#social-engineering — Public Fediverse posts

RE: https://infosec.exchange/@betweenthehacks/116885082512333574

I recently encountered a ClickFix attack while visiting a trusted website. After reproducing it across multiple browsers, I realized the larger story isn’t just the malware, it’s how attackers are increasingly impersonating security mechanisms themselves.

I wrote about the experience and what it means for users and organizations.

https://betweenthehacks.com/blog/clickfix

#Cybersecurity #ClickFix #SocialEngineering

RE: https://infosec.exchange/@betweenthehacks/116885082512333574

I recently encountered a ClickFix attack while visiting a trusted website. After reproducing it across multiple browsers, I realized the larger story isn’t just the malware, it’s how attackers are increasingly impersonating security mechanisms themselves.

I wrote about the experience and what it means for users and organizations.

https://betweenthehacks.com/blog/clickfix

#Cybersecurity #ClickFix #SocialEngineering

A CAPTCHA should never ask you to open Terminal.

I recently encountered a real ClickFix attack while visiting a trusted website. That experience led me to investigate why attackers are increasingly impersonating security itself instead of simply impersonating trusted brands.

New Between The Hacks article:

https://betweenthehacks.com/blog/clickfix

#ClickFix #Cybersecurity #InfoSec #SocialEngineering

A CAPTCHA should never ask you to open Terminal.

I recently encountered a real ClickFix attack while visiting a trusted website. That experience led me to investigate why attackers are increasingly impersonating security itself instead of simply impersonating trusted brands.

New Between The Hacks article:

https://betweenthehacks.com/blog/clickfix

#ClickFix #Cybersecurity #InfoSec #SocialEngineering

Fake job interview requests lead to Google account credential theft.

Employees responding to these job "opportunities" are reluctant to admit it to their employers once their accounts are compromised slowing down detection and response. A good social engineering campaign.

https://www.bleepingcomputer.com/news/security/phishing-poses-as-big-brand-job-interview-to-steal-google-accounts/

https://gist.github.com/BushidoUK/57c38d5ee75481fb237e968a537de778

#phishing #google #jobscam #socialengineering

Fake job interview requests lead to Google account credential theft.

Employees responding to these job "opportunities" are reluctant to admit it to their employers once their accounts are compromised slowing down detection and response. A good social engineering campaign.

https://www.bleepingcomputer.com/news/security/phishing-poses-as-big-brand-job-interview-to-steal-google-accounts/

https://gist.github.com/BushidoUK/57c38d5ee75481fb237e968a537de778

#phishing #google #jobscam #socialengineering

GDID: come Microsoft ha aiutato l’FBI a incastrare un presunto membro di Scattered Spider

https://insicurezzadigitale.com/gdid-come-microsoft-ha-aiutato-lfbi-a-incastrare-un-presunto-membro-di-scattered-spider/

GDID: come Microsoft ha aiutato l’FBI a incastrare un presunto membro di Scattered Spider

https://insicurezzadigitale.com/gdid-come-microsoft-ha-aiutato-lfbi-a-incastrare-un-presunto-membro-di-scattered-spider/

DATE: July 7, 2026 at 03:34PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

@AtriumHealth to Pay $1.8M to Settle Web Tracker Lawsuit: #NorthCarolina Nonprofit Is Latest #Healthcare Organization to Resolve #Privacy Claims Involving Online Trackers https://t.co/TFpT2g0gu1 #Pixel #HIPAA

Here are any URLs found in the article text:

https://t.co/TFpT2g0gu1

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

DATE: July 7, 2026 at 03:34PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

@AtriumHealth to Pay $1.8M to Settle Web Tracker Lawsuit: #NorthCarolina Nonprofit Is Latest #Healthcare Organization to Resolve #Privacy Claims Involving Online Trackers https://t.co/TFpT2g0gu1 #Pixel #HIPAA

