Latest Cyber-Attack News
الذهاب إلى القناة على Telegram
Latest cybersecurity incidents and malware threats.
إظهار المزيد3 013
المشتركون
+624 ساعات
+127 أيام
+7230 أيام
جارٍ تحميل البيانات
القنوات المماثلة
سحابة العلامات
الإشارات الواردة والصادرة
---
---
---
---
---
---
جذب المشتركين
أكتوبر '26أكتوبر '26
أكتوبر '26
+41
في 0 قنوات
سبتمبر '26
+103
في 0 قنوات
Get PRO
أغسطس '26
+60
في 0 قنوات
Get PRO
يوليو '26
+81
في 0 قنوات
Get PRO
يونيو '26
+92
في 0 قنوات
Get PRO
مايو '26
+36
في 0 قنوات
Get PRO
أبريل '26
+24
في 0 قنوات
Get PRO
مارس '26
+34
في 0 قنوات
Get PRO
فبراير '26
+35
في 0 قنوات
Get PRO
يناير '26
+42
في 0 قنوات
Get PRO
ديسمبر '25
+91
في 0 قنوات
Get PRO
نوفمبر '25
+90
في 0 قنوات
Get PRO
أكتوبر '25
+131
في 0 قنوات
Get PRO
سبتمبر '25
+149
في 0 قنوات
Get PRO
أغسطس '25
+175
في 0 قنوات
Get PRO
يوليو '25
+154
في 0 قنوات
Get PRO
يونيو '25
+126
في 0 قنوات
Get PRO
مايو '25
+74
في 0 قنوات
Get PRO
أبريل '25
+162
في 0 قنوات
Get PRO
مارس '25
+103
في 0 قنوات
Get PRO
فبراير '25
+100
في 0 قنوات
Get PRO
يناير '25
+96
في 0 قنوات
Get PRO
ديسمبر '24
+83
في 0 قنوات
Get PRO
نوفمبر '24
+72
في 0 قنوات
Get PRO
أكتوبر '24
+80
في 0 قنوات
Get PRO
سبتمبر '24
+73
في 0 قنوات
Get PRO
أغسطس '24
+90
في 0 قنوات
Get PRO
يوليو '24
+89
في 0 قنوات
Get PRO
يونيو '24
+64
في 0 قنوات
Get PRO
مايو '24
+71
في 0 قنوات
Get PRO
أبريل '24
+72
في 0 قنوات
Get PRO
مارس '24
+83
في 0 قنوات
Get PRO
فبراير '24
+73
في 0 قنوات
Get PRO
يناير '24
+70
في 0 قنوات
Get PRO
ديسمبر '23
+1 478
في 0 قنوات
| التاريخ | نمو المشتركين | الإشارات | القنوات | |
| 16 أكتوبر | +2 | |||
| 15 أكتوبر | +6 | |||
| 14 أكتوبر | 0 | |||
| 13 أكتوبر | +4 | |||
| 12 أكتوبر | +1 | |||
| 11 أكتوبر | 0 | |||
| 10 أكتوبر | +2 | |||
| 09 أكتوبر | 0 | |||
| 08 أكتوبر | +2 | |||
| 07 أكتوبر | +3 | |||
| 06 أكتوبر | +2 | |||
| 05 أكتوبر | +7 | |||
| 04 أكتوبر | +3 | |||
| 03 أكتوبر | +3 | |||
| 02 أكتوبر | +1 | |||
| 01 أكتوبر | +5 |
منشورات القناة
Linux Spies Copied Sudo Passwords Before Running the Real Command
A Linux administrator could type a password, see the requested command run normally, and still hand the password to an intruder. In a newly published investigation, Unit 42 describes attackers who changed the shell’s startup file to intercept
sudo before passing the captured password to the real command. That small detour was part…
https://blog.gridinsoft.com/linux-sudo-password-theft-sysgorat/| 2 |  FTC Halts Sextortion Help Firm Over Alleged False Promises
A federal court has temporarily halted Digital Forensics Corporation LLC and its CEO at the FTC’s request, after the regulator alleged that people seeking help with sexual blackmail paid at least $60 million for misleading promises of protection. The October 13 announcement describes a second financial trap: victims afraid of an intimate image being…
https://blog.gridinsoft.com/ftc-digital-forensics-sextortion-assistance/ | 92 |
| 3 |  Help TDS: Fake Microsoft Support Pushes Remote Access
A fake Microsoft support worker helped Infoblox researchers get rid of a frightening browser lock—and then asked them to download UltraViewer. That reversal is the revealing moment in a new investigation of Help TDS, a long-running network that routes visitors into tech support scams. The warning creates the emergency; the caller uses…
https://blog.gridinsoft.com/help-tds-hotejka-fake-support-remote-access/ | 128 |
| 4 |  YAM Store Takedown Hits the Wholesale Side of Phishing
A fake parcel alert can begin far from the person who receives it—with a criminal buying a cloud account and a ready-made impersonation page. On October 14, Microsoft and Health-ISAC announced action against YAM Store, CoGUI and Iron Man, a supply network Microsoft says enabled more than one billion malicious messages since January 2026.…
https://blog.gridinsoft.com/yam-store-iron-man-phishing-disruption/ | 141 |
| 5 |  Fake Calendly Interviews Steal Facebook and Google Logins
