#cyberhunter_nl — Public Fediverse posts

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

Indicators extracted from public reporting. Source: https://hunt.io/blog/redis-cryptomining-botnet-3562-servers

Pulse ID: 6aa94063cede304a0c4f78d5
Pulse Link: https://otx.alienvault.com/pulse/6aa94063cede304a0c4f78d5
Pulse Author: CyberHunter_NL
Created: 2026-09-15 12:56:03

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#RCE #SSH #OTX #CyberHunter_NL

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Indicators extracted from public reporting. Source: https://www.f5.com/labs/articles/cloud-takeover-mass-scanning-for-exposed-vite-endpoints-cve-2026-39364

Pulse ID: 6aa9406e744080ca6dddb815
Pulse Link: https://otx.alienvault.com/pulse/6aa9406e744080ca6dddb815
Pulse Author: CyberHunter_NL
Created: 2026-09-15 12:56:14

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cloud #OTX #CyberHunter_NL

HBO Max’s verified Reddit account hijacked to spread malware

Indicators extracted from public reporting. Source: https://www.hudsonrock.com/blog/hbo-max-ads-on-a-compromised-reddit-account-exposed-a-massive-pasteswitch-clickfix-operation

Pulse ID: 6aa94072d05585b5b12c7a73
Pulse Link: https://otx.alienvault.com/pulse/6aa94072d05585b5b12c7a73
Pulse Author: CyberHunter_NL
Created: 2026-09-15 12:56:18

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Malware #OTX #CyberHunter_NL

Hackers Exploit WooCommerce Plugin Bug to Take Over WordPress Sites Without Login

Indicators extracted from public reporting. Source: https://www.wordfence.com/blog/2026/09/attackers-actively-exploiting-critical-vulnerability-in-woocommerce-wholesale-lead-capture-plugin/

Pulse ID: 6aa93268344088e074561b84
Pulse Link: https://otx.alienvault.com/pulse/6aa93268344088e074561b84
Pulse Author: CyberHunter_NL
Created: 2026-09-15 11:56:24

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Wordpress #OTX #CyberHunter_NL

Search results are sending people to fake Bitrefill checkouts

Indicators extracted from public reporting. Source: https://www.malwarebytes.com/blog/threat-intel/2026/09/search-results-are-sending-people-to-fake-bitrefill-checkouts

Pulse ID: 6aa9163460570086788a836c
Pulse Link: https://otx.alienvault.com/pulse/6aa9163460570086788a836c
Pulse Author: CyberHunter_NL
Created: 2026-09-15 09:56:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#OTX #CyberHunter_NL

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Indicators extracted from public reporting. Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX

Pulse ID: 6aa8ebf73ff0d28609555e64
Pulse Link: https://otx.alienvault.com/pulse/6aa8ebf73ff0d28609555e64
Pulse Author: CyberHunter_NL
Created: 2026-09-15 06:55:50

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cisco #Email #OTX #CyberHunter_NL

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

Indicators extracted from public reporting. Source: https://www.volexity.com/blog/2026/09/09/mind-the-patch-gap-multiple-chinese-threat-actors-chain-0-day-exploits-in-chrome-windows/

Pulse ID: 6aa8ebfa8d18e6075284f70e
Pulse Link: https://otx.alienvault.com/pulse/6aa8ebfa8d18e6075284f70e
Pulse Author: CyberHunter_NL
Created: 2026-09-15 06:55:54

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#China #Chrome #Deploy #Windows #OTX #CyberHunter_NL

Twitch extension with 30K installs exposes users’ OAuth tokens

Indicators extracted from public reporting. Source: https://www.bleepingcomputer.com/news/security/twitch-extension-with-30k-installs-exposes-users-oauth-tokens/

Pulse ID: 6aa8513a4081c7d15a5a0a40
Pulse Link: https://otx.alienvault.com/pulse/6aa8513a4081c7d15a5a0a40
Pulse Author: CyberHunter_NL
Created: 2026-09-14 19:55:38

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#OTX #CyberHunter_NL

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

Indicators extracted from public reporting. Source: https://hunt.io/blog/thai-broadband-fortigate-sslvpn-meshcentral-intrusion

Pulse ID: 6aa851575cff24d10924ffc1
Pulse Link: https://otx.alienvault.com/pulse/6aa851575cff24d10924ffc1
Pulse Author: CyberHunter_NL
Created: 2026-09-14 19:56:07

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #OTX #CyberHunter_NL

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Indicators extracted from public reporting. Source: https://www.hudsonrock.com/blog/hbo-max-ads-on-a-compromised-reddit-account-exposed-a-massive-pasteswitch-clickfix-operation

Pulse ID: 6aa843278361920eaabc970a
Pulse Link: https://otx.alienvault.com/pulse/6aa843278361920eaabc970a
Pulse Author: CyberHunter_NL
Created: 2026-09-14 18:55:35

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Malware #OTX #CyberHunter_NL

Hackers Exploit FortiGate SSL-VPN Vulnerability to Attack Broadband Provider

Indicators extracted from public reporting. Source: https://cybersecuritynews.com/fortigate-ssl-vpn-vulnerability/

Pulse ID: 6aa835ee9dc88a53daa3efde
Pulse Link: https://otx.alienvault.com/pulse/6aa835ee9dc88a53daa3efde
Pulse Author: CyberHunter_NL
Created: 2026-09-14 17:59:10

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#SSL #VPN #Vulnerability #OTX #CyberHunter_NL

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

Indicators extracted from public reporting. Source: https://www.f5.com/labs/articles/cloud-takeover-mass-scanning-for-exposed-vite-endpoints-cve-2026-39364

Pulse ID: 6aa827098a5afc79562c13c8
Pulse Link: https://otx.alienvault.com/pulse/6aa827098a5afc79562c13c8
Pulse Author: CyberHunter_NL
Created: 2026-09-14 16:55:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #Azure #OTX #CyberHunter_NL

Malicious Twitch Extension Exposes OAuth Tokens of 30,000 Chrome and Firefox Users

Indicators extracted from public reporting. Source: https://socket.dev/blog/malicious-twitch-browser-extension

Pulse ID: 6aa7fd0924a922abb5fe4702
Pulse Link: https://otx.alienvault.com/pulse/6aa7fd0924a922abb5fe4702
Pulse Author: CyberHunter_NL
Created: 2026-09-14 13:56:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Chrome #FireFox #OTX #CyberHunter_NL

Cyclops Blink Evolves Into x86-64 Linux Implant With Packet Sniffing and Internal Network Scanning

Indicators extracted from public reporting. Source: https://www.sophos.com/en-gb/blog/eye-spy-cyclops-blink-returns-with-extended-capabilities/

Pulse ID: 6aa7fd0f75016a3168fa100c
Pulse Link: https://otx.alienvault.com/pulse/6aa7fd0f75016a3168fa100c
Pulse Author: CyberHunter_NL
Created: 2026-09-14 13:56:31

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Linux #OTX #CyberHunter_NL

One Click on a Malicious Link Lets Hackers Backdoor Sogou Input Method Users

Indicators extracted from public reporting. Source: https://www.gendigital.com/blog/insights/research/one-click-backdoor-sogou

Pulse ID: 6aa7fd15b23e2bb5be55eed8
Pulse Link: https://otx.alienvault.com/pulse/6aa7fd15b23e2bb5be55eed8
Pulse Author: CyberHunter_NL
Created: 2026-09-14 13:56:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #OTX #CyberHunter_NL

Hackers Deploy Casbaneiro Banking Trojan That Activates When Victims Open Bank Websites

Indicators extracted from public reporting. Source: https://www.fortinet.com/blog/threat-research/casbaneiro-a-banking-trojan-with-distributed-data-receiving-servers

Pulse ID: 6aa7b6a228f095cb8744d1ee
Pulse Link: https://otx.alienvault.com/pulse/6aa7b6a228f095cb8744d1ee
Pulse Author: CyberHunter_NL
Created: 2026-09-14 08:56:02

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BankingTrojan #Deploy #Bank #OTX #CyberHunter_NL

Hackers Abuse YouTube Gaming Channels and SEO Poisoning to Deploy RATs and Chrome Hijacker

