Threat feed

PEERSTITCH pivot (pipeline test)Exploitation

TEST: CL-STA-0954 pivots from a hacked FortiManager to managed FortiGates, injecting into log daemons

LiteLLM 1.107.0 stealerAI-driven

Leaked LiteLLM key lets attacker ship 1.107.0, a PyPI release that steals cloud and AI keys

DPRK remote IT worker facilitation

DPRK IT workers use facilitator laptop farms and disguised capture cards to hold jobs, steal data

PEERSTITCH FortiManager pivotExploitation

CL-STA-0954 pivots from a hacked FortiManager to managed FortiGates, injecting into log daemons

Windows Shell MOTW bypass zero-dayExploitation

Exploited Windows Shell zero-day CVE-2026-96951 runs crafted files without MOTW warnings

Cl0p Windchill and FlexPLM data theftExploitation

Suspected Cl0p affiliates exploit PTC Windchill/FlexPLM to steal engineering data for extortion

Teams scam to AD CS certs

Teams help-dek impostors chain Quick Assist sessions into AD CS ESC1/ESC8 certificate abuse

MDM rogue-RMM deploymentPhishing

Phishing lures enroll endpoints in rogue MDM that deploys self-healing ScreenConnect

GhostAction Oct escalation

GhostAction October escalation: 72K-commit GitHub campaign hits CI, dev machines, OIDC

SolanaCry agent-lure RATAI-driven

SolanaCry poisons Solana starter kits that AI coding agents pick from search results

Camera-CMS WpcMon sideload

Compromised camera management software seeds WpcMon sideload and reverse shell

FortiBleed 2.0

FortiBleed 2.0: cracked FortiGate config credentials expose 975 more domains and AD binds

VAPOR PANDA ARTEX espionageAI-driven

VAPOR PANDA runs ARTEX agent intrusions against 200+ orgs with BLOODALCHEMY follow-on

NIK C2 AI-integrated implantAI-driven

NIK C2 implant runs OpenAI inference from victim hosts, funding it with their API keys

MadApe Device Code kitPhishing

MadApe kit abuses Microsoft Device Code flow via PDF lures to steal MFA-satisfied tokens

AI-agent impersonation scannerAI-driven

AI-agent impersonation scanner abuses bot allowlists to hunt exposed credentials

claude.ai fake install guides

Fake Claude install guides on claude.ai deliver AMOS and .NET RAT via Google Ads

KeyDrift SD-WAN key harvestingExploitation

KeyDrift framework hijacks Cisco SD-WAN control plane to harvest IPsec keys

PHP2Shell firewall root chainExploitation

PHP2Shell-Fragnesia chain roots exposed firewall management interfaces, pivots to AD

Claude Code ext backdoor

Trojanized official Claude Code VS Code extension plants persistent SSH backdoor

n0n credential extortionExploitation

n0n crew stuffs FortiGate VPNs and weak admin credentials, then encrypts or deletes data

Volt Typhoon Silent TrainExploitation

Volt Typhoon hides zero-day attacks on SD-WAN and RMM consoles behind throwaway SOHO relay chains

Sirius backdoor FedEx filelessPhishing

Sirius backdoor: Korean FedEx-invoice PDFs launch a fileless chain that patches ETW, hollows trusted processes via Early Bird APC, and persists through OS resets

Yoba signed-AI sideload

Yoba: signed ChatGPT/Claude binaries from fake GitHub repos sideload a dropper with Telegram-photo DGA tasking and Tor-mined XMRig

Teams external-chat IT scam

Teams IT-support impersonation via external chat: 400+ incidents of mail-bomb, ChatCreated first contact and Quick Assist/RMM access; one observed chain runs a PowerShell/MSI loader deploying a Python implant for AD discovery

Armorsteal

Armorsteal: SEO-poisoned fake Chocolatey and Massgrave sites deliver Pyarmor-packed Python stealer/RAT — scheduled tasks in a C:\Windows masquerade path, Chrome DevTools-protocol cookie theft on port 9222, keyword-triggered screenshot surveillance, drive-wide BIP39 seed-phrase search