Here are any URLs found in the article text:

https://t.co/TFpT2g0gu1

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

📬 Scattered Spider: Verhaftet wegen Windows?
#Cyberangriffe #Rechtssachen #digitaleForensik #FBI #GlobalDeviceIdentifier #MicrosoftGDID #PeterStokes #Ransomware #ScatteredSpider #socialengineering #SupersedingCriminalComplaint #Windows‑Telemetrie https://sc.tarnkappe.info/c9f42a

📬 Scattered Spider: Verhaftet wegen Windows?
#Cyberangriffe #Rechtssachen #digitaleForensik #FBI #GlobalDeviceIdentifier #MicrosoftGDID #PeterStokes #Ransomware #ScatteredSpider #socialengineering #SupersedingCriminalComplaint #Windows‑Telemetrie https://sc.tarnkappe.info/c9f42a

What Is the BabaDeda Loader? Analysis of a New ClickFix Malware Campaign.

The BabaDeda loader family has undergone significant advancements in its capabilities, particularly in stealth, evasion, and payload flexibility. Discovered during April 2026, this evolved framework continues to conceal malicious payloads within seemingly legitimate installer packages while expanding its functionality. The attack methodology begins with a social engineering exploit known as ClickFix, which encourages users to execute commands via trusted operating system utilities. This initial step transitions into a sophisticated multi-stage loader that employs several tactics, including hidden PowerShell commands, in-memory shellcode, DLL sideloading, and external payload storage.

Pulse ID: 6a47b2cc64d3d9241377df01
Pulse Link: https://otx.alienvault.com/pulse/6a47b2cc64d3d9241377df01
Pulse Author: AlienVault
Created: 2026-07-03 13:02:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #ICS #InfoSec #Malware #OTX #OpenThreatExchange #PowerShell #RAT #Rust #ShellCode #SideLoading #SocialEngineering #bot #AlienVault

What Is the BabaDeda Loader? Analysis of a New ClickFix Malware Campaign.

The BabaDeda loader family has undergone significant advancements in its capabilities, particularly in stealth, evasion, and payload flexibility. Discovered during April 2026, this evolved framework continues to conceal malicious payloads within seemingly legitimate installer packages while expanding its functionality. The attack methodology begins with a social engineering exploit known as ClickFix, which encourages users to execute commands via trusted operating system utilities. This initial step transitions into a sophisticated multi-stage loader that employs several tactics, including hidden PowerShell commands, in-memory shellcode, DLL sideloading, and external payload storage.

Pulse ID: 6a47b2cc64d3d9241377df01
Pulse Link: https://otx.alienvault.com/pulse/6a47b2cc64d3d9241377df01
Pulse Author: AlienVault
Created: 2026-07-03 13:02:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #ICS #InfoSec #Malware #OTX #OpenThreatExchange #PowerShell #RAT #Rust #ShellCode #SideLoading #SocialEngineering #bot #AlienVault

You Are Being Primed to Accept #Fascism (and don't even realize it)

#RevolutionaryTH0T #Capitalism #Propaganda #Ideology #UsVersusThem #SocialEngineering

https://www.youtube.com/watch?v=V7ZYWB6xU48

Learn everything you need to know about Social Engineering via these 62 free HackerNoon blog posts. https://hackernoon.com/62-blog-posts-to-learn-about-social-engineering #socialengineering

Learn everything you need to know about Social Engineering via these 62 free HackerNoon blog posts. https://hackernoon.com/62-blog-posts-to-learn-about-social-engineering #socialengineering

📬 GTA 6 Early Access: Fake-Webseiten locken Fans in Krypto-Falle
#Gaming #ITSicherheit #BankingTrojaner #Cybercrime #DLLSideloading #FakeWebseiten #GTA6EarlyAccess #KryptoZahlungen #Malware #Phishing #Scam #socialengineering https://sc.tarnkappe.info/8f96be

📬 GTA 6 Early Access: Fake-Webseiten locken Fans in Krypto-Falle
#Gaming #ITSicherheit #BankingTrojaner #Cybercrime #DLLSideloading #FakeWebseiten #GTA6EarlyAccess #KryptoZahlungen #Malware #Phishing #Scam #socialengineering https://sc.tarnkappe.info/8f96be

Once, during an #awareness session, I brought a jar into the room.

