#https — Public Fediverse posts

Ashcraft makes MLB history with stellar start https://www.rawchili.com/mlb/778006/ #Baseball #FleshEatingBacteria #Https://philCdcGov/detailsAspx?pid=6936 #MLB #pirates #Pittsburgh #PittsburghPirates #PittsburghPirates

Curiouser and Curiouser

Indicators extracted from public reporting. Source: https://talosintelligence.com

Pulse ID: 6a7e2fb107f9a7cc1cd4e95b
Pulse Link: https://otx.alienvault.com/pulse/6a7e2fb107f9a7cc1cd4e95b
Pulse Author: CyberHunter_NL
Created: 2026-08-13 20:57:21

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Talos #bot #CyberHunter_NL

Curiouser and Curiouser

Indicators extracted from public reporting. Source: https://talosintelligence.com

Pulse ID: 6a7e2fb107f9a7cc1cd4e95b
Pulse Link: https://otx.alienvault.com/pulse/6a7e2fb107f9a7cc1cd4e95b
Pulse Author: CyberHunter_NL
Created: 2026-08-13 20:57:21

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Talos #bot #CyberHunter_NL

Guardians blanked by Tigers, drop 2 of 3 in series https://www.rawchili.com/mlb/777888/ #Baseball #Cleveland #ClevelandGuardians #ClevelandGuardians #FleshEatingBacteria #Guardians #Https://philCdcGov/detailsAspx?pid=6936 #MLB

AI 'watermark removers' flood the web. Almost none can prove they work.

Indicators extracted from public reporting. Source: https://pasqualepillitteri.it/en/news/10649/claude-watermark-remover-github-tested

Pulse ID: 6a7e052794ae78dc7d5d109a
Pulse Link: https://otx.alienvault.com/pulse/6a7e052794ae78dc7d5d109a
Pulse Author: CyberHunter_NL
Created: 2026-08-13 17:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #GitHub #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

AI 'watermark removers' flood the web. Almost none can prove they work.

Indicators extracted from public reporting. Source: https://pasqualepillitteri.it/en/news/10649/claude-watermark-remover-github-tested

Pulse ID: 6a7e052794ae78dc7d5d109a
Pulse Link: https://otx.alienvault.com/pulse/6a7e052794ae78dc7d5d109a
Pulse Author: CyberHunter_NL
Created: 2026-08-13 17:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #GitHub #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

@b0rk

yeah me ISP in here in #Iran during the protests was seemingly trying to do #MITM on both #SSH and #HTTPS. Or perhaps it was the network admin as we were in a government building?

Also please use hashtags!

@b0rk

yeah me ISP in here in #Iran during the protests was seemingly trying to do #MITM on both #SSH and #HTTPS. Or perhaps it was the network admin as we were in a government building?

Also please use hashtags!

AmnesiaStealer macOS Malware Hijacks Browser Sessions via Fake GitHub Lure

Indicators extracted from public reporting. Source: https://www.jamf.com/blog/amnesia-stealer-macos-infostealer-clickfix/

Pulse ID: 6a7df72c743c82d5d51acf07
Pulse Link: https://otx.alienvault.com/pulse/6a7df72c743c82d5d51acf07
Pulse Author: CyberHunter_NL
Created: 2026-08-13 16:56:12

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberSecurity #GitHub #HTTP #HTTPS #InfoSec #InfoStealer #Mac #MacOS #Malware #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

AmnesiaStealer macOS Malware Hijacks Browser Sessions via Fake GitHub Lure

Indicators extracted from public reporting. Source: https://www.jamf.com/blog/amnesia-stealer-macos-infostealer-clickfix/

Pulse ID: 6a7df72c743c82d5d51acf07
Pulse Link: https://otx.alienvault.com/pulse/6a7df72c743c82d5d51acf07
Pulse Author: CyberHunter_NL
Created: 2026-08-13 16:56:12

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberSecurity #GitHub #HTTP #HTTPS #InfoSec #InfoStealer #Mac #MacOS #Malware #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

Armored Likho Still Toolkit Steals Telegram Sessions and Records Victims’ Conversations

