UNC6692 Hackers Exploit Microsoft Teams to Deploy SNOW Malware

UNC6692 hackers exploit Microsoft Teams with fake IT alerts to deploy SNOW malware, steal credentials, and breach corporate networks in advanced attacks.

·

Cyber Attack, cybersecurity, Google, Malware, Mandiant, Microsoft, Security, Snow, UNC6692, Windoes

¶¶¶¶¶

Vidar Infostealer Spreads via Fake CAPTCHAs, Hides in JPEG and TXT Files

New version of Vidar infostealer spreads via fake CAPTCHAs, hides in JPEG and TXT files, uses fileless attacks and steals browser, crypto wallet data.

·

Captcha, Cyber Attack, cybersecurity, Infostealer, JPEG, Malware, Security, Vidar, Windows

¶¶¶¶¶

Microsoft Entra Agent ID Flaw Enabled Tenant Takeover via Privilege Escalation

Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.

·

Agentic AI, AI, Cyber Attack, cybersecurity, Identity theft, Microsoft, Microsoft Entra, Security, Silverfort, vulnerability

¶¶¶¶¶

Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts

Research from Infoblox reveals a massive Click2SMS fraud scheme using fake CAPTCHAs and back button hijacking to trick victims into sending costly international texts.

·

Captcha, Cyber Attack, cybersecurity, Fraud, Privacy, SCAM, Scams and Fraud, Security, SMS

¶¶¶¶¶

New ClickFix attack Hides in Native Windows Tools to Reduce Detection Risk

Fake CAPTCHA ClickFix attack tricks users into running malicious commands, using cmdkey and regsvr32 to maintain persistence and avoid detection on Windows

·

Captcha, ClickFix, Cyber Attack, cybersecurity, Fraud, Malware, SCAM, Scams and Fraud, Security, Windows

¶¶¶¶¶

TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware

GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools.

·

Bitwarden, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Developer, Malware, npm, Password manager, Security, TeamPCP

¶¶¶¶¶

French Police Arrest HexDex Hacker Over Mass Data Theft and Leaks

French police arrest HexDex hacker, a 20-year-old suspect accused of mass data theft and leaks targeting government, sports groups, and firms.

·

BreachForums, Cyber Crime, cybersecurity, DarkForums, Data Breach, Data Breaches, data leak, France, HexDex, Security

¶¶¶¶¶

Harvester APT Expands Spying Operations with New GoGra Linux Malware

New GoGra Linux malware linked to Harvester APT targets systems in South Asia, using fake PDFs and Microsoft APIs for covert command and control.

·

Afghanistan, Carbon Black, Cyber Attack, Cyber-Attacks, cybersecurity, GoGra, Harvester APT, India, Linux, Malware, Security, Symantec

¶¶¶¶¶

Hackers Use Hidden Website Instructions in New Attacks on AI Assistants

Cybersecurity researchers at Forcepoint uncover new indirect prompt injection attacks that use hidden website code to exploit AI assistants like GitHub Copilot.

·

Artificial Intelligence, Claude Code, Copilot, Cyber Attack, cybersecurity, GitHub, GitHub Copilot, Indirect Prompt Injection, IPI, Security, vulnerability

¶¶¶¶¶

Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor

Acronis reveals Mustang Panda is using a new LOTUSLITE backdoor to target Indian banks and Korean diplomats. Learn how this DLL sideloading attack works.

·

Acronis, backdoor, China, Cyber Attack, Cyber-Attacks, cybersecurity, India, LOTUSLITE, Malware, Mustang Panda, Security, South Korea

¶¶¶¶¶

1010.cx

1010.cx

Category: cybersecurity

UNC6692 Hackers Exploit Microsoft Teams to Deploy SNOW Malware

Vidar Infostealer Spreads via Fake CAPTCHAs, Hides in JPEG and TXT Files

Microsoft Entra Agent ID Flaw Enabled Tenant Takeover via Privilege Escalation

Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts

New ClickFix attack Hides in Native Windows Tools to Reduce Detection Risk

TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware

French Police Arrest HexDex Hacker Over Mass Data Theft and Leaks

Harvester APT Expands Spying Operations with New GoGra Linux Malware

Hackers Use Hidden Website Instructions in New Attacks on AI Assistants

Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor