pythonw.exe

• AI brands as bait: How threat actors are using the AI hype in social engineering

  AI brands as bait: How threat actors are using the AI hype in social engineering As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI itself as a social engineering lure. The post AI brands as bait: How threat act

• AutoJack: How a single page can RCE the host running your AI agent

  AutoJack: How a single page can RCE the host running your AI agent AutoJack is a novel exploit chain showing how a single malicious webpage can turn an AI browsing agent into a remote code execution vector on the host machine. By abusing trust in localhost, missing authenticatio

• Smart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC Testnet

  Smart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC Testnet TrendAI™ Research analyzed an intrusion where threat actors used the EtherHiding technique to route ClearFake payload delivery through smart contracts on the BNB Smart Chain testnet. The attack chain ended

• UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign

  UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign Cisco Talos is disclosing UAT-11795, a sophisticated, Russian-speaking, financially motivated adversary that has been conducting a malicious campaign targeting users in the U.S. an

• ACR Stealer: Two observed intrusion chains amid increased threat activity

  ACR Stealer: Two observed intrusion chains amid increased threat activity From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer environments. These campaigns are successfully using ClickFix lures to steal browse

• ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

  ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session tokens, PDFs, Microsoft 365 documents, and files from synced On

All reports →

• [ip] 47.104.248.7

  tags: report:talos

• Connector · intel_report_ingest6