Indicators extracted from public reporting. Source: https://securelist.com/armored-likho-still-toolkit/121033/

Pulse ID: 6a7dbee44352b7893591e9d3
Pulse Link: https://otx.alienvault.com/pulse/6a7dbee44352b7893591e9d3
Pulse Author: CyberHunter_NL
Created: 2026-08-13 12:56:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #SecureList #Telegram #bot #CyberHunter_NL

Armored Likho Still Toolkit Steals Telegram Sessions and Records Victims’ Conversations

Indicators extracted from public reporting. Source: https://securelist.com/armored-likho-still-toolkit/121033/

Pulse ID: 6a7dbee44352b7893591e9d3
Pulse Link: https://otx.alienvault.com/pulse/6a7dbee44352b7893591e9d3
Pulse Author: CyberHunter_NL
Created: 2026-08-13 12:56:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #SecureList #Telegram #bot #CyberHunter_NL

Kimwolf v7 Botnet Uses Chrome Browser Fingerprints to Hide HTTP/2 DDoS Attacks

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7da2b72179e3a4cb0c1d31
Pulse Link: https://otx.alienvault.com/pulse/6a7da2b72179e3a4cb0c1d31
Pulse Author: CyberHunter_NL
Created: 2026-08-13 10:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Chrome #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Kimwolf v7 Botnet Uses Chrome Browser Fingerprints to Hide HTTP/2 DDoS Attacks

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7da2b72179e3a4cb0c1d31
Pulse Link: https://otx.alienvault.com/pulse/6a7da2b72179e3a4cb0c1d31
Pulse Author: CyberHunter_NL
Created: 2026-08-13 10:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Chrome #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side

Indicators extracted from public reporting. Source: https://sed-cms.broadcom.com/sites/default/files/2026-08/Jewelbug%20Dossier.pdf

Pulse ID: 6a7da2dc1ab7ab31faf83152
Pulse Link: https://otx.alienvault.com/pulse/6a7da2dc1ab7ab31faf83152
Pulse Author: CyberHunter_NL
Created: 2026-08-13 10:56:27

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DoS #Espionage #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #PDF #RAT #RCE #bot #CyberHunter_NL

Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side

Indicators extracted from public reporting. Source: https://sed-cms.broadcom.com/sites/default/files/2026-08/Jewelbug%20Dossier.pdf

Pulse ID: 6a7da2dc1ab7ab31faf83152
Pulse Link: https://otx.alienvault.com/pulse/6a7da2dc1ab7ab31faf83152
Pulse Author: CyberHunter_NL
Created: 2026-08-13 10:56:27

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DoS #Espionage #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #PDF #RAT #RCE #bot #CyberHunter_NL

Project CAV3RN uses Google Apps Script for stealthy C2 in Israel

A modular espionage framework targeting entities in Israel has evolved to incorporate sophisticated command-and-control capabilities. The framework employs DNS A-record responses to dynamically select between direct HTTPS connections and a Google Apps Script relay for each transaction, enabling operators to rotate communication channels and deployment identifiers. The communication module uses DNS infrastructure to validate and update Google Apps Script deployment IDs, while XOR encoding obfuscates command-and-control traffic. An inter-component broker coordinates framework DLL components, enabling runtime upgrades without system restarts. The infrastructure leveraged a previously expired Israeli domain, now repurposed with custom authoritative DNS servers, alongside legitimate Google services to blend malicious traffic with normal network activity.

Pulse ID: 6a7d8cc2109e73821519b31d
Pulse Link: https://otx.alienvault.com/pulse/6a7d8cc2109e73821519b31d
Pulse Author: AlienVault
Created: 2026-08-13 09:22:10

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DNS #Espionage #Google #HTTP #HTTPS #InfoSec #Israel #OTX #OpenThreatExchange #RAT #bot #AlienVault

Project CAV3RN uses Google Apps Script for stealthy C2 in Israel

A modular espionage framework targeting entities in Israel has evolved to incorporate sophisticated command-and-control capabilities. The framework employs DNS A-record responses to dynamically select between direct HTTPS connections and a Google Apps Script relay for each transaction, enabling operators to rotate communication channels and deployment identifiers. The communication module uses DNS infrastructure to validate and update Google Apps Script deployment IDs, while XOR encoding obfuscates command-and-control traffic. An inter-component broker coordinates framework DLL components, enabling runtime upgrades without system restarts. The infrastructure leveraged a previously expired Israeli domain, now repurposed with custom authoritative DNS servers, alongside legitimate Google services to blend malicious traffic with normal network activity.

