New IDN tricks make fake apple.com and okta.com lookalikes render as Unicode in Chrome and Gmail. https://intel.threadlinqs.com/threat/TL-2026-3353 #ThreatIntel #Turning #IDNLookalike #Phishing
@threadlinqs.bsky.social
@threadlinqs.bsky.socialNew IDN tricks make fake apple.com and okta.com lookalikes render as Unicode in Chrome and Gmail. https://intel.threadlinqs.com/threat/TL-2026-3353 #ThreatIntel #Turning #IDNLookalike #Phishing
@darkwebsonar.bsky.social🇧🇷 TerroahOver claims breach of civil registry portals in Brazil, Ecuador, and Chile, alleging usernames, passwords, emails, and national IDs. 20 incidents in the past 30 days. #DataBreach #ThreatIntel
This entry + more → go.darkwebsonar.io/terroahover-...
@cyfar.ca~Malpedia~
Live open directories exposed an iOS wallet-stealing exploitation platform and victim telemetry.
-
IOCs: 156[.]239[.]230[.]120, hdios[.]cn, 66ds[.]lol
-
#DarkSword #Malware #ThreatIntel
@threadlinqs.bsky.socialIBM Verify Access: two unauthenticated deserialization RCEs at CVSS 9.8, and no workaround - only patching. https://intel.threadlinqs.com/threat/TL-2026-3352 #ThreatIntel #CVE_2026_78401 #CVE_2026_78406 #IBMVerifyAccess
@timb.me.ukIf you spotted the Samsung fridge outage a few weeks ago... just spotted reports of someone turning off France's supermarket fridges:
@threadlinqs.bsky.socialCyrillic lookalike domains slip past Chrome's homograph checks and render as the real brand. https://intel.threadlinqs.com/threat/TL-2026-3351 #ThreatIntel #IDNHomoglyph #Chrome #Phishing
@threadlinqs.bsky.socialAI found 16 runtime-verified WordPress plugin flaws - and still needed humans to weed out the false alarms. https://intel.threadlinqs.com/threat/TL-2026-3349 #ThreatIntel #Claude #VulnPlugs #WordPress
@thedailytechfeed.comOld Apache Struts flaw CVE-2016-3081 is being actively exploited—patch now. #ApacheStruts #CVE20163081 #Vulnerability #CyberSecurity #ThreatIntel #LegacySystems https://thedailytechfeed.com/outdated-apache-struts-bug-cve-2016-3081-under-active-attack/
@threadlinqs.bsky.socialVulcanRAT207.A: a WhatsApp ZIP to SYSTEM via PoolParty injection into Task Scheduler and a BYOVD AV killer. https://intel.threadlinqs.com/threat/TL-2026-3343 #ThreatIntel #VulcanRAT207A #PoolParty #VulcanRAT207
@ninjaintelgroup.bsky.social🗞 What We Missed: FBI Strikes Back at ShinyHunters
via Dark Reading
https://www.darkreading.com/identity-access-management-security/fbi-shinyhunters-claims-hack
#cybersecurity #infosec #threatintel
@threadlinqs.bsky.socialWARDEN Stealer sells a stealer, crypto clipper and loader in one small Windows binary - by subscription. https://intel.threadlinqs.com/threat/TL-2026-3342 #ThreatIntel #WARDENStealer #winwarden_stealer #WARDEN
@threadlinqs.bsky.socialBricksforge's Pro Forms flaw turns a GIF into a PHP shell - no login needed, and it's already exploited. https://intel.threadlinqs.com/threat/TL-2026-3341 #ThreatIntel #CVE_2026_85097 #PHP #Bricksforge
@beesint.bsky.social🎣 Phishing Spotlight microsoft[.]marchesi[.]mx 🌐 Stack: Apache 🔗 https://beesint.com/pulse/3d0a4236-e7c6-4e7b-920f-126d8e5a6c60 #OSINT #Phishing #ThreatIntel #CyberSecurity
@hapsis.bsky.socialHow to remove a Trojan, Virus, Worm, or other Malware
@threadlinqs.bsky.socialKimsuky swaps LNK for HWP resumes to drop Funhouse ransomware via Quasar RAT hiding in msbuild.exe. https://intel.threadlinqs.com/threat/TL-2026-3335 #ThreatIntel #Funhouse #Quasar #xRAT
@darkwebsonar.bsky.social🇺🇸 We tracked a ransomware claim by The Gentlemen listing MoneyGram, the global money transfer company serving 60 million customers across 200+ countries. #Ransomware #ThreatIntel
More on this and other incidents → go.darkwebsonar.io/the-gentleme...
@ninjaintelgroup.bsky.social📊 Ransomware data-drop: flat 0% week-on-week (233 claims). Most active: TheGentlemen. Hot sector: Manufacturing.
📦 ninjasignal: 182 installs this week · 33 clones.
Live data + the Python client → ninjalabz.io/developers
#ransomware #threatintel
@threadlinqs.bsky.socialA 2016 Struts bug is back: S2-032 RCE is now CISA KEV-listed as exploited. Patching alone isn't enough. https://intel.threadlinqs.com/threat/TL-2026-3332 #ThreatIntel #CVE_2016_3081 #linux #Meterpreter
@securityonline.bsky.socialWarden Stealer, a fast-growing Rust infostealer, steals AI agent tokens, browser data, and crypto while bundling its own loader and clipper.
#WardenStealer #Infostealer #RustMalware #MaaS #AIAgents #CryptoClipper #ThreatIntel #Cybersecurity
@threadlinqs.bsky.socialA TL0 Discourse account, a JPEG bomb and a race condition end in local file read via Ghostscript. https://intel.threadlinqs.com/threat/TL-2026-3329 #ThreatIntel #CVE_2026_55420 #ImageMagick #Ghostscript