One of those old-school glass jars with a metal lid.

I put it on the table and asked the executives (not the CISOs) to drop a poker chip inside.

Yes, poker chips. Don’t laugh. That’s what I had.

The value of each chip was supposed to reflect two things: perceived risk and willingness to spend.

At the beginning, the jar looked miserable.

Two or three 50s.
One brave 500.
Fewer than ten 100s.

Then came lunch.
Paid for, obviously.
But lunch was also the exercise.

Heavy #socialengineering. Casual conversation. Names, routines, vendors, habits, internal friction, travel plans, tools, weak points, ego, trust.

Then the last two hours began.
Real risk demonstration.

#spearphishing built with information collected during lunch.
Fake WhatsApp chats after recon.
#OSINT before the session even restarted.
QR codes everywhere.

Then we talked about recovery costs.

Regulatory fines.
Production downtime.
Loss of trust.
Reputational damage.
The unpleasant difference between “unlikely” and “not impossible”.

And, magically, the jar filled up with 500 and 1000 chips.

You don’t fucking say.

My #Decoded for #Baited: https://blog.baited.io/2026/cost-of-phishing-shrinking-budgets/

Once, during an #awareness session, I brought a jar into the room.

One of those old-school glass jars with a metal lid.

I put it on the table and asked the executives (not the CISOs) to drop a poker chip inside.

Yes, poker chips. Don’t laugh. That’s what I had.

The value of each chip was supposed to reflect two things: perceived risk and willingness to spend.

At the beginning, the jar looked miserable.

Two or three 50s.
One brave 500.
Fewer than ten 100s.

Then came lunch.
Paid for, obviously.
But lunch was also the exercise.

Heavy #socialengineering. Casual conversation. Names, routines, vendors, habits, internal friction, travel plans, tools, weak points, ego, trust.

Then the last two hours began.
Real risk demonstration.

#spearphishing built with information collected during lunch.
Fake WhatsApp chats after recon.
#OSINT before the session even restarted.
QR codes everywhere.

Then we talked about recovery costs.

Regulatory fines.
Production downtime.
Loss of trust.
Reputational damage.
The unpleasant difference between “unlikely” and “not impossible”.

And, magically, the jar filled up with 500 and 1000 chips.

You don’t fucking say.

My #Decoded for #Baited: https://blog.baited.io/2026/cost-of-phishing-shrinking-budgets/

DATE: July 2, 2026 at 04:57PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

How #RenownHealth Is Reshaping Its Digital ID Strategy:
#Nevada Hospital System #CISO Steven Ramirez Shares Modernization Efforts https://t.co/2Y5EiACcIW

Here are any URLs found in the article text:

https://t.co/2Y5EiACcIW

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

A single RedLine C2 pivots into a maritime spear-phishing cluster and attacker-owned infrastructure.

An investigation beginning with a single RedLine Stealer C2 server from VMRay UniqueSignal evolved into uncovering a targeted Business Email Compromise campaign against South Korean maritime infrastructure. The analysis started with IP 194.156.79.122 on port 55615, leveraging fingerprinting techniques through FOFA and VirusTotal to identify additional C2 infrastructure. Pivoting through communicating files revealed spear-phishing emails targeting Kangrim Heavy Industries, a major South Korean marine boiler manufacturer. The campaign delivered Formbook malware through impersonated maritime supply chain companies. Further infrastructure analysis identified seven fraudulent domains hosted on TheHost LLC infrastructure, utilizing similar naming patterns and TLS certificates. The attack demonstrates sophisticated BEC tactics combining malware delivery with social engineering, mimicking legitimate business correspondence within the maritime shipping sector.

