x47.c Botnet Turns Stolen AI Keys Into a Direct Financial Attack
x47.c botnet by WraithTools uses stolen OpenAI and xAI keys to drain AI credits, with DDoS, theft and proxy features.
CyberWorldOps
Latest news
More news
Page 27 / 91 · 822 articles
Army Soldier Gets 70 Months for Turning Telecom Metadata Into Extortion Leverage
U.S. Army soldier Cameron Wagenius got 70 months for stealing AT&T Snowflake data on 100M+ customers and extorting victims for Bitcoin.
Restored GitHub Actions Repositories Briefly Revived a Dormant Supply-Chain Payload
Two compromised actions-cool GitHub Actions were restored Sept 16, reviving Mini Shai-Hulud malware via mutable tags, risking CI credential theft.
PamStealer Makes macOS Payload Recovery Depend on Its Command Server
New PamStealer macOS variant uses fake Wavel wallet, JXA-to-zsh chain and server-side X25519 decryption to deliver Swift password stealer.
Kiteworks Calls for Six-Hour Server Blackout After Warning of a Possible Imminent Attack
Kiteworks urged customers to shut down servers for six hours on Sept. 26 after law enforcement warned of a possible imminent attack. No breach confirmed.
Elementor CSRF Flaw Can Turn One Administrator Click Into Full WordPress Control
Elementor 4.3.0-4.3.1 CSRF flaw lets attackers hijack admin sessions with one click to create rogue admins. Update to 4.3.2 immediately.
Bitget Loses $351.6 Million After Attackers Manipulate Its Wallet Authorization System
Bitget lost $351.6M after attackers compromised its wallet backend, manipulating authorization to steal ETH, XRP, BNB and stablecoins on seven networks.
Cybercrime Infrastructure, AI Agents and Exposed Credentials Create New Paths to Compromise
ShinyHunters hits Cl0p, BragJack exploits AI browsers, and LLM-driven malware plus stolen credentials expand compromise paths.
SalesBleed Turned Salesforce Lead Forms Into a Path for Silent CRM Theft
SalesBleed flaws let attackers hide instructions in Salesforce Web-to-Lead forms to steal CRM data via Agentforce and post phishing in Slack.