Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Cybersecurity researchers at Checkmarx have uncovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of…
Tag: credential harvesting
NadMesh: Autonomous Scanning and Exploitation Platform
NadMesh combines scanning, exploitation, and credential harvesting into a single autonomous platform, targeting services like Redis, Docker, Kubernetes, and AI applications. It…
Iran-Linked Hackers Deploy New Cavern C2 Framework in Targeted Attacks on Israeli Organizations
Iranian state-sponsored hackers affiliated with the Ministry of Intelligence and Security (MOIS) have been using a previously undocumented modular command-and-control (C2) framework…
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
Threat actors are actively exploiting three security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. The flaws include CVE-2026-39813…
Russian-Speaking Threat Actors Behind FortiBleed Campaign
Suspected Russian-speaking threat actors compromised over 30,000 Fortinet firewalls across 194 countries in a large-scale credential harvesting campaign dubbed FortiBleed. They used…
Russian-Speaking IAB Behind FortiBleed Credential Harvesting Campaign
A financially motivated Russian-speaking initial access broker (IAB) is assessed to be behind the FortiBleed campaign, which has targeted over 430,000 FortiGate…
CyberStrike Harvester v1.5: Custom Information Extraction Suite Used in FortiBleed
CyberStrike Harvester v1.5 is a Go-based ELF binary used in the FortiBleed campaign to turn passive network captures into actionable credentials, crackable…
SpyCloud: Cybersecurity Firm Tracking FortiBleed Credential Harvesting
SpyCloud provided a timeline of the FortiBleed campaign, noting that the FortiGate-related capture cycle began on May 19, 2026, and that the…
FortiBleed: 110 Million Credentials Harvested via FortiGate Firewalls in Global Campaign
A Russian-speaking initial access broker (IAB) has been linked to a large-scale credential-harvesting operation dubbed FortiBleed, targeting over 430,000 FortiGate firewalls globally…