Pulse ID: 6a7d8cc2109e73821519b31d
Pulse Link: https://otx.alienvault.com/pulse/6a7d8cc2109e73821519b31d
Pulse Author: AlienVault
Created: 2026-08-13 09:22:10

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DNS #Espionage #Google #HTTP #HTTPS #InfoSec #Israel #OTX #OpenThreatExchange #RAT #bot #AlienVault

Phantom Stealer Hides Inside PNG Files, Then Steals Your Passwords, Cookies and Crypto

Indicators extracted from public reporting. Source: https://www.splunk.com/en_us/blog/security/phantom-stealer-shellcode-steganography-credential-theft.html

Pulse ID: 6a7d94b079c2c1e42df7974b
Pulse Link: https://otx.alienvault.com/pulse/6a7d94b079c2c1e42df7974b
Pulse Author: CyberHunter_NL
Created: 2026-08-13 09:56:00

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cookies #CyberSecurity #HTML #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #Password #Passwords #RCE #ShellCode #Steganography #Word #bot #CyberHunter_NL

Phantom Stealer Hides Inside PNG Files, Then Steals Your Passwords, Cookies and Crypto

Indicators extracted from public reporting. Source: https://www.splunk.com/en_us/blog/security/phantom-stealer-shellcode-steganography-credential-theft.html

Pulse ID: 6a7d94b079c2c1e42df7974b
Pulse Link: https://otx.alienvault.com/pulse/6a7d94b079c2c1e42df7974b
Pulse Author: CyberHunter_NL
Created: 2026-08-13 09:56:00

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cookies #CyberSecurity #HTML #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #Password #Passwords #RCE #ShellCode #Steganography #Word #bot #CyberHunter_NL

Armored Likho expands its cyber-espionage toolkit

Indicators extracted from public reporting. Source: https://securelist.com/armored-likho-still-toolkit/121033/

Pulse ID: 6a7d8697e0bd510e87086185
Pulse Link: https://otx.alienvault.com/pulse/6a7d8697e0bd510e87086185
Pulse Author: CyberHunter_NL
Created: 2026-08-13 08:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Espionage #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #SecureList #bot #cyberespionage #CyberHunter_NL

Armored Likho expands its cyber-espionage toolkit

Indicators extracted from public reporting. Source: https://securelist.com/armored-likho-still-toolkit/121033/

Pulse ID: 6a7d8697e0bd510e87086185
Pulse Link: https://otx.alienvault.com/pulse/6a7d8697e0bd510e87086185
Pulse Author: CyberHunter_NL
Created: 2026-08-13 08:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Espionage #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #SecureList #bot #cyberespionage #CyberHunter_NL

"City-Forum" data-theft attacks target Salesforce, ServiceNow portals

Indicators extracted from public reporting. Source: https://www.reco.ai/blog/city-forum-campaign-salesforce-servicenow

Pulse ID: 6a7d084bd3aa421c0a525be6
Pulse Link: https://otx.alienvault.com/pulse/6a7d084bd3aa421c0a525be6
Pulse Author: CyberHunter_NL
Created: 2026-08-12 23:56:59

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

"City-Forum" data-theft attacks target Salesforce, ServiceNow portals

Indicators extracted from public reporting. Source: https://www.reco.ai/blog/city-forum-campaign-salesforce-servicenow

Pulse ID: 6a7d084bd3aa421c0a525be6
Pulse Link: https://otx.alienvault.com/pulse/6a7d084bd3aa421c0a525be6
Pulse Author: CyberHunter_NL
Created: 2026-08-12 23:56:59

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

Indicators extracted from public reporting. Source: https://research.checkpoint.com/2026/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack/