Pulse ID: 6a464b96bef17724be5668a0
Pulse Link: https://otx.alienvault.com/pulse/6a464b96bef17724be5668a0
Pulse Author: AlienVault
Created: 2026-07-02 11:29:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Email #FormBook #ICS #InfoSec #Korea #Malware #Mimic #OTX #OpenThreatExchange #Phishing #RAT #RedLine #RedlineStealer #Rust #SocialEngineering #SouthKorea #SpearPhishing #SupplyChain #TLS #VirusTotal #bot #AlienVault

Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique

Check Point Research discovered a novel browser-native ransomware technique that emerged from AI-generated code attributed to DeepSeek. The attack leverages the File System Access API in Chromium browsers to encrypt files without requiring native payloads, exploits, or app installations. A malicious sample disguised as an AI image upscaler was analyzed, revealing how LLMs can connect theoretical platform risks to practical attack workflows. The technique is particularly concerning on Android, where Chrome allows web pages to access photo directories after user approval through legitimate permission prompts. By using social engineering with a fake AI enhancement tool, attackers can persuade victims to grant folder-level access, enabling file exfiltration and encryption entirely within the browser. This demonstrates how frontier AI models can autonomously design novel attack chains by reasoning across existing knowledge.

Pulse ID: 6a4500ffd044499efcd70db1
Pulse Link: https://otx.alienvault.com/pulse/6a4500ffd044499efcd70db1
Pulse Author: AlienVault
Created: 2026-07-01 11:58:55

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #Browser #CheckPoint #Chrome #CyberSecurity #Edge #Encryption #InfoSec #OTX #OpenThreatExchange #RAT #RansomWare #SocialEngineering #bot #AlienVault

DATE: July 1, 2026 at 06:01PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

@aflac_japan: Hack Detected Last Week Affects Nearly 4.4M: Incident Is Insurance Giant's Second Major #DataBreach Since June 2025 https://t.co/I826SyFKO6 @aflac #aflac

Here are any URLs found in the article text:

https://t.co/I826SyFKO6

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

DATE: July 1, 2026 at 05:26PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

Workers Withdraw Claims in #Stryker Wiper #CyberAttack Lawsuit https://t.co/9FIxg2VvUN

Here are any URLs found in the article text:

https://t.co/9FIxg2VvUN

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

#FBI-Warnung: Russischer Geheimdienst sieht es auf #Messenger-Backup-Keys ab | Security https://www.heise.de/news/FBI-Warnung-Russischer-Geheimdienst-sieht-es-auf-Messenger-Backup-Keys-ab-11347302.html #CyberCrime #SocialEngineering #phishing #Russland 🇷🇺 #Russia 🇷🇺

#videoilike #videoienjoyed
https://www.youtube.com/watch?v=dNGUiWKn6Qs

#KevinMitnick #kevin_mitnick #hack #hacker #docu #mindhack #SocialEngineering #social_engineering #magic #Magician #tricks #computer #computer_art #phreaker #telephone #fruad #login #80s #programmer #security #securityRelated #wargames #mystery #dec #backdor #ccc #arpanet

DATE: June 30, 2026 at 05:36PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

#DICOM Toolkit Bugs Raise #MedicalImaging #Security Risks https://t.co/eMPITZIzmo

Here are any URLs found in the article text:

https://t.co/eMPITZIzmo

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

DATE: June 30, 2026 at 05:36PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

@Medtronic Notifying Patients Affected by Data Theft Hack https://t.co/yrECPWZL47 #HIPAA

Here are any URLs found in the article text:

https://t.co/yrECPWZL47

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

DATE: June 30, 2026 at 05:33PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

#Medtronic Notifying Patients Affected by Data Theft Hack: #Ransomware Gang #ShinyHunters Gang Claimed It Stole 9M Records From #MedicalDevice Maker https://t.co/yrECPWZL47

