Djinn Stealer: Multi-Platform Credential Theft Malware
An information stealer targeting Windows, macOS, and Linux. Harvests credentials from cloud platforms, source control, package registries, AI assistants, browsers, SSH, and…
Tag: credential theft
BioShocking Attack Tricks AI Browsers Into Leaking User Credentials
A new attack technique called BioShocking, discovered by security firm LayerX, exploits AI browsers and assistants by tricking them into leaking user…
ChatGPT Atlas Vulnerable to BioShocking Credential Theft
OpenAI's ChatGPT Atlas AI browser was successfully tricked by the BioShocking attack into leaking user credentials from GitHub repositories.
Microsoft Removes 119 Edge Extensions Hiding Malware in Images and Fonts
Microsoft has removed 119 malicious extensions from the Edge Add-ons store that used steganography to hide malware in image and font files.…
StegoAd: Malware Campaign Using Steganography in Browser Extensions
StegoAd is a malware campaign discovered by Microsoft that hid malicious code in image and font files within Edge extensions. It performed…
Python Infostealer: Multi-Platform Credential and Wallet Harvester
The Python infostealer deployed in this campaign harvests credentials, browser data, cryptocurrency wallets, and developer artifacts from Windows, Linux, and macOS systems.…
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages designed to deploy a Python-based information stealer on…
Ukraine and FBI Uncover Russian Intelligence Campaign Using Fake Support Texts to Steal Messaging Credentials
The Security Service of Ukraine (SSU), in coordination with the U.S. Federal Bureau of Investigation (FBI), has uncovered a long-running cyber espionage…
UNC5792 (UAC-0195): Russian Cyber Espionage Group
UNC5792, also tracked as UAC-0195, is a Russian threat cluster involved in credential theft campaigns against messaging platforms, targeting government and military…
Mimikatz: Credential Dumping Tool and Its Evasion Variants
Mimikatz is a well-known open-source tool for extracting credentials from Windows systems. The Blue Report 2026 shows that while classic LSASS memory…