Pulse ID: 6a7cc1f91810a474e1284a56
Pulse Link: https://otx.alienvault.com/pulse/6a7cc1f91810a474e1284a56
Pulse Author: CyberHunter_NL
Created: 2026-08-12 18:56:57

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #CyberSecurity #HTTP #HTTPS #InfoSec #Lazarus #OTX #OpenThreatExchange #RCE #Windows #ZeroDay #bot #CyberHunter_NL

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

Indicators extracted from public reporting. Source: https://research.checkpoint.com/2026/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack/

Pulse ID: 6a7cc1f91810a474e1284a56
Pulse Link: https://otx.alienvault.com/pulse/6a7cc1f91810a474e1284a56
Pulse Author: CyberHunter_NL
Created: 2026-08-12 18:56:57

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #CyberSecurity #HTTP #HTTPS #InfoSec #Lazarus #OTX #OpenThreatExchange #RCE #Windows #ZeroDay #bot #CyberHunter_NL

New “City-Forum” Hackers Attacking Salesforce and ServiceNow Instances Worldwide

Indicators extracted from public reporting. Source: https://www.reco.ai/blog/city-forum-campaign-salesforce-servicenow

Pulse ID: 6a7cb3a3d02c4e72307b552e
Pulse Link: https://otx.alienvault.com/pulse/6a7cb3a3d02c4e72307b552e
Pulse Author: CyberHunter_NL
Created: 2026-08-12 17:55:47

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

New “City-Forum” Hackers Attacking Salesforce and ServiceNow Instances Worldwide

Indicators extracted from public reporting. Source: https://www.reco.ai/blog/city-forum-campaign-salesforce-servicenow

Pulse ID: 6a7cb3a3d02c4e72307b552e
Pulse Link: https://otx.alienvault.com/pulse/6a7cb3a3d02c4e72307b552e
Pulse Author: CyberHunter_NL
Created: 2026-08-12 17:55:47

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

deno-case-studies

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/deno-case-studies

Pulse ID: 6a7c7b59412e34c4ea97e1b9
Pulse Link: https://otx.alienvault.com/pulse/6a7c7b59412e34c4ea97e1b9
Pulse Author: CyberHunter_NL
Created: 2026-08-12 13:55:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Sophos #bot #CyberHunter_NL

deno-case-studies

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/deno-case-studies

Pulse ID: 6a7c7b59412e34c4ea97e1b9
Pulse Link: https://otx.alienvault.com/pulse/6a7c7b59412e34c4ea97e1b9
Pulse Author: CyberHunter_NL
Created: 2026-08-12 13:55:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Sophos #bot #CyberHunter_NL

ClickFix campaign abuses Deno runtime for infostealer delivery

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/clickfix-campaign-abuses-deno-runtime-for-infostealer-delivery

Pulse ID: 6a7c7b5dcc776888b41f6fab
Pulse Link: https://otx.alienvault.com/pulse/6a7c7b5dcc776888b41f6fab
Pulse Author: CyberHunter_NL
Created: 2026-08-12 13:55:41

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #InfoStealer #OTX #OpenThreatExchange #RCE #Sophos #bot #CyberHunter_NL

ClickFix campaign abuses Deno runtime for infostealer delivery

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/clickfix-campaign-abuses-deno-runtime-for-infostealer-delivery

Pulse ID: 6a7c7b5dcc776888b41f6fab
Pulse Link: https://otx.alienvault.com/pulse/6a7c7b5dcc776888b41f6fab
Pulse Author: CyberHunter_NL
Created: 2026-08-12 13:55:41

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #InfoStealer #OTX #OpenThreatExchange #RCE #Sophos #bot #CyberHunter_NL

737 Fake Chrome VPN Extensions Hijack Browser Traffic Through Attacker-Controlled SOCKS5 Proxies

Indicators extracted from public reporting. Source: https://socket.dev/blog/chrome-vpn-extension-impersonation

Pulse ID: 6a7c7b770ce5c908efa958f2
Pulse Link: https://otx.alienvault.com/pulse/6a7c7b770ce5c908efa958f2
Pulse Author: CyberHunter_NL
Created: 2026-08-12 13:56:07

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Chrome #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Troll #VPN #bot #socks5 #CyberHunter_NL