Prince of Persia / InfyExploitation

Prince of Persia (Infy): Iranian APT reboots after war lull — Tornado second stage found on US shared hosting, Telegram-bot exfiltration, DGA domains with RSA-locked C2

deepveindrilling Magento loaderExploitation

deepveindrilling.com: Sansec exposes 953-store Magento loader campaign — cms_block database implant, fingerprint-gated serving, localStorage persistence

testmetest / CementBeetleSteepleAI-driven

testmetest npm campaign: native-addon camouflage, AI IDE hooks and OIDC trusted-publishing abuse link 42 hijacked repos to a hidden npm publisher

uCreator / YingGai

uCreator (YingGai): commercial Android platform exposes Telegram credential-capture and WeChat account-cloning capabilities in repackaged apps

Gheist

Gheist: stolen GitHub tokens dump repo secrets into Actions logs with no C2 server

Tailworm — unpatched Tailscale SSH root-escalation and tailnet-escape findingsExploitation

Ebury Tor exits

Ebury operators hijacked 333 Tor exit relays into SSH password-interception traps

LiteLLM attack chain

LiteLLM release-pipeline hijack root cause: unrevoked master key, stolen org-owner tokens, branch-protection override and audit-log-visible cover-up

Bronze Sandcastle

BRONZE SANDCASTLE: Sandboxie DLL sideloading delivers modified Meterpreter backdoors and ntds.dit shadow-copy theft

Amazon ClickFix (Doina)

Amazon-themed malvertising ClickFix: finger.exe LOLBin staging delivers Doina loader and suspected Lumma Stealer via process hollowing

Wazza device-code phishkitPhishing

Wazza phishkit: staged routing and document-verification device-code phishing against Microsoft 365

ARTEX Okta/Entra spray campaignAI-driven

ARTEX/Storm-0940 identity campaign: AI agent sprays Okta, Entra and Cognito at software vendors

BlackX UEFI bootkitExploitation

BlackX UEFI bootkit: APT41-attributed (medium confidence) revival of BlackLotus defeats Secure Boot on fully patched Windows

Majinahanashi ransomwareRansomware

Majinahanashi ransomware: green-dashboard evasion via WFP/QoS agent throttling, 14-second recovery kill, striped stealth encryption

APT28 Hookedge NATO campaign

Swallowtail/APT28 NATO espionage: Hookedge delivery, planted-key SSH tunnel, loopback NTLM capture and a runtime-key loader

Heartbreaker macOS ransomwareRansomware

Heartbreaker: metamorphic macOS ransomware with attempted self-recompilation and demonstrated entropy-based detection

GCP billing LLMjackingAI-drivenPhishing

GCP billing-account hijack for LLMjacking: search-ad phishing to cross-tenant Gemini inference at the victim's expense

OVHcloud CLI envcheckerAI-driven

OVHcloud CLI release-asset compromise: envchecker stealer distributed via hijacked GitHub releases

Aokigahara AI-session stealerAI-driven

Aokigahara infostealer: dedicated AI-assistant and developer-tool session theft with X25519/AES-GCM exfiltration

Lazarus FlashHolePhishing

Lazarus Operation FlashHole: CrossWeb EX abuse with mscoree sideload persistence, masqueraded services and GitHub-repo C2 delivering post-quantum-protected payloads

MythicRatatoskr Yggdrasil C2Phishing

MythicRatatoskr: Yggdrasil-mesh C2 backdoor in UAC-0099/Sandworm Ukraine wiper operation

k0t edge-device campaignExploitation

k0t edge-device credential-theft campaign: FortiWeb/FortiGate/GlobalProtect compromise with offline FortiGate config decryption, MeshCentral and AdaptixC2 persistence, Rclone exfiltration

M365 token spray and replay

[TEST] M365 token spray and replay: AiTM and device-code sessions replayed from 1337 Services hosting, then rogue Entra devices, swapped MFA and hidden inbox rules

LiteLLM 1.107.0 backdoorAI-drivenSupply chain

LiteLLM 1.107.0 supply-chain compromise: Python startup-hook credential stealer and remote-code loader run in any Python process