International Cyber Digest
4.51K subscribers
342 photos
17 videos
2 files
43 links
Your weekly go-to cybersecurity newsletter, curated and commented on by our senior analysts.
Download Telegram
‼️ We were attacked:

Someone executed a targeted attack against us and tried to phish us, impersonating X.

The email was sent to our X account email yesterday through actions-x[.]com, immediately after the domain was registered.

Some info on the domain. You can see it was registered yesterday, and it's enjoying @Cloudflare protection as wel as @ImprovMX mail services.

We were never compromised. We had already taken precautions against attacks like these, and have since taken extra measures.
🀯17πŸ‘8🀣4😱2❀1
πŸ˜‚ Fantasy versus reality.

TeamPCP larping.
🀣5😁3
πŸš¨β€ΌοΈ BREAKING: Adobe has been breached by threat actor Mr. Raccoon, leaking 13 million support tickets with personal data, 15,000 employee records, all HackerOne submissions, internal documents and more.

Mr. Raccoon gained access through an Indian BPO, first deploying a remote access tool on an employee, then phishing their manager.

Mr. Raccoon told us: "They allowed you to export all tickets in one request from an agent."

We've reviewed multiple files confirming the scope of the breach. Among the details: Mr. Raccoon gained webcam access on the targeted employee through a RAT delivered via email and also obtained private conversations through WhatsApp.
🀣24❀4πŸ₯΄3πŸ”₯1🀯1
❗️ Tracker updated -> 4 new verified breaches added:

πŸ‡ΊπŸ‡Έ S&P Global (verified)
πŸ‡ΊπŸ‡Έ Mercor AI (verified)
πŸ‡ΊπŸ‡Έ Lightning AI (verified)
πŸ‡©πŸ‡ͺ ownCloud (verified)

Total identified alleged victims: 61

teampcp.cyberdigest.international πŸ‘€
πŸ”₯6❀3πŸ’©1
European Commission has been added to the tracker and confirmed, bringing the total to 62 alleged victims.

https://cert.europa.eu/blog/european-commission-cloud-breach-trivy-supply-chain

Tracker: https://teampcp.cyberdigest.international/
🀣1
‼️ The axios lead maintainer has gone public on how he was socially engineered into installing the malware behind the npm supply chain attack.

We have example images showing exactly how the attack was staged.
😁8😭7🀯1🀣1
πŸš¨β€ΌοΈ Mercor has paid ransom to ShinyHunters following the LiteLLM supply chain breach compromise.

Mercor works with major AI companies including OpenAI and Anthropic to train AI models.
❀11😱1
❗️RANSOM-ISAC published a solid piece on TeamPCP β€” featuring several of our posts.

https://www.ransom-isac.com/blog/supply-chain-confidence/
❀2
πŸš¨β€ΌοΈ BREAKING: The Crunchyroll breach data, leaked via an Indian outsourcing partner, has been sold.

1.2 million of 2 million customer records were purchased by a single buyer.

We've obtained the 1.2 million emails from Mr. Raccoon and will be sharing them with HaveIBeenPwned.
❀19