Undercover Blockchain Probe Maps Lazarus-Linked Laundering After $1.5B Bybit Theft
Blockchain investigator ZachXBT says an undercover operation exposed a Chinese laundering network handling funds linked to North Korea's $1.5 billion Bybit theft. Private chats were correlated with public...
Attackers Abuse SQL Server as a Covert Command and Exfiltration Channel
Investigators found attackers using Microsoft SQL Server functionality to execute Windows commands and return stolen files through query output. An exposed staging server also leaked the intruders' toolkit...
Inside the Supply Chain Playbook Turning Trusted Software Updates Into Credential Thieves
A new ReversingLabs report ties together the S1ngularity, Shai-Hulud, and TeamPCP/Trivy supply chain incidents, showing how stolen maintainer tokens and compromised CI pipelines let attackers push credential-stealing code...
Suspected ShinyHunters Member Detained as FBI Data-Theft Inquiry Expands
A suspected ShinyHunters member has reportedly been detained in Jordan and is cooperating with investigators seeking other people linked to the group. The development follows unverified claims of...
PaperPhone Bot Network Masks Automated Scraping Behind 75,000 IP Addresses
Researchers identified a coordinated headless-browser network using 75,000 IP addresses and fabricated mobile identities to disguise large-scale scraping. Contradictory browser fingerprints and synchronized traffic exposed the supposedly diverse...
ShinyHunters Evades WAF Rules to Reopen Critical PeopleSoft Attack Path
ShinyHunters has resumed mass exploitation of a critical Oracle PeopleSoft flaw by encoding part of the attack path to slip past some WAF rules. Compromised servers received web...
A Cybercrime Crew’s Automated Hacking Platform Was Left Exposed — And So Was Its Entire Playbook
Threat hunters at ThreatMon stumbled onto an unsecured server tied to a group linked to Blackhatsect0r, exposing more than 16,000 stolen credentials, nearly half a million target URLs,...
Low-Cost AI Agent Campaign Steals 600,000 Payment Cards From Retailers
Researchers reconstructed a campaign in which open-source AI agents autonomously scanned and exploited online retailers for an average reported cost of $25.46 per completed scan. The operation allegedly...