A concerning situation recently caught our attention: a study conducted by URLhaus, an organization recognized for specializing in combating digital threats and malware tracking, ended up being used maliciously. The research, which originally aimed to identify and improve response times for…
Homebrew Users on macOS Targeted in Data Theft Campaign
A sophisticated stealer campaign has recently been causing concern among macOS users. The targets are individuals seeking to install Homebrew, a popular open-source package manager widely used on macOS and Linux systems for installing software via terminal. The discovery was made…
How Hackers are Using AI to Discover Zero Days
During our monitoring of dark web forums, we identified a particular case that caught our attention when a threat actor shared in detail their methodology of using an open source project, originally developed for LLM system protection, to identify critical security…
Alleged Brazil FGTS Database Put Up for Sale
Yesterday, user Sorb published on the cybercrime forum “breachforums” the sale of an alleged database containing sensitive information from Brazil’s Fundo de Garantia do Tempo de Serviço (FGTS) system. FGTS is a mandatory savings account system for Brazilian workers, managed by…
New Correios SMS Scam
Last week, an old scam began circulating again in Brazil with significant force. Scammers send fake messages in the name of Correios (Brazilian Postal Service), claiming that a package is being held at customs. Numerous reports of people who received these…
Hacker explains how to replicate Intelbrokers attacks
Recently, we came across an alarming discussion in a Telegram group dedicated to trading stolen credentials and other fraudulent activities. In this conversation, one member shared a practical tutorial on how to replicate techniques used by the well-known IntelBrokers cybercrime operation,…
Hacker USDoD Claims to Have Leaked CrowdStrike’s Threat Actor List
User USDoD posted on the cybercrime forum BreachForums claiming to have obtained what they alleged to be “the entire threat actor list” from CrowdStrike. The user also claimed to possess “the entire IOC [Indicators of Compromise] list” from CrowdStrike and stated…