A job interview booking can become an account takeover before the promised call begins. In research published on October 14, Malwarebytes describes fake Calendly pages advertising interviews at Meta, then collecting Facebook passwords and verification codes and drawing visitors into a second, fake Google sign-in.
The important turn comes after choosing a time: a…
https://blog.gridinsoft.com/fake-calendly-meta-careers-phishing/ | 171 |
| 6 |  Xandr Fined Over Grindr Data in Ad Auctions
Norway has fined advertising intermediary Xandr NOK 92 million for unlawfully processing and sharing data about Grindr users. The sensitive detail did not have to be a message or a profile answer: a device identifier arriving with the fact that someone used Grindr could itself reveal information about sexual orientation.
The Norwegian Data…
https://blog.gridinsoft.com/xandr-grindr-data-sharing-fine/ | 175 |
| 7 |  A Name and a Question Mark: The Text Scam Reply Trap
A text message can try to draw you in without containing a link, a payment demand or even a complete sentence. In a report published on October 13, Malwarebytes researcher Pieter Arntz described an unsolicited SMS received that week: the recipient’s name, followed by a question mark. Its immediate invitation was to answer.
The…
https://blog.gridinsoft.com/name-question-mark-text-scam/ | 173 |
| 8 |  Cyberattack Hits French Supermarket Refrigeration
A cyberattack reached the equipment keeping food cold at French supermarkets overnight on October 11–12. Coopérative U chief executive Dominique Schelcher confirmed that refrigeration installations at several stores in the network were affected. On October 12, France’s national computer emergency response team, CERT-FR, separately warned of numerous compromises of Danfoss AK-SM and AK-SC systems.…
https://blog.gridinsoft.com/french-supermarket-refrigeration-cyberattack/ | 172 |
| 9 |  Ledger Confirms Hardware Implant in CryptoBilis Wallet Investigation
Ledger has confirmed an unauthorized hardware implant in one device tied to the CryptoBilis wallet-draining investigation. In its October 11 update, the company said all confirmed cases in the disclosed October 9 incident involved devices sold through that Southeast Asian reseller. Its instruction to buyers is unusually concrete: leave unused devices uninitialized; if already…
https://blog.gridinsoft.com/ledger-cryptobilis-hardware-implant/ | 186 |
| 10 |  GitPower Uses Fake Conference Invitations to Target Ukrainian Experts
A conference invitation sent to a Ukrainian policy expert asked for a reply before it delivered anything dangerous. The later “PDF” was a Windows shortcut, and opening it could start scripts while displaying an innocent document. A new Genians investigation links these August 2026 attempts to Operation GitPower, activity the researchers attribute…
https://blog.gridinsoft.com/gitpower-ukraine-fake-invitations-lnk/ | 188 |
| 11 |  YMCO Fake Jobs Turned Personal Bank Accounts Into a Cash-Out Service
A supposed job receiving company payments was really the exit route for money stolen from American bank accounts. On October 8, Oleg Korniev pleaded guilty to helping run Your Mule Cashout (YMCO), a laundering service that recruited more than 15,000 U.S.-based people through false promises of legitimate work, according to the U.S. Department of…
https://blog.gridinsoft.com/ymco-fake-jobs-money-mule-accounts/ | 204 |
| 12 |  FBI Seizes Microscan and FishHub Domains Behind File-Theft Operations
The FBI and US Justice Department have seized domains supporting Microscan and FishHub, two tools used by China-linked hackers to find vulnerable networks and steal files. The October 8 announcement describes an operation against the machinery behind the intrusions: infected consumer devices helped disguise reconnaissance, while a separate delivery tool brought additional malware into…
https://blog.gridinsoft.com/fbi-microscan-fishhub-domains-seized/ | 202 |
