Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
UK, US, and Dutch agencies expose Chosen Brick, Iranian malware used to track and harass dissidents, journalists, and activists via Telegram.
← Thèmes
🕵️
Cyber Arnaque
481 articles
Iranian cyber targeting of dissidents, activists and journalists
Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide.
Vulnérabilités : l’écosystème open source face aux dilemmes du tout IA
📡 Menaces & IA : 15 dérives et avancées clés du 16 septembre 2026 (dont OpenAI) Détournement de modèles, nouveaux malwares génératifs et sécurité des agents : le récapitulatif des 15 actualités IA de la semaine du 16 septembre 2026.
📡 IDScan confirme le vol de 153 millions de permis de conduire Après la vente de 153 millions d...
La newsletter dcod du 16 septembre 2026 fait le point sur les dernières actualités en cybersécurité. Elle aborde la confirmation par IDScan du vol de 153 millions de permis de conduire suite à une intrusion cloud, le lancement du guichet d'alerte SRP par l'ENISA dans le cadre du Cyber Resilience Act, ainsi qu'un bilan des récentes cyberattaques par ransomware et des vulnérabilités zero-day critiques.
The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking ...
A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data.
BambooToken Malware Uses MQTT to Control Windows and Linux Systems
Lumen exposes BambooToken, a stealthy 2023-era malware family using MQTT and sideloading to quietly infect targets across Asia and beyond.
Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
Le compte officiel de HBO Max sur Reddit a été piraté puis utilisé pour publier une centaine de publicités malveillantes. Derrière de faux téléchargements, le piège s'est refermé sur les internautes. En bonus, des données ont pu être volées.
New Android malware encrypts files, steals data, and harasses victims
MantaX Otax exfiltre les SMS, les mots de passe à usage unique et les profils WhatsApp des smartphones Android avant de chiffrer les documents des victimes. Repéré par les chercheurs de Zimperium, ce logiciel malveillant harcèle ensuite ses cibles par des messages vocaux menaçants et des images clignotantes jusqu’au paiement d’une rançon.
China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
Chinese hackers are exploiting CVE-2026-51990, a critical one-click RCE vulnerability in Tencent's Sogou Input Method, to deploy backdoors.
Passkey-themed social engineering leads to identity and cloud compromise
Microsoft details a million-email CEO fraud campaign and passkey-themed attacks that compromised cloud accounts and enabled data exfiltration.
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
Threat actors have been chaining three JFrog Artifactory vulnerabilities to gain admin privileges and deploy backdoors.
Protecting organizations from AI-assisted executive impersonation and invoice fraud
Researchers analyzed a flood of fraudulent business emails and found that the threat actors had doubled-up on tactics to make them appear legitimate, including help from AI.
Companies may be measuring phishing resilience the wrong way
Analysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting—not just clicks.
Trezor: 347,000 users targeted in phishing attacks after Brevo breach
Hackers compromised the Brevo marketing platform and used that access to send phishing emails to Trezor, BitBox, and CoinTracking users.
Conti ransomware gang member sentenced to 4 years in prison
Ukrainian lawyer and Conti malware developer Oleksii Lytvynenko was sentenced to four years in U.S. prison for ransomware attacks.
Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks
The GoldFactory threat group exploits the Android Work Profile feature to deliver the Gigabud Trojan, while Mantax Otax spreads separately.
Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6
Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its Claude AI model for malicious purposes.
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
Three threat groups are exploiting two Cisco FMC flaws to steal credentials, gain root access and deploy Qilin ransomware.
US disrupts Xinbi Guarantee marketplace fueling the cyber scam economy
The U.S. government also carried out a seizure of $52.8 million from 52 wallets connected to the platform.
Veradigm warns of patient data breach after ransomware gang claims attack
Veradigm said access was limited to a specific interface, and did not impact the company’s broader environment such as its networks, servers or databases. The incident did not result in operational disruptions, the company added.
Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit
Hackers are planting a Linux rootkit on F5 BIG-IP APM devices that hides its PHP web shell in memory instead of on disk, avoiding file scans.
📡 Rapport semestriel 2026/1 : l'OFCS recense 27 128 cyberincidents Dans son rapport semestriel ...
📡 Menaces & IA : 14 dérives et avancées clés du 9 septembre 2026 (dont OpenAI) Détournement de modèles, nouveaux malwares génératifs et sécurité des agents : le récapitulatif des 14 actualités IA de la semaine du 9 septembre 2026.
Singaporean Ringleader of $245 Million Cryptocurrency Racketeering Enterprise Pleads Guilty in Wa...
Singapore man pleads guilty in a $245 million crypto theft scheme carried out through social engineering and home break-ins.
Cyberattaques : L’ANSSI met en place une capacité renforcée de réaction dédiée aux services de l’...
L’ANSSI a annoncé ce 7 septembre la mise en place d’un dispositif nommé REACTIV (REponse & ACTion Interministérielle face aux Violations de données).…