The Greeter attack framework targets Flowise, an AI development platform, by exploiting a vulnerability (CVE-2024-58351) in its runtime configuration mechanism. Attackers send numerous benign-looking "hello" messages that carry malicious JavaScript commands via the overrideConfig parameter, enabling remote code execution without altering the saved chatflow. This allows attackers to perform host reconnaissance, credential and cloud metadata harvesting, persistence attempts, and fileless execution preparation. The attack was observed on exposed Flowise instances, including unauthenticated and vulnerable deployments, highlighting risks of AI applications as entry points into cloud environments.
Exploitation activity targeting CVE-2026-58115, an unauthenticated Node-RED admin API vulnerability, was detected on October 30, 2026. Attackers used Node-RED's inject and exec nodes to execute commands without authentication, deploying malicious flows that download and execute Linux bots. The payloads included staged shell scripts and persistent webshells, with binaries saved in RAM-backed storage to evade disk forensics. This vulnerability affects Node-RED embedded in critical infrastructure products such as Siemens SIMATIC IoT2050 devices, posing a risk to industrial control systems environments. The exploitation appears opportunistic and involves mass scanning across multiple CVEs rather than targeted attacks.
DarkBlinders is a sophisticated cyberespionage campaign active from August to October 2026 targeting Israel and the Kurdistan Region of Iraq. The attackers compromised a high-profile Israeli security sector individual and a government cloud environment in Kurdistan. They used phishing lures impersonating Gulf Cooperation Council and Kuwait government entities and leveraged GitHub repositories for command-and-control. Post-compromise activities included credential theft and exfiltration of at least 1 GB of data from the government cloud.
A phishing campaign impersonates OpenAI by sending fake ChatGPT Plus billing emails claiming failed subscription payments. Victims are directed to fraudulent payment pages hosted on compromised WordPress sites under Nexcess's nxcli.io infrastructure. Attackers monitor submitted credit card details in real time and dynamically request one-time passwords (OTPs) to complete fraudulent transactions. The campaign uses multiple redirect domains and identical client-side code across instances to steal credit card information and OTPs.
On October 29, 2026, malicious versions (2.1.312 and 2.1.313) of the Claude Code extension appeared in Cursor's VS Code extension marketplace, designed to install SSH backdoors on developer machines. These fake extensions, not created by Anthropic, operated for about 11 hours before removal. They installed attacker SSH keys, established reverse SSH tunnels to a remote IP, and created persistence mechanisms disguised as legitimate system components. Investigations found that malicious activity persisted up to 8 hours beyond the exposure window and that the backdoor survives extension uninstallation, requiring separate removal. The attack collected system information such as hostname, username, Git email, and environment variable names. Organizations relying solely on the stated exposure window risk missing compromised machines.
In October 2026, nine AI developer platforms suffered security breaches involving credential theft that allowed attackers to abuse AI model access. Platforms affected include Fireworks AI, Andromeda, Zeabur, Lightning AI, OpenCode, Railway, Warp, CommandCode, and Northflank. Attackers exploited vulnerabilities to access stored environment variables containing AI credentials and monetized this access through LLM broker infrastructure. Follow-up activities included validation sweeps, quota enumeration, and large-scale token abuse resembling resold coding-agent traffic. Documented cases show hundreds of thousands to over a million unauthorized API calls generating over $100,000 in fraudulent usage. Multiple reseller operations were identified selling discounted access to frontier AI models using stolen credentials.
PHP2Shell is a vulnerability stemming from two critical PHP memory-safety flaws (CVE-2026-109618 and CVE-2026-109619) patched in October 2026. Exploit development is widespread, with over 600 related files found in open directories. While exploitation was only successful on honeypots in the open internet, attackers have weaponized PHP2Shell combined with a Linux kernel privilege escalation (CVE-2026-46300) to gain root access on 25 Palo Alto PAN-OS firewalls. The campaign used AI-driven reconnaissance to identify and target 240 high-value firewalls from about 19,000 internet-facing devices. Multiple attacker clusters share exploit toolkits and infrastructure, targeting government, banking, and telecom sectors.
The Claude Code extension version 2.1.313 in the Cursor Marketplace was compromised with a malicious loader that installs an SSH backdoor. This backdoor adds an attacker-controlled SSH key to authorized_keys, attempts to enable local SSH services, and establishes a reverse SSH tunnel to a remote server. It collects system and user reconnaissance data and installs persistence mechanisms on macOS, Linux, and Windows. Communications with the command-and-control server are unencrypted, allowing persistent remote access.