737 Fake Chrome VPN Extensions Hijack Browser Traffic Through Attacker-Controlled SOCKS5 Proxies

Indicators extracted from public reporting. Source: https://socket.dev/blog/chrome-vpn-extension-impersonation

Pulse ID: 6a7c7b770ce5c908efa958f2
Pulse Link: https://otx.alienvault.com/pulse/6a7c7b770ce5c908efa958f2
Pulse Author: CyberHunter_NL
Created: 2026-08-12 13:56:07

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Chrome #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Troll #VPN #bot #socks5 #CyberHunter_NL

Сертификат TLS для IP-адреса

Let’s Encrypt всегда проверял только доменные имена. Однако с развитием микросервисных архитектур, API-взаимодействий и IoT-устройств возникла необходимость защищать трафик серверов, у которых нет домена. 15 января 2026 года стал общедоступным профиль shortlived с 6-дневными сертификатами для «чистых» IP-адресов. Теперь не нужно тратить деньги и время на покупку и регистрацию бесполезных доменных имен. На Хабре уже есть подробные статьи и руководства на тему настройки HTTPS, выпуска сертификатов и конфигурации веб-серверов, но в большинстве случаев они объясняют, как защитить сайт с доменом. Мы же разберём, как обойтись без него и выпустить официальный доверенный TLS-сертификат прямо на «голый» IPv4-адрес.

https://habr.com/ru/companies/ruvds/articles/1069222/

#ruvds_статьи #vds #vps #https #lets_encrypt #tlsсертификат

Fake CCleaner Download Installs GhostDesk Chrome Spyware on Windows PCs

Indicators extracted from public reporting. Source: https://www.malwarebytes.com/blog/threat-intel/2026/08/fake-ccleaner-installs-ghostdesk-chrome-spyware

Pulse ID: 6a7c6d5cf70eca6997f0ff3b
Pulse Link: https://otx.alienvault.com/pulse/6a7c6d5cf70eca6997f0ff3b
Pulse Author: CyberHunter_NL
Created: 2026-08-12 12:55:56

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CCleaner #Chrome #CyberSecurity #HTTP #HTTPS #InfoSec #MalWareBytes #Malware #OTX #OpenThreatExchange #RCE #SpyWare #Windows #bot #CyberHunter_NL

Fake CCleaner Download Installs GhostDesk Chrome Spyware on Windows PCs

Indicators extracted from public reporting. Source: https://www.malwarebytes.com/blog/threat-intel/2026/08/fake-ccleaner-installs-ghostdesk-chrome-spyware

Pulse ID: 6a7c6d5cf70eca6997f0ff3b
Pulse Link: https://otx.alienvault.com/pulse/6a7c6d5cf70eca6997f0ff3b
Pulse Author: CyberHunter_NL
Created: 2026-08-12 12:55:56

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CCleaner #Chrome #CyberSecurity #HTTP #HTTPS #InfoSec #MalWareBytes #Malware #OTX #OpenThreatExchange #RCE #SpyWare #Windows #bot #CyberHunter_NL

13-Minute WindRelay Malware Attack Uses SpyNote RAT and NFC Relay Malware to Drain Victim Accounts

Indicators extracted from public reporting. Source: https://www.group-ib.com/blog/windrelay-nfc-spynote-rat-combo-fraud/

Pulse ID: 6a7c6d65bad96416b5bbfbd3
Pulse Link: https://otx.alienvault.com/pulse/6a7c6d65bad96416b5bbfbd3
Pulse Author: CyberHunter_NL
Created: 2026-08-12 12:56:05

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #GroupIB #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RAT #RCE #SpyNote #bot #CyberHunter_NL

13-Minute WindRelay Malware Attack Uses SpyNote RAT and NFC Relay Malware to Drain Victim Accounts

Indicators extracted from public reporting. Source: https://www.group-ib.com/blog/windrelay-nfc-spynote-rat-combo-fraud/

Pulse ID: 6a7c6d65bad96416b5bbfbd3
Pulse Link: https://otx.alienvault.com/pulse/6a7c6d65bad96416b5bbfbd3
Pulse Author: CyberHunter_NL
Created: 2026-08-12 12:56:05

