explore | Grilled Cheese

@socket.dev
Fake PDF verifier steals Google session cookies and can reset passwords.
-
IOCs: pdf[.]gusercontent[.]com, pdf[.]gusercontent[.]com/api/accounts/collect/, pdf-para-texto@extensao[.]local
-
#AccountTakeover #Malware #ThreatIntel

The latest update for #Sophos includes "The Rising Threat of Deepfakes: Why Organizations Must Rethink Trust" and "The answer to #AI uncertainty is adaptability, not paralysis".

#cybersecurity #antivirus #malware https://opsmtrs.com/487u2e2

Searching up Fred Meyer > Pharmacy on Edge today and bing sent us into a malware redirect that Defender did not pick up on. A barrage of dubious notifications that Defender was no longer active (it was).

A simple reset of Edge solved the problem.

#FredMeyer #bing #edge #defender #malware #exploit

The latest update for #Cyberint includes "MovieReaper #Malware: From Movie Download to Malware Infection" and "Noodle RAT: A Recipe for Cross Platform Espionage".

#Cybersecurity #ThreatActors #ThreatIntelligence https://opsmtrs.com/33G8R11

e-Taxを装ったAndroidマルウェア
hxxps://inwardatti-jp-etaxrefund.com/
hxxps://therawcusclu-jp-etaxrefund.com/
hxxps://theswagbusu-jp-etaxrefund.com/
www.virustotal.com/gui/file/f46...
#Phishing #フィッシング詐欺 #malware

Cisco Talos Discovers Malware That Uses AI Models to Determine Cyberattack Tactics

🤖 IA: It's not clickbait ✅
👥 Users: It's not clickbait ✅

#malware #ai

👇👇👇

⏱ Before the advisory: our scan flagged npm [email protected] 74 days ahead of MAL-2026-16446.

#flaggedfirst #npm #malware #supplychainsecurity

Illegal Terraform providers seen delivering Go malware via blocchain & Slack C2. Vet supply chains carefully. #SupplyChain #Terraform #GoLang #Malware #Blockchain https://thedailytechfeed.com/malicious-terraform-providers-linked-to-dprk-delivered-go-malware-via-terraform-registry/

Water Hydra's DarkMe RAT campaign pivots from zero-days to simple phishing. New attacks use malicious .pif files, process hollowing, and COM hijacking for persistence to steal crypto wallets. #DarkMe #WaterHydra #Phishing #Malware #ThreatIntel

🌐 cyber[.]netsecops[.]io

A malicious NPM package 'indexed-btree' got ~2M weekly downloads by hiding its payload in runtime code, bypassing security scans. It used Ethereum for C2 & earned its creator over €230k. #SupplyChainAttack #NPM #Malware #CyberSecurity

🌐 cyber[.]netsecops[.]io

Cisco Talos uncovers 'CLOSEDQUORUM,' the first malware using a panel of commercial LLMs (Google, Mistral) for autonomous C2. The implant is designed to steal credentials and crypto wallets. #AI #Malware #CyberSecurity #ThreatIntel

🌐 cyber[.]netsecops[.]io

Malwarebytes Anti-Malware v5.7.1.346
OlderGeeks.com is an official mirror of Malwarebytes Anti-Malware
Advanced malware detection and removal tool to protect your PC from threats.
www.oldergeeks.com/downloads/fi...
#Malware #ComputerViruses #CyberSecurity

~Varonis~
AvisLoader uses ClickFix delivery and Tox P2P C2 to evade domain takedowns.
-
IOCs: trycloudflare[.]com, workers[.]dev, 35dd164a7f5d8b42b9870c7009f7425b1c8cb771280c9e6c525e09f3dd13c2cc
-
#AvisLoader #ClickFix #Malware #ThreatIntel

@socket.dev
Malicious npm/PyPI releases launch sckit to steal developer secrets and exfiltrate them to skyleen.fr.
-
IOCs: skyleen[.]fr, sckit
-
#Malware #SupplyChain #ThreatIntel

@huntress.com
DarkMe spreads via phishing emails and .pif files, using VB6 loaders, persistence, and process hollowing.
-
IOCs: onlineview365[.]com, thatawful[.]boutique, 67[.]43[.]50[.]11
-
#DarkMe #Malware #ThreatIntel

GHAPPIER Supply Chain Attack Compromises 65 GitHub Repositories and Poisons npm Package

https://commons.now/link/ghappier-supply-chain-attack-compromises-65-github-repositories-and-poisons-npm

#Github #Malware #Npm