| 13 |  Fake Offline Maps Lead Android Users to a Telegram App Trap
A free offline navigator advertised on social media can lead to something much more invasive than maps. Ukraine’s Cyberpolice warned on October 9 that scammers are routing people through a website and a Telegram bot to a malicious app that asks for installation privileges and access to phone functions. The crucial decision comes when…
https://blog.gridinsoft.com/fake-offline-maps-android-telegram-app/ | 210 |
| 14 |  MATCHBOIL Hides a Backdoor Behind a Fake Planner
A cat-themed daily planner was one of the disguises used by MATCHBOIL, a Windows malware downloader that ESET has traced in Ukrainian organizations. Opened by hand, one version displayed two boxes labeled “Today” and a window titled “Dairy.” Started with the argument its operators expected, it took a different route: checking the machine and…
https://blog.gridinsoft.com/matchboil-fake-planner-backdoor/ | 213 |
| 15 |  Noir Wallet Drainer Uses DNS to Keep Fake Crypto Pages Working
A fake cryptocurrency voting page led Infoblox researchers to a wallet-drainer kit that brands itself as Noir. Its trick is not to demand a recovery phrase: it turns a wallet interaction into permission for an attacker to spend tokens. The October 9 report also explains how deployed scam pages can keep working…
https://blog.gridinsoft.com/noir-wallet-drainer-dns-permissions/ | 213 |
| 16 |  Fake Event Invitations Turn QR Codes Into Google Phishing
A real event can be the cover for a fake Google login. In research published on October 8, Cisco Talos describes attackers copying legitimate event posters, replacing their QR codes and sending tailored invitations to people affiliated with research organizations in Taiwan. The operation, tracked as UAT-11985, used a live authentication relay behind the…
https://blog.gridinsoft.com/fake-event-invitations-google-qr-phishing/ | 216 |
| 17 |  NEBULA: Fake AI SDKs Install a Hidden Windows RAT
A convincing AI client can hide the dangerous part of an npm package somewhere a developer may never look: the installation script. In research published on October 8, CloudSEK linked seven fake “NebulaAI” SDK packages across four publisher accounts to a Windows remote-access trojan. Its NEBULA investigation places the attack at installation time, before…
https://blog.gridinsoft.com/nebula-fake-ai-sdk-windows-rat/ | 234 |
| 18 |  BlueKit Phishing: A Stolen Session Can Outlast the Login
BlueKit packages convincing login pages, campaign management and account-access theft into a subscription service. In research published on October 7, Malwarebytes traced the phishing toolkit’s development from its April appearance through later messaging and session-handling updates. The risk is not just a stolen password: a victim can finish a familiar-looking sign-in while the usable…
https://blog.gridinsoft.com/bluekit-phishing-stolen-session-access/ | 228 |
| 19 |  Fake Invoice PDFs Install Action1 Remote-Access Agent
A fake payment PDF can show a convincing receipt while a script installs a remote-management agent in the background. In an October 6 report, SANS Internet Storm Center researcher Xavier Mertens traced two document lures to an Action1 installer: one posed as a payment confirmation, the other as a DHL document. The trick was…
https://blog.gridinsoft.com/action1-fake-invoice-pdf-remote-access/ | 236 |
| 20 |  ASOS Confirms Unauthorised Push Notification, Possible Contact-Data Exposure
ASOS has confirmed that an unauthorised notification reached customers at around 10am on October 6. The retailer is investigating activity involving third-party platforms used for customer communications and says names and contact details may have been accessed. Its current assessment is that payment-card information and account passwords were not affected.
The immediate instruction is…
https://blog.gridinsoft.com/asos-unauthorised-push-notification/ | 250 |