Here are any URLs found in the article text:

https://t.co/yrECPWZL47

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

Chromium extension uses AI‑related branding to redirect browser search

Microsoft Threat Intelligence identified a malicious Chromium extension spoofing Perplexity AI to deceive users into installation. The extension's primary objective involves search traffic interception and data collection through Manifest Version 3 capabilities and declarativeNetRequest rules. It routes both full search queries and real-time keystrokes through attacker-controlled infrastructure hosted on a typosquatted domain before redirecting to legitimate search providers. The extension overrides browser default search settings, captures user input at keystroke-level, and uses suspicious permissions inconsistent with legitimate AI assistants. The threat demonstrates how actors operationalize AI branding as social engineering vectors. Google removed the extension following responsible disclosure. Organizations should strengthen user awareness training and implement layered security strategies to detect similar threats.

Pulse ID: 6a42d0b89159dccad1ff7879
Pulse Link: https://otx.alienvault.com/pulse/6a42d0b89159dccad1ff7879
Pulse Author: AlienVault
Created: 2026-06-29 20:08:24

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberSecurity #Google #InfoSec #Microsoft #OTX #OpenThreatExchange #RAT #RCE #SocialEngineering #Troll #bot #AlienVault

DATE: June 29, 2026 at 05:29PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

How #CloudSecurity Risks Grow With Home-Based #Healthcare https://t.co/0BuNRLzM6i

Here are any URLs found in the article text:

https://t.co/0BuNRLzM6i

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

⚠️ UAE warns abandoned accounts become attack surfaces

The #UAE Cybersecurity Council urged citizens to erase unused digital accounts, warning dormant profiles retain personal data that can be exploited for #identitytheft and #socialengineering.

🔗 read more: thecyberexpress.com/uae-cybersec...

📬 SIM-Swap-Bande zerschlagen: Millionenraub an Kryptobörsen endet mit Festnahmen
#Cyberangriffe #ITSicherheit #CBZC #Cyberkriminalität #Geldwäsche #Kryptobörsen #Kryptodiebstahl #Kryptowährungen #SIMSwap #SIMSwapping #socialengineering #ZachXBT https://sc.tarnkappe.info/8b8d44

DATE: June 26, 2026 at 05:08PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

@HHSGov Agencies Flesh Out Priorities for #Healthcare #AI:
Coordinated #OneHHS AI Governance, Implementation, Guidance Efforts Under Way https://t.co/fGtoR8n4iZ

Here are any URLs found in the article text:

https://t.co/fGtoR8n4iZ

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

Millenium: A RAT Rewritten, A Threat Multiplied

Group-IB analyzes Millenium RAT version 4.*, a remote access trojan that has undergone significant architectural changes from .NET to native C++, while continuing to leverage Telegram Bot API for command and control without requiring dedicated server infrastructure. The malware is distributed as Malware-as-a-Service by developer 'ShinyEnigma' for $50-90 USD. Active exploitation campaigns are conducted by threat actor cluster 'Y2K Operators' using social engineering tactics including fraudulent utilities, hacking toolkits, software cracks, gaming lures, and trojanized cybercrime tools. The trojan enables exfiltration of sensitive browser and system data, screenshot and audio capture, keylogging, and arbitrary executable downloads. Over 62,000 compromised endpoints across more than 160 countries have been identified, with 39,730 infections occurring in Q1 2026 alone, demonstrating accelerating infection rates.

Pulse ID: 6a3d76e592eaea08a66ad337
Pulse Link: https://otx.alienvault.com/pulse/6a3d76e592eaea08a66ad337
Pulse Author: AlienVault
Created: 2026-06-25 18:43:48

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberCrime #CyberSecurity #Endpoint #GroupIB #ICS #InfoSec #Malware #MalwareAsAService #NET #OTX #OpenThreatExchange #RAT #RemoteAccessTrojan #SocialEngineering #Telegram #Trojan #bot #AlienVault