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #GroupIB #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RAT #RCE #SpyNote #bot #CyberHunter_NL

CAV3RN Uses Google Apps Script as C2 Relay to Hide Malware Traffic Behind Google Infrastructure

Indicators extracted from public reporting. Source: https://securelist.com/project-cav3rn-continues/120991/

Pulse ID: 6a7c513bd3c90ca3ddb62baf
Pulse Link: https://otx.alienvault.com/pulse/6a7c513bd3c90ca3ddb62baf
Pulse Author: CyberHunter_NL
Created: 2026-08-12 10:55:55

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Google #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #SecureList #bot #CyberHunter_NL

CAV3RN Uses Google Apps Script as C2 Relay to Hide Malware Traffic Behind Google Infrastructure

Indicators extracted from public reporting. Source: https://securelist.com/project-cav3rn-continues/120991/

Pulse ID: 6a7c513bd3c90ca3ddb62baf
Pulse Link: https://otx.alienvault.com/pulse/6a7c513bd3c90ca3ddb62baf
Pulse Author: CyberHunter_NL
Created: 2026-08-12 10:55:55

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Google #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #SecureList #bot #CyberHunter_NL

Sandworm Fake Job Interviews Push Trojanized WireGuard VPN to Infect IT Professionals

Indicators extracted from public reporting. Source: https://cert.gov.ua/article/6318863

Pulse ID: 6a7c433680aefab88821c968
Pulse Link: https://otx.alienvault.com/pulse/6a7c433680aefab88821c968
Pulse Author: CyberHunter_NL
Created: 2026-08-12 09:56:06

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Sandworm #Trojan #VPN #Worm #bot #CyberHunter_NL

Sandworm Fake Job Interviews Push Trojanized WireGuard VPN to Infect IT Professionals

Indicators extracted from public reporting. Source: https://cert.gov.ua/article/6318863

Pulse ID: 6a7c433680aefab88821c968
Pulse Link: https://otx.alienvault.com/pulse/6a7c433680aefab88821c968
Pulse Author: CyberHunter_NL
Created: 2026-08-12 09:56:06

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Sandworm #Trojan #VPN #Worm #bot #CyberHunter_NL

Google-themed Credential Phishing Attempt Delivered Through a Fake ‘New Audio MSG’ Email

Indicators extracted from public reporting. Source: https://cybersecuritynews.com/google-themed-credential-phishing/

Pulse ID: 6a7c351ee2a19c50e9902e3c
Pulse Link: https://otx.alienvault.com/pulse/6a7c351ee2a19c50e9902e3c
Pulse Author: CyberHunter_NL
Created: 2026-08-12 08:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Email #Google #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #Phishing #RCE #bot #CyberHunter_NL

Google-themed Credential Phishing Attempt Delivered Through a Fake ‘New Audio MSG’ Email

Indicators extracted from public reporting. Source: https://cybersecuritynews.com/google-themed-credential-phishing/

Pulse ID: 6a7c351ee2a19c50e9902e3c
Pulse Link: https://otx.alienvault.com/pulse/6a7c351ee2a19c50e9902e3c
Pulse Author: CyberHunter_NL
Created: 2026-08-12 08:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Email #Google #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #Phishing #RCE #bot #CyberHunter_NL

ClickFix Attack Abuses Signed IBM SPSS IDE to Deploy New CNCMachineRMS RAT

Indicators extracted from public reporting. Source: https://www.levelblue.com/blogs/spiderlabs-blog/cncmachinerms-the-undocumented-rat-at-the-end-of-a-babadeda-chain

Pulse ID: 6a7c352538d09ace0dfaf9ce
Pulse Link: https://otx.alienvault.com/pulse/6a7c352538d09ace0dfaf9ce
Pulse Author: CyberHunter_NL
Created: 2026-08-12 08:56:05

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #Mac #OTX #OpenThreatExchange #RAT #RCE #bot #CyberHunter_NL

ClickFix Attack Abuses Signed IBM SPSS IDE to Deploy New CNCMachineRMS RAT

Indicators extracted from public reporting. Source: https://www.levelblue.com/blogs/spiderlabs-blog/cncmachinerms-the-undocumented-rat-at-the-end-of-a-babadeda-chain

