International Cyber Digest
4.6K subscribers
358 photos
19 videos
2 files
45 links
Your weekly go-to cybersecurity newsletter, curated and commented on by our senior analysts.
Download Telegram
‼️ We were attacked:

Someone executed a targeted attack against us and tried to phish us, impersonating X.

The email was sent to our X account email yesterday through actions-x[.]com, immediately after the domain was registered.

Some info on the domain. You can see it was registered yesterday, and it's enjoying @Cloudflare protection as wel as @ImprovMX mail services.

We were never compromised. We had already taken precautions against attacks like these, and have since taken extra measures.
🀯17πŸ‘8🀣4😱2❀1
πŸ˜‚ Fantasy versus reality.

TeamPCP larping.
🀣5😁3
πŸš¨β€ΌοΈ BREAKING: Adobe has been breached by threat actor Mr. Raccoon, leaking 13 million support tickets with personal data, 15,000 employee records, all HackerOne submissions, internal documents and more.

Mr. Raccoon gained access through an Indian BPO, first deploying a remote access tool on an employee, then phishing their manager.

Mr. Raccoon told us: "They allowed you to export all tickets in one request from an agent."

We've reviewed multiple files confirming the scope of the breach. Among the details: Mr. Raccoon gained webcam access on the targeted employee through a RAT delivered via email and also obtained private conversations through WhatsApp.
🀣24❀4πŸ₯΄3πŸ”₯1🀯1
❗️ Tracker updated -> 4 new verified breaches added:

πŸ‡ΊπŸ‡Έ S&P Global (verified)
πŸ‡ΊπŸ‡Έ Mercor AI (verified)
πŸ‡ΊπŸ‡Έ Lightning AI (verified)
πŸ‡©πŸ‡ͺ ownCloud (verified)

Total identified alleged victims: 61

teampcp.cyberdigest.international πŸ‘€
πŸ”₯6❀3πŸ’©1
European Commission has been added to the tracker and confirmed, bringing the total to 62 alleged victims.

https://cert.europa.eu/blog/european-commission-cloud-breach-trivy-supply-chain

Tracker: https://teampcp.cyberdigest.international/
🀣1
‼️ The axios lead maintainer has gone public on how he was socially engineered into installing the malware behind the npm supply chain attack.

We have example images showing exactly how the attack was staged.
😁8😭7🀯1🀣1
πŸš¨β€ΌοΈ Mercor has paid ransom to ShinyHunters following the LiteLLM supply chain breach compromise.

Mercor works with major AI companies including OpenAI and Anthropic to train AI models.
❀11😱1