News related to
theft

Vidar campaign hides miner behind fake software

Cybercriminals are using fake cracked-software downloads to infect consumers and smaller businesses with a double payload that steals credentials and mines Monero, underscoring how commodity malware operators are combining immediate data theft with longer-running attempts to profit from compromised machines. The campaign delivers Vidar, a widely used information stealer, alongside XMRig, an open-source cryptocurrency miner often abused in cryptojacking attacks. Victims are lured through malvertising into downloading […]

DMCC opens cyber hub for tech firms

Arabian Post Staff -Dubai DMCC has launched a dedicated cybersecurity vertical as part of a wider restructuring of its technology ecosystem, bringing more than 4,000 technology companies under the newly formalised DMCC Tech platform. The new unit, DMCC Cyber, is designed to support businesses working across cyber resilience, digital trust, data protection, identity management, and governance, risk and compliance. It will sit alongside the DMCC AI Centre, […]

Nissan breach exposes payroll data risks

Nissan Americas has disclosed a cyber breach involving employee records after attackers exploited a critical Oracle PeopleSoft flaw used in a wider data-theft campaign linked to the ShinyHunters extortion group. The carmaker said personnel information belonging to current and former staff in the United States, Canada, Mexico and Brazil may have been accessed through Oracle PeopleSoft, the enterprise platform it uses for payroll, tax administration and other […]

GTA VI budget talk eclipses Burj benchmark

Grand Theft Auto VI has turned a viral comparison with Dubai’s Burj Khalifa into a wider debate over the cost of blockbuster entertainment, as industry estimates place the game among the most expensive creative projects ever attempted. The claim spreading across social platforms is striking: the Burj Khalifa, the world’s tallest building, cost about $1.5 billion and took six years to build, while GTA VI may cost […]

BusySnake campaign widens cyber risk

A newly identified cyber-espionage group has targeted government agencies and electricity-sector organisations in Russia, Brazil and Kazakhstan, using phishing emails to deploy a Windows information stealer designed to extract credentials, documents and browser data. The group, named Armored Likho and provisionally linked to a cluster known as Eagle Werewolf, has emerged as a notable threat because its operations combine espionage against institutions with financially motivated attacks against […]

TimbreStealer sharpens attacks on Mexico firms

Mexico-focused companies are facing a sharper wave of TimbreStealer attacks as operators behind the information-stealing malware combine tax-themed phishing with cloud-hosted delivery, DLL side-loading and layered evasion designed to defeat automated analysis. The campaign marks a technical step-up for a malware family first tracked in late 2023, when attackers used fiscal and invoice lures to push an obfuscated stealer at users in Mexico. The latest activity keeps […]

Brand names lure users into casino PWAs

Scammers are using fake Google Play Store pages and paid social media adverts to push gambling-linked Progressive Web Apps, exploiting consumer trust in well-known retail, banking and streaming brands. The campaign uses polished advertisements on platforms including Facebook, Instagram, Threads and TikTok, with some creatives carrying simple “Brand Slots” labels and others mimicking official product launches. The adverts borrow logos, colour schemes, app-style layouts and fabricated testimonials […]

Faith Assets Need Secular Oversight As Temple Fraud Exposes Governance Vacuum

Aflac breach puts Japan customer data at risk

Aflac Life Insurance Japan has disclosed a major cyber incident affecting about 4.38 million customers, with personal, policy and some banking information exposed after unauthorised access to its customer portal and related systems. The breach, announced on June 30 and updated on July 1, involved systems including Aflac Yorisou Net, a policyholder website used for checking contract details and carrying out account changes. The company said the […]

Blogspot used in stealth infostealer campaign

A fileless malware framework is abusing Google’s Blogspot platform to deliver PureLog Stealer directly into computer memory, sharpening concerns that trusted web services are being turned into staging grounds for credential theft. The campaign, tracked as Veil#Drop, begins with a JavaScript file disguised as a document, such as “transcript. pdf. js”. Once opened on a Windows system, the file runs through Windows Script Host and launches PowerShell […]

ClawHub breach exposes agent marketplace risk

A major supply-chain attack has hit ClawHub, exposing deep security gaps in the fast-growing market for AI-agent skills after scans identified 1,184 malicious packages linked to 247,693 installations. The campaign, tracked as ClawHavoc, targeted ClawHub, the official skill marketplace for OpenClaw, an open-source AI agent platform that allows users to install add-ons for tasks such as browser automation, file handling, coding support, messaging, crypto tracking and productivity […]

Cheap RAT spreads through Telegram channels

A Telegram-controlled remote access trojan called Millenium RAT has compromised more than 62,000 Windows devices across over 160 countries, exposing how low-cost malware subscriptions are widening access to intrusive cyber tools once limited to more skilled operators. The campaign has accelerated sharply this year, with about 39,700 infections recorded during the first quarter of 2026 alone. The scale points to an expanding malware-as-a-service operation in which attackers […]