Pulse ID: 6a7c352538d09ace0dfaf9ce
Pulse Link: https://otx.alienvault.com/pulse/6a7c352538d09ace0dfaf9ce
Pulse Author: CyberHunter_NL
Created: 2026-08-12 08:56:05

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #Mac #OTX #OpenThreatExchange #RAT #RCE #bot #CyberHunter_NL

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

Indicators extracted from public reporting. Source: https://exposure.cloudsek.com/ai-supply-chain-incident

Pulse ID: 6a7c3531982e86f5db5a1906
Pulse Link: https://otx.alienvault.com/pulse/6a7c3531982e86f5db5a1906
Pulse Author: CyberHunter_NL
Created: 2026-08-12 08:56:17

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cloud #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

Indicators extracted from public reporting. Source: https://exposure.cloudsek.com/ai-supply-chain-incident

Pulse ID: 6a7c3531982e86f5db5a1906
Pulse Link: https://otx.alienvault.com/pulse/6a7c3531982e86f5db5a1906
Pulse Author: CyberHunter_NL
Created: 2026-08-12 08:56:17

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cloud #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection

Socket's Threat Research Team identified a campaign of 737 malicious VPN and proxy extensions in the Chrome Web Store, accumulating over 75,000 installs. The extensions, published across 40 developer accounts, target Russian-speaking users seeking access to blocked services. 274 extensions impersonate 66 established VPN brands including Proton VPN, NordVPN, and AmneziaVPN. The extensions route all browser traffic through SOCKS5 proxies controlled by a single operator on port 1082, placing the threat actor in an adversary-in-the-middle position. Premium subscription tiers advertise servers in five countries that do not resolve. The campaign employs DNS-over-HTTPS for evasion, post-approval code substitution, and coordinated review gaming. The operation is linked to a Russian subscription VPN business that names a tax-registered self-employed individual as the contracting party.

Pulse ID: 6a7c183cfe509b035144c5a6
Pulse Link: https://otx.alienvault.com/pulse/6a7c183cfe509b035144c5a6
Pulse Author: AlienVault
Created: 2026-08-12 06:52:44

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AdversaryInTheMiddle #Browser #Chrome #CyberSecurity #DNS #ELF #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #Proxy #RAT #Russia #Troll #VPN #bot #socks5 #AlienVault

737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection

Socket's Threat Research Team identified a campaign of 737 malicious VPN and proxy extensions in the Chrome Web Store, accumulating over 75,000 installs. The extensions, published across 40 developer accounts, target Russian-speaking users seeking access to blocked services. 274 extensions impersonate 66 established VPN brands including Proton VPN, NordVPN, and AmneziaVPN. The extensions route all browser traffic through SOCKS5 proxies controlled by a single operator on port 1082, placing the threat actor in an adversary-in-the-middle position. Premium subscription tiers advertise servers in five countries that do not resolve. The campaign employs DNS-over-HTTPS for evasion, post-approval code substitution, and coordinated review gaming. The operation is linked to a Russian subscription VPN business that names a tax-registered self-employed individual as the contracting party.

Pulse ID: 6a7c183cfe509b035144c5a6
Pulse Link: https://otx.alienvault.com/pulse/6a7c183cfe509b035144c5a6
Pulse Author: AlienVault
Created: 2026-08-12 06:52:44

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AdversaryInTheMiddle #Browser #Chrome #CyberSecurity #DNS #ELF #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #Proxy #RAT #Russia #Troll #VPN #bot #socks5 #AlienVault

Lazarus Hackers Actively Exploiting Windows AFD.sys Zero-Day to Deploy FudModule Rootkit

Indicators extracted from public reporting. Source: https://research.checkpoint.com/2026/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack/

Pulse ID: 6a7beecb020ccbfd7b706fad
Pulse Link: https://otx.alienvault.com/pulse/6a7beecb020ccbfd7b706fad
Pulse Author: CyberHunter_NL
Created: 2026-08-12 03:55:55

