16 отчётов с форумов и площадок.
Курируемая лента с подпольных форумов, leak-сайтов и маркетплейсов.
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors.
BleepingComputer
A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found. The company spotted the malicious package, version 2.1.313, on Open VSX, an open-source mar
Help Net Security
Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. Google positions them as options for demanding work, lower-cost professional tasks and everyday
Help Net Security
Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines how these underground services operate and the techniques used to create and maintain fraudulent verified acco
BleepingComputer
The co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been sentenced to 40 years in prison for facilitating $430 million in illegal transactions from 2018 to 2020.
BleepingComputer
Legitimate employee access can let criminals circumvent security controls that would be difficult to overcome from outside an organization. Routine actions such as information lookups, account resets, transaction approvals and shipment changes can become services sold to criminal
Help Net Security
Anthropic has just announced a new Claude Marketplace, and it brings all AI-related tools into one place, including plugins, connectors, agents, and more.
BleepingComputer
A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information, login credentials, credit card details, and cybercrime tools.
BleepingComputer
Impersonation, phishing and domain-name abuse are the most concerning types of online intellectual property infringement, according to CSC’s The State of Online IP Risk 2026 report. Internet and branded content, online marketplaces and paid search were the channels most frequentl
Help Net Security
77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environments where they were installed.
BleepingComputer
Flare researchers analyzed thousands of underground posts to examine how the BTMOB Android malware operation evolved into a fragmented ecosystem of resellers, source-code vendors, custom versions, and competing sales channels.
BleepingComputer
Business Email Compromise is more than an email scam. It's a coordinated operation involving compromised accounts, financial research, and cash-out networks. Flare explores how underground forums reveal how BEC attacks are planned and executed.
BleepingComputer
Злоумышленникам больше не нужно просеивать массивные дампы учетных данных. Они могут заплатить другим, чтобы они сделали это за них. Flare исследует, как развивающийся подпольный рынок ищет украденные базы данных учетных данных для конкретных компаний, доменов и учетных записей.
BleepingComputer
Комбо-список связанной с инфостейлерах журналов из кампаний 2024 года.
CyberBlackmail Darknet Monitor
В сети появилась цена за " Forced Entry"-стильную цепь, которая была listings на подпольной рынке в размере 2,5 миллиона долларов США.
Darknet Monitor
Служба посредника по переговорам с киберразбоем на тёмном интернете уязвима.
Darknet Monitor