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/ppi-network-malware-campaign-analysis/

Pulse ID: 6aa7b6b92f301028ac1edc54
Pulse Link: https://otx.alienvault.com/pulse/6aa7b6b92f301028ac1edc54
Pulse Author: CyberHunter_NL
Created: 2026-09-14 08:56:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Chrome #Deploy #SEOPoisoning #YouTube #OTX #CyberHunter_NL

Hackers Abuse YouTube Gaming Channels and SEO Poisoning to Deploy RATs and Chrome Hijacker

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/ppi-network-malware-campaign-analysis/

Pulse ID: 6aa7b6b92f301028ac1edc54
Pulse Link: https://otx.alienvault.com/pulse/6aa7b6b92f301028ac1edc54
Pulse Author: CyberHunter_NL
Created: 2026-09-14 08:56:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Chrome #Deploy #SEOPoisoning #YouTube #OTX #CyberHunter_NL

Hackers Abuse YouTube Gaming Channels and SEO Poisoning to Deploy RATs and Chrome Hijacker

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/ppi-network-malware-campaign-analysis/

Pulse ID: 6aa7b6b92f301028ac1edc54
Pulse Link: https://otx.alienvault.com/pulse/6aa7b6b92f301028ac1edc54
Pulse Author: CyberHunter_NL
Created: 2026-09-14 08:56:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Chrome #Deploy #SEOPoisoning #YouTube #OTX #CyberHunter_NL

Hackers Abuse YouTube Gaming Channels and SEO Poisoning to Deploy RATs and Chrome Hijacker

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/ppi-network-malware-campaign-analysis/

Pulse ID: 6aa7b6b92f301028ac1edc54
Pulse Link: https://otx.alienvault.com/pulse/6aa7b6b92f301028ac1edc54
Pulse Author: CyberHunter_NL
Created: 2026-09-14 08:56:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Chrome #Deploy #SEOPoisoning #YouTube #OTX #CyberHunter_NL

Hackers Abuse YouTube Gaming Channels and SEO Poisoning to Deploy RATs and Chrome Hijacker

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/ppi-network-malware-campaign-analysis/

Pulse ID: 6aa7b6b92f301028ac1edc54
Pulse Link: https://otx.alienvault.com/pulse/6aa7b6b92f301028ac1edc54
Pulse Author: CyberHunter_NL
Created: 2026-09-14 08:56:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Chrome #Deploy #SEOPoisoning #YouTube #OTX #CyberHunter_NL

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

Indicators extracted from public reporting. Source: https://socket.dev/blog/malicious-twitch-browser-extension

Pulse ID: 6aa7b6c46c7b4754ba91e496
Pulse Link: https://otx.alienvault.com/pulse/6aa7b6c46c7b4754ba91e496
Pulse Author: CyberHunter_NL
Created: 2026-09-14 08:56:36

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #OTX #CyberHunter_NL

OpenAI Agent Swarm Hacks RubyGems Package Manager

Indicators extracted from public reporting. Source: https://www.rubyhack.ai/

Pulse ID: 6aa7b6e08bbe641908be34b5
Pulse Link: https://otx.alienvault.com/pulse/6aa7b6e08bbe641908be34b5
Pulse Author: CyberHunter_NL
Created: 2026-09-14 08:57:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#OTX #CyberHunter_NL

Hackers Abuse AutoIt to Inject AsyncRAT Into Microsoft-Signed Windows Process

Indicators extracted from public reporting. Source: https://www.pointwild.com/threat-intelligence/asyncrat-delivered-via-autoit-full-chain-analysis/

Pulse ID: 6aa7a88342ad718ae208e629
Pulse Link: https://otx.alienvault.com/pulse/6aa7a88342ad718ae208e629
Pulse Author: CyberHunter_NL
Created: 2026-09-14 07:55:47

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AsyncRAT #Autoit #Microsoft #Windows #OTX #CyberHunter_NL

Hackers Abuse AutoIt to Inject AsyncRAT Into Microsoft-Signed Windows Process

Indicators extracted from public reporting. Source: https://www.pointwild.com/threat-intelligence/asyncrat-delivered-via-autoit-full-chain-analysis/

Pulse ID: 6aa7a88342ad718ae208e629
Pulse Link: https://otx.alienvault.com/pulse/6aa7a88342ad718ae208e629
Pulse Author: CyberHunter_NL
Created: 2026-09-14 07:55:47

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AsyncRAT #Autoit #Microsoft #Windows #OTX #CyberHunter_NL

Hackers Abuse AutoIt to Inject AsyncRAT Into Microsoft-Signed Windows Process

Indicators extracted from public reporting. Source: https://www.pointwild.com/threat-intelligence/asyncrat-delivered-via-autoit-full-chain-analysis/

Pulse ID: 6aa7a88342ad718ae208e629
Pulse Link: https://otx.alienvault.com/pulse/6aa7a88342ad718ae208e629
Pulse Author: CyberHunter_NL
Created: 2026-09-14 07:55:47

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AsyncRAT #Autoit #Microsoft #Windows #OTX #CyberHunter_NL

Hackers Abuse AutoIt to Inject AsyncRAT Into Microsoft-Signed Windows Process

Indicators extracted from public reporting. Source: https://www.pointwild.com/threat-intelligence/asyncrat-delivered-via-autoit-full-chain-analysis/

Pulse ID: 6aa7a88342ad718ae208e629
Pulse Link: https://otx.alienvault.com/pulse/6aa7a88342ad718ae208e629
Pulse Author: CyberHunter_NL
Created: 2026-09-14 07:55:47

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AsyncRAT #Autoit #Microsoft #Windows #OTX #CyberHunter_NL

Hackers Abuse AutoIt to Inject AsyncRAT Into Microsoft-Signed Windows Process

Indicators extracted from public reporting. Source: https://www.pointwild.com/threat-intelligence/asyncrat-delivered-via-autoit-full-chain-analysis/

Pulse ID: 6aa7a88342ad718ae208e629
Pulse Link: https://otx.alienvault.com/pulse/6aa7a88342ad718ae208e629
Pulse Author: CyberHunter_NL
Created: 2026-09-14 07:55:47

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AsyncRAT #Autoit #Microsoft #Windows #OTX #CyberHunter_NL

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Indicators extracted from public reporting. Source: https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html

Pulse ID: 6aa6813e97d6f6ea68d29c85
Pulse Link: https://otx.alienvault.com/pulse/6aa6813e97d6f6ea68d29c85
Pulse Author: CyberHunter_NL
Created: 2026-09-13 10:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cloud #Microsoft #Phishing #OTX #CyberHunter_NL

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Indicators extracted from public reporting. Source: https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html

Pulse ID: 6aa6813e97d6f6ea68d29c85
Pulse Link: https://otx.alienvault.com/pulse/6aa6813e97d6f6ea68d29c85
Pulse Author: CyberHunter_NL
Created: 2026-09-13 10:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cloud #Microsoft #Phishing #OTX #CyberHunter_NL

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Indicators extracted from public reporting. Source: https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html

Pulse ID: 6aa6813e97d6f6ea68d29c85
Pulse Link: https://otx.alienvault.com/pulse/6aa6813e97d6f6ea68d29c85
Pulse Author: CyberHunter_NL
Created: 2026-09-13 10:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cloud #Microsoft #Phishing #OTX #CyberHunter_NL

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Indicators extracted from public reporting. Source: https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html

Pulse ID: 6aa6813e97d6f6ea68d29c85
Pulse Link: https://otx.alienvault.com/pulse/6aa6813e97d6f6ea68d29c85
Pulse Author: CyberHunter_NL
Created: 2026-09-13 10:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cloud #Microsoft #Phishing #OTX #CyberHunter_NL

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Indicators extracted from public reporting. Source: https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html

Pulse ID: 6aa6813e97d6f6ea68d29c85
Pulse Link: https://otx.alienvault.com/pulse/6aa6813e97d6f6ea68d29c85
Pulse Author: CyberHunter_NL
Created: 2026-09-13 10:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cloud #Microsoft #Phishing #OTX #CyberHunter_NL