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #Lazarus #OTX #OpenThreatExchange #RCE #Rootkit #Windows #ZeroDay #bot #CyberHunter_NL

Lazarus Hackers Actively Exploiting Windows AFD.sys Zero-Day to Deploy FudModule Rootkit

Indicators extracted from public reporting. Source: https://research.checkpoint.com/2026/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack/

Pulse ID: 6a7beecb020ccbfd7b706fad
Pulse Link: https://otx.alienvault.com/pulse/6a7beecb020ccbfd7b706fad
Pulse Author: CyberHunter_NL
Created: 2026-08-12 03:55:55

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #Lazarus #OTX #OpenThreatExchange #RCE #Rootkit #Windows #ZeroDay #bot #CyberHunter_NL

Sandworm hackers target IT pros with trojanized WireGuard VPN client

Indicators extracted from public reporting. Source: https://cert.gov.ua/article/6318863

Pulse ID: 6a7b9a56ed0787edeab00dfb
Pulse Link: https://otx.alienvault.com/pulse/6a7b9a56ed0787edeab00dfb
Pulse Author: CyberHunter_NL
Created: 2026-08-11 21:55:34

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Sandworm #Trojan #VPN #Worm #bot #CyberHunter_NL

Sandworm hackers target IT pros with trojanized WireGuard VPN client

Indicators extracted from public reporting. Source: https://cert.gov.ua/article/6318863

Pulse ID: 6a7b9a56ed0787edeab00dfb
Pulse Link: https://otx.alienvault.com/pulse/6a7b9a56ed0787edeab00dfb
Pulse Author: CyberHunter_NL
Created: 2026-08-11 21:55:34

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Sandworm #Trojan #VPN #Worm #bot #CyberHunter_NL

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7b8c7ac9f862e53382eab9
Pulse Link: https://otx.alienvault.com/pulse/6a7b8c7ac9f862e53382eab9
Pulse Author: CyberHunter_NL
Created: 2026-08-11 20:56:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7b8c7ac9f862e53382eab9
Pulse Link: https://otx.alienvault.com/pulse/6a7b8c7ac9f862e53382eab9
Pulse Author: CyberHunter_NL
Created: 2026-08-11 20:56:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Fake CCleaner installs GhostDesk Chrome spyware

Indicators extracted from public reporting. Source: https://www.malwarebytes.com/blog/threat-intel/2026/08/fake-ccleaner-installs-ghostdesk-chrome-spyware

Pulse ID: 6a7b8c83bf51f40e5a39c8e5
Pulse Link: https://otx.alienvault.com/pulse/6a7b8c83bf51f40e5a39c8e5
Pulse Author: CyberHunter_NL
Created: 2026-08-11 20:56:35

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CCleaner #Chrome #CyberSecurity #HTTP #HTTPS #InfoSec #MalWareBytes #Malware #OTX #OpenThreatExchange #RCE #SpyWare #bot #CyberHunter_NL

Fake CCleaner installs GhostDesk Chrome spyware

Indicators extracted from public reporting. Source: https://www.malwarebytes.com/blog/threat-intel/2026/08/fake-ccleaner-installs-ghostdesk-chrome-spyware

Pulse ID: 6a7b8c83bf51f40e5a39c8e5
Pulse Link: https://otx.alienvault.com/pulse/6a7b8c83bf51f40e5a39c8e5
Pulse Author: CyberHunter_NL
Created: 2026-08-11 20:56:35

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CCleaner #Chrome #CyberSecurity #HTTP #HTTPS #InfoSec #MalWareBytes #Malware #OTX #OpenThreatExchange #RCE #SpyWare #bot #CyberHunter_NL

Expired DMARC reporting endpoint exposed a NYSE Fortune 1000's infrastructure for $10

Indicators extracted from public reporting. Source: https://www.reddit.com/r/netsec/comments/1vlsvsn/expired_dmarc_reporting_endpoint_exposed_a_nyse/

Pulse ID: 6a7b8c9bcdf961230075cfe4
Pulse Link: https://otx.alienvault.com/pulse/6a7b8c9bcdf961230075cfe4
Pulse Author: CyberHunter_NL
Created: 2026-08-11 20:56:59

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Endpoint #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL