MuddyWater, the state-sponsored threat group associated with Iran’s intelligence apparatus, after an intrusion first presented itself as an ordinary Chaos ransomware attack. The operation, detected in early 2026 and detailed this week, shows how trusted workplace collaboration tools are being turned into entry points for espionage. Attackers used Teams chats and screen-sharing sessions to trick employees […]

Cybersecurity teams are tracking a more capable strain of Salat Stealer, a Windows-focused malware family that has moved beyond routine credential theft into full remote access, surveillance and stealthy command-and-control activity. The Go-based tool, also tracked as WEB_RAT, combines the functions of an infostealer and a Remote Access Trojan. Its operators can harvest browser passwords, cookies, Telegram sessions, cryptocurrency wallet data and system details, while also opening […]

Cybercriminals are exploiting Microsoft’s Phone Link app to intercept text messages and one-time passwords from connected smartphones without installing malware on the phone itself, exposing a fresh weakness in cross-device authentication systems. The activity centres on CloudZ, a modular remote access trojan deployed on Windows machines, and a previously undocumented plugin called Pheno. The malware has been observed in an intrusion active since at least January 2026, […]

Cybersecurity investigators have linked a deceptive ransomware-style intrusion to MuddyWater, a state-sponsored hacking group associated with Tehran’s intelligence apparatus, after forensic evidence showed the operation was built around espionage rather than financial extortion. The campaign, observed in early 2026, was presented to victims as an attack by an affiliate of the Chaos ransomware-as-a-service ecosystem. Yet the intrusion lacked a defining feature of ransomware: there was no file […]

Omani government networks have been hit by a wide-ranging espionage campaign attributed to Iran-linked operators, with evidence pointing to the theft of judicial records, identity data, staff credentials and internal system files from multiple state entities. The operation centred on the Ministry of Justice and Legal Affairs, where attackers used a custom ASP. NET webshell to maintain access, issue commands and extract data. Exposed attacker infrastructure showed […]

A newly documented Linux remote access trojan has sharpened concerns over software supply-chain security after researchers found it was built to steal developer and DevOps credentials that could be used to compromise trusted code repositories, cloud systems and package registries. The malware, known as Quasar Linux or QLNX, combines remote access functions with a rootkit, a Pluggable Authentication Module backdoor, keylogging and credential-harvesting features. Its design suggests […]

Microsoft has warned of a large-scale credential theft operation that used fake workplace compliance emails to target more than 35,000 users across over 13,000 organisations in 26 countries, underscoring how cybercriminals are refining corporate-style social engineering to bypass both human caution and automated defences. The campaign, observed between April 14 and 16, 2026, relied on emails that appeared to come from internal human resources, regulatory or conduct […]

Advertisements

North Korea-linked hackers compromised a gaming platform used by ethnic Koreans in China’s Yanbian region, turning Windows and Android game software into surveillance tools aimed at users in a strategically sensitive border community. Cybersecurity researchers identified the operation as the work of ScarCruft, also tracked as APT37, Reaper and Ricochet Chollima, a long-running espionage group aligned with Pyongyang. The campaign appears to have been active since late […]

OpenAI plans to open its Trusted Access for Cyber programme to government cyber defenders across federal, state and local levels, marking a broader push to place advanced artificial intelligence tools in the hands of public agencies responsible for protecting critical systems. The expansion is aimed at agencies handling national security, emergency response, public health systems, benefits delivery, municipal infrastructure and other services that face rising digital threats. […]

Malicious code inserted into four SAP-related npm packages exposed developer workstations and automated build systems to credential theft, marking a sharp escalation in attacks against open-source software supply chains used by enterprise technology teams. The compromised packages were published on April 29, 2026, and affected components tied to SAP’s Cloud Application Programming Model and Multi-Target Application build workflows. The malicious versions identified were @cap-js/sqlite 2.2.2, @cap-js/postgres 2.2.2, […]

  Microsoft detected about 8.3 billion email-based phishing threats in the first quarter of 2026, exposing a sharp shift in attacker behaviour as criminal groups moved deeper into QR codes, fake CAPTCHA pages, phishing-as-a-service kits and file-based payloads to bypass conventional email defences. The volume eased from about 2.9 billion threats in January to 2.6 billion in March, but the decline in headline numbers masked a more […]

A publicly released exploit for a critical cPanel and WebHost Manager flaw has intensified pressure on hosting companies and website operators after monitoring groups reported tens of thousands of likely compromised internet-facing systems. The vulnerability, tracked as CVE-2026-41940, allows unauthenticated attackers to bypass login controls and obtain administrative access to affected cPanel & WHM environments. The weakness carries a CVSS severity score of 9.8, placing it among […]

  More than 30,000 Facebook accounts have been compromised in a large phishing operation that exploited trusted internet services to make fraudulent messages appear legitimate, sharpening concerns over how cybercriminals are turning mainstream cloud tools into delivery channels for account theft. Cybersecurity researchers have identified the campaign as AccountDumpling, a Vietnamese-linked operation aimed largely at Facebook Business users, page administrators and account operators. The attackers used Google […]

