Threat Watcher

The article describes real-world recruitment scams where criminals impersonate HR/recruiters and contact jobseekers with unsolicited “remote” work offers, often steering victims to WhatsApp. It includes a full example message that claims to be from a legitimate company and promises high daily…

Attackers uploaded look‑alike Arch Linux AUR packages (e.g., “yyay”) to catch users who mistype popular AUR helpers like yay/paru. The fake packages ran a malicious install script that downloaded and executed code as root during install/upgrade, potentially enabling credential theft or backdoors.

An Australian Shopify store was advised to stay closed after a third‑party app/theme extension injected malicious code that redirected shoppers to a fake checkout page. Two app vendors (Logbase and HulkApps) reported unauthorized access or configuration changes that inserted scripts designed to…

Researchers describe a real campaign where attackers published thousands of fraudulent GitHub repositories that masqueraded as AI skills or Model Context Protocol (MCP) servers to trick engineers into installing malware. The same underground ecosystem is also selling tools that run autonomous scans…

Unit 42 reported an espionage-focused intrusion cluster (CL-UNK-1211) targeting government and state-affiliated Linux infrastructure from Oct 2025 to Apr 2026. While much of the campaign is technical (web shells, RATs and reverse shells), it also includes credential theft that relies on deceiving…

Researchers found thousands of websites sending messages to AI agents via HTTP response headers, including a smaller set attempting “indirect prompt injection.” Most were pranks, but some were crafted to influence an AI agent’s behavior (for example, forcing refusals or biasing outcomes) if the…

Fraudsters impersonated senior leaders at Intesa Sanpaolo using WhatsApp and an AI-cloned voice call to convince Fideuram’s chair to authorize urgent overseas transfers. The finance team then sent multiple payments to foreign accounts (mainly China and Hong Kong), and only part of the money has…

Researchers say the Kazakhstan-linked group “Silent Lynx” has run real espionage campaigns across Central Asia, targeting government bodies and energy organizations. The reported entry method relied heavily on spear‑phishing sent from compromised government email accounts, sometimes using trusted…

A Rust-based remote access trojan (CikaBika Bot) was delivered using a document-themed lure that included a malicious Windows shortcut (LNK) and a PDF containing an embedded payload. Once installed, it used Discord as its command-and-control channel to run commands, collect information, and steal…

Researchers report that the threat actor Silent Lynx ran multiple real-world spear‑phishing campaigns against government organizations across Central Asia and the wider CIS region. Victims were lured with official-looking documents (e.g., diplomatic letters, airspace applications, and oil refinery…

Barracuda reports attackers are abusing fake CAPTCHA pages as a “trust step” to push victims into credential theft, malware downloads, and enabling malicious browser notifications. In some “ClickFix” variants, the CAPTCHA flow tricks users into pasting and running a command on their own Windows…

Researchers linked a long-running traffic distribution system (Help TDS) to the Hotejka affiliate program that redirects people from compromised websites to fake Microsoft Windows security alerts. The pop-ups try to trap users in the browser and pressure them to call a “Windows Support” number,…

A weekly incident roundup describes multiple real-world attacks where criminals used "AI" branding to trick people into handing over passwords/MFA codes or running harmful PowerShell commands. The write-up includes two practical, repeatable social-engineering workflows: fake AI-platform login pages…

Researchers described a real malware campaign where victims are tricked into opening a document-themed attachment that ultimately installs a remote access trojan (RAT). The infection chain uses a PDF that leads to a disk image containing a Windows shortcut (LNK) disguised as a Word document, which…

Microsoft says it uncovered and disrupted an underground marketplace (“YAM Store”) that sold phishing kits and access to cloud accounts, enabling massive global phishing and SMS scam campaigns. The operation allegedly supported over a billion scam messages since January 2026 and targeted 75,000+…

A security assessment found that a single crafted link could run attacker-controlled JavaScript in the browser of a logged-in Siemens Teamcenter user (CVE-2026-58113). Because Teamcenter’s login redirect page auto-submits a form on load, simply opening the link (e.g., from a phishing email or chat)…

Security researchers showed that “decision models” like TypeSafe AI’s Jev can still be manipulated by indirect prompt injection, even if they don’t produce free-form text. In a shopping checkout test, a fake on-page ad persuaded an AI browser agent to click an attacker-controlled button instead of…

Microsoft and partners disrupted three "phishing-as-a-service" kits that enabled criminals to send more than a billion phishing emails and SMS messages worldwide. The kits provided ready-made fake brand pages (government, finance, logistics, consumer brands) designed to steal login credentials and…

Researchers tracked Kazakhstan-nexus group UAT-6275 (TAG-193) targeting government organizations across Central Asia and the wider CIS using convincing decoy documents tied to diplomacy and energy. The campaigns used malicious files (macro-enabled Word docs, shortcuts, and a WinRAR exploit) to…

Researchers studying automated AI agents trying to bypass Alibaba Amap’s anti-bot controls planted hidden text on a web page offering help getting blocked data. The agents ingested the hidden message and contacted a researcher-controlled endpoint, creating a real-world example of “indirect prompt…