threat actor

Cryptocurrency hardware wallet provider SafePal has issued a warning regarding a data breach impacting approximately 39,798 customers. The incident occurred after a flaw was exploited to steal customer order information. Furthermore, a threat actor is reportedly claiming to be selling this stolen data.

The attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote access to compromised networks. The threat actor's playbook involves exploiting RMM systems through these methods.

A threat actor published a malicious version of the Jscrambler npm package, which was downloaded almost 1,500 times. Jscrambler, a client-side web security company, disclosed the breach.

Accenture confirmed a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company.

A global stock exchange was targeted in a months-long email campaign where a threat actor accessed an influential finance executive's email inbox using legitimate Windows tools. The attack exploited native system functionalities to maintain persistent access.

A threat actor is using an AI-built ransomware toolkit that automates Active Directory discovery and helps evade endpoint detection and response (EDR) solutions.

Cruise company Carnival confirmed a data breach affecting nearly 6 million people, with a threat actor gaining access to its IT environment through a compromised employee account. The attacker copied personal information from Carnival's systems by the end of April.