PlayStation sales hit May low

PlayStation 5 sales in the United States fell sharply in May, dropping to the weakest May performance for Sony’s console hardware since 2000, as higher prices and a maturing console cycle weighed on demand while Nintendo’s Switch 2 dominated the market. Unit sales of PlayStation 5 declined 58 per cent from a year earlier, while dollar sales fell 43 per cent. Xbox Series hardware also showed strain, […]

Cloud bucket flaw exposes silent data theft risk

Security researchers have identified a cloud storage weakness that could allow attackers to divert live data flows from major platforms, including Amazon Web Services, Google Cloud and Microsoft Azure, into storage controlled by outsiders without triggering obvious warning signs. The technique, described as cloud bucket hijacking, exploits the way many cloud providers use globally unique storage names to route logs, telemetry and replicated objects. If a bucket […]

Canvas breach sharpens UK campus cyber warning

The UK’s Cyber Monitoring Centre has warned universities and colleges to reassess cyber resilience after a breach at Canvas exposed student and staff data across about 160 higher education institutions while causing less financial disruption than feared. The assessment found that the incident fell below the threshold for a formal Category 1 national cyber event, which requires losses of at least £10m or an impact on more […]

Gaslight malware exposes AI triage blind spot

A macOS backdoor linked to North Korea-aligned cyber operations has exposed a new weakness in security workflows by embedding instructions designed to confuse artificial intelligence systems used by malware analysts. The malware, tracked as macOS. Gaslight, is written in Rust and contains a 3.5 KB prompt-injection payload made up of 38 fabricated “system” messages. The messages are not aimed at Apple’s operating system or at a conventional […]

GTA 6 pre-orders fuel scam warnings

Scammers are exploiting the opening of Grand Theft Auto VI pre-orders with fake early-access offers, bogus beta invitations and imitation websites designed to steal money, passwords and banking details from players waiting for Rockstar Games’ biggest launch in more than a decade. The warning comes as pre-orders for GTA 6 are set to open on June 25 for PlayStation 5 and Xbox Series X|S, with the game […]

MuddyWater masks espionage behind ransomware playbook

State-backed hacking groups are increasingly borrowing ransomware tactics to conceal cyber-espionage campaigns, with Iran-linked MuddyWater emerging as a prominent example of a wider shift blurring the boundary between criminal extortion and intelligence operations. NCC Group has warned that threat actors tied to governments are using ransomware branding, extortion notes, victim leak sites and negotiation channels not only to increase pressure on targets but also to complicate attribution. […]

Fake browser windows drive malware downloads

Cybersecurity teams are tracking a deceptive malware campaign that uses fake browser windows, hidden web frames and anti-analysis checks to push victims into installing malicious executables by hand. The operation relies on a Browser-in-the-Browser, or BitB, technique that places a convincing imitation of a browser window over a legitimate-looking webpage. Instead of depending on an automatic exploit, the attackers create the impression that a document has failed […]

AryStinger turns old routers into stealth proxies

AryStinger, a newly analysed botnet family, has compromised more than 4,000 outdated routers and begun turning ageing network devices into covert infrastructure for reconnaissance, intranet scanning and traffic tunnelling. The campaign highlights a shift in botnet use from crude denial-of-service activity towards stealthier pre-intrusion work, where hijacked routers and network-attached storage appliances act as relay points between attackers and intended targets. Security analysts say the malware helps […]

Fake trust network pushes crypto-stealing clipper

Cybersecurity investigators have exposed a cryptocurrency theft campaign that used fake GitHub popularity, AI-narrated YouTube videos, manipulated download figures and favourable platform comments to make malicious software appear safe before victims installed it. The operation centred on a Rust-based clipboard hijacker, known in cybercrime circles as a clipper, that monitors copied wallet addresses and silently replaces them with addresses controlled by the attacker. The malware was built […]

JetBrains plugin scam puts AI keys at risk

A malware campaign on the JetBrains Marketplace has put developer credentials at risk after at least 15 AI-themed plugins were found quietly forwarding users’ large-language-model API keys to an attacker-controlled server while continuing to perform the coding tasks they advertised. The plugins, listed under seven vendor accounts, were presented as coding assistants, code reviewers, bug finders, unit-test generators and Git commit-message tools. They invoked services familiar to […]

Jenkins attacks expose CI pipeline risk

Attackers are probing vulnerable Jenkins servers after disclosure of a high-severity deserialisation flaw that can let a low-privileged user impersonate others, reach sensitive controller files and, in some cases, execute code through the Script Console. The bug, tracked as CVE-2026-53435, affects Jenkins 2.567 and earlier and Jenkins LTS 2.555.2 and earlier. Fixed versions, Jenkins 2.568 and LTS 2.555.3, were issued on 10 June as part of a […]

Nintendo breach claim puts HR data at risk

Nintendo is facing an unverified data-extortion claim after a threat actor alleged it obtained nearly 859MB of employee-linked corporate records and demanded $2 million to prevent publication. The claim, attributed to an online actor using the handle SHADOWBYT3$, centres on data allegedly connected to TINYpulse, an employee engagement and feedback platform associated with WebMD Health Services. The material is said to include workforce survey records, corporate email […]