Attackers are shifting credential theft campaigns towards QR codes, fake CAPTCHA pages and ClickFix-style prompts, turning familiar security checks into tools for large-scale account compromise. Fresh threat telemetry for the first quarter of 2026 shows email-based phishing remains vast in scale, with about 8.3 billion threats detected between January and March. Although monthly volumes eased from 2.9 billion in January to 2.6 billion in March, the composition […]

Samsung’s next free Android upgrade is set to sharpen security controls on Galaxy phones, even as some owners of flagship models complain of battery drain, overheating and shorter screen-on time after April software patches. One UI 8.5, Samsung’s Android 16-based interface, is expected to expand a package of privacy and anti-theft protections across supported Galaxy devices after debuting on the Galaxy S26 series. The update is expected […]

A malicious npm dependency slipped into an AI-assisted crypto trading project has exposed how automated coding tools can be manipulated into importing software that steals credentials, wallet data and source code. The campaign, named PromptMink by security researchers, centres on the npm package @validate-sdk/v2, which presents itself as a utility for hashing, validation, encoding, decoding and random generation. Its actual function is to harvest secrets from infected […]

BlueNoroff has intensified its campaign against cryptocurrency executives by combining fake Zoom meetings, AI-generated video lures and fileless PowerShell malware in an intrusion that gave attackers access to a North American Web3 company for 66 days. The operation, first detected after an intrusion began on 23 January 2026, marks a sharper turn in North Korea-linked cyber activity against digital asset businesses. Instead of relying on crude phishing […]

Rival ransomware crews 0APT and KryBit have disrupted each other’s operations after leaking internal data, exposing an unusual cybercriminal feud that has given defenders a rare view into the infrastructure, tactics and credibility gaps behind emerging extortion groups. The confrontation began on 13 April 2026, when 0APT listed KryBit, Everest and RansomHouse as victims on its leak site. KryBit responded a day later by breaching 0APT’s infrastructure, […]

North Korean state-linked hackers have intensified attacks on cryptocurrency companies by combining fake video meetings, AI-generated identities and “ClickFix” infection tactics to compromise executives, founders and staff with access to wallets, exchanges and investment infrastructure. A large spear-phishing operation attributed with high confidence to BlueNoroff, the financially motivated arm of the Lazarus Group, targeted a North American Web3 company through a manipulated calendar invitation that led to […]

Retail and hospitality companies are facing a widening extortion campaign by BlackFile, a financially motivated hacking group using voice calls, fake helpdesk scripts and spoofed caller identities to steal credentials and force ransom negotiations. The group has been linked to attacks that began surfacing in January 2026, with sustained targeting of customer-facing businesses from February. Its activity has been tracked under several names, including CL-CRI-1116, UNC6671 and […]

Fake software downloads promoted through YouTube are being used to infect corporate employees with Vidar, an information-stealing malware that harvests passwords, browser data, session cookies and cryptocurrency wallet files before stolen credentials are traded through Russian-language cybercrime markets. The campaign shows how threat actors are shifting from noisy phishing emails to search-driven lures that exploit ordinary workplace behaviour. Employees looking for software tutorials, installers or utilities on […]

Cybercriminals are exploiting tax-season anxiety by circulating fake Income Tax Department notices that push taxpayers and companies towards malware-laden downloads disguised as assessment orders and compliance documents. The campaign uses official-looking emails and cloned tax portals to make recipients believe they are facing scrutiny over alleged violations, including concealment of income or inaccurate filings. Victims are directed to external websites that imitate government communication, where buttons labelled […]

Cyber-attacks on higher and further education institutions jumped 63 per cent over a year, exposing universities and colleges to a sharper wave of ransomware, data theft, hacktivism and state-linked intrusion as digital learning systems become central to academic life. The findings point to 425 recorded incidents across 67 countries in the latest 12-month assessment period, compared with 260 in the preceding year. The rise reflects not only […]

Federal prosecutors have charged a U. S. Army Special Forces master sergeant with using classified information from a military operation in Venezuela to make more than $400,000 through prediction-market bets, opening a criminal case that links national security secrecy with the expanding trade in event contracts. Gannon Ken Van Dyke, 38, of Fayetteville, North Carolina, was named in an indictment unsealed in Manhattan federal court on charges […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
XTransfer and Bank of China (Hong Kong) Announce Partnership at Hong Kong FinTech Week // Keralam names new KSEB chief in IAS reshuffle // Cyber police submit chargesheet against YouTuber Thoppi // ADNOC authorises Ruwais Diyab gas development for 2029 // Ernakulam court evidence disappearance triggers police theft investigation // UAE outlines Dh200 billion energy investment at ADIPEC // Opposition challenges SARAL law over transfer of clearance powers // Apollo broadens Abu Dhabi partnership through Mubadala Capital stake // Cliff House pool contract awarded over phone // Binance SAFU bitcoin holdings halve after security breach // Allianz Insurance Singapore Wins Best Annual Travel Insurance Award at TripZilla Excellence Awards 2026 // Bank99 launches business accounts through Austrian postal network // ChatGPT billing fraud deploys rotating sites for card theft // Wildlife board nominations draw ire // KSEB chief shifted in major reshuffle // Row over SARAL law bypassing local bodies // RTI exposes telephone directive behind Cliff House contract // Altman ranks UAE ahead on artificial intelligence adoption // 16 probes already in six months of VDS govt // Kerala High Court demands Thachankary’s prison medical records //