A malicious JavaScript file was found in a third-party performance monitoring integration on Polymarket. The script was designed to access authenticated trading sessions, inspect user portfolios, and transfer cryptocurrency assets to attacker-controlled addresses. It operates by reading authentication data from local storage, navigating React components to find trading functions, and creating signed messages to move assets. Polymarket has removed the compromised third-party integration. The extent of victimization and total losses are currently unknown.
Several Russian-language traffer teams have adapted affiliate-fraud models to exploit the growing popularity of prediction markets such as PolyMarket and Kalshi. These teams provide full fraud infrastructure including fake websites, admin panels, cryptocurrency payment systems, and support. They use controlled trading outcomes, fabricated market activity, artificial withdrawal restrictions, and collect sensitive identity information. Artificial intelligence tools accelerate these scams by simplifying platform development and victim engagement. This reflects a shift of mature fraud ecosystems toward new financial technologies without needing entirely new criminal skills.
The provided document does not contain substantive threat intelligence or detailed information about the 'From Hijacked Pbx To Stolen Trunk Inj3ctor3s Campaign'. It appears to be a placeholder or verification page without actual content for analysis. Several CVE identifiers are mentioned but without descriptions or context. No active exploitation or specific malicious activities are detailed.
MadApe is a sophisticated multi-stage phishing campaign targeting Microsoft Device Code authentication. It uses business-themed PDF lures, configurable redirect chains, and fake document-sharing pages impersonating services like SharePoint, OneDrive, Teams, Adobe Acrobat, and DocuSign. The campaign abuses Microsoft's Device Code flow to access victim accounts without credential theft on phishing pages. It features extensive infrastructure with 155 domains, human-verification challenges, decoy sites, and exposed operator panels. The campaign is localized in at least nine languages and focuses on business communications.
An unauthorized relay service has been installing legitimate OpenAI Codex and Anthropic Claude Code CLI tools on enterprise systems, reconfiguring them to route requests through third-party infrastructure. This activity, active since early 2026, primarily affects organizations in mainland China, South Korea, Taiwan, and Malaysia across multiple industrial sectors. The relay disables execution sandboxes, enables network access, replaces API credentials with relay-issued tokens, and disables telemetry, granting operators full user privilege command execution and access to sensitive data. No abuse evidence is currently reported.
A ClickFix campaign was observed on October 28, 2026, using a fake Cloudflare verification page to target macOS and Windows users. The campaign attempts to distribute malware but was unsuccessful due to server errors and domain resolution failures. Indicators include multiple URLs from the domain js-static.cfd hosting the fake verification page. No malware samples were obtained, and the campaign's full impact remains unclear.
An extortion campaign targeted Japanese real estate websites in October 2026, compromising one company and pivoting to nearly 20 related sites via shared hosting credentials. The attacker, known as kkkkevin777, stole over 16,000 customer records including plaintext passwords and sensitive personal data. Ransom pages with deadlines were deployed, threatening to expose stolen data. Ten days after the extortion wave, PHP2Shell exploitation tooling was found on an exposed staging server, indicating preparation for further attacks. Additional data from a Taiwanese company was also exfiltrated. The server contained weaponized PHP2Shell scripts, web shells, and tools for lateral movement, though no confirmed live exploitation via PHP2Shell was documented.
Threat actors are abusing legitimate mobile device management (MDM) platforms such as Hexnode and Rippling by using social engineering techniques to trick users into enrolling devices or installing management agents. Once enrolled, attackers deploy unauthorized remote monitoring and management (RMM) tools like ScreenConnect, connecting to attacker-controlled relays to gain remote access. The MDM platforms themselves are not compromised but are misused through deception, making it difficult to distinguish legitimate from malicious activity.
Malicious Firefox extensions impersonating popular cryptocurrency wallets Phantom, Jupiter, and Bitget have been discovered stealing users' recovery phrases and private keys. These extensions use Unicode homoglyphs to mimic legitimate wallet names and exfiltrate credentials to brand-named subdomains of bonto.io. The Phantom impersonator uses a two-stage loader to fetch additional malicious payloads at runtime. The campaign also prepares infrastructure for targeting Coinbase and Exodus wallets. Stolen secrets allow attackers full control over victims' cryptocurrency wallets and assets.
The FBI seized the domain virtualine.net on October 27, 2026, as part of Operation Omegaline targeting Virtualine Technologies, which operated the bulletproof hosting provider Omegatech (AS202412). Bulletproof hosting providers rent servers to cybercriminals and ignore abuse complaints, facilitating phishing, malware, and ransomware operations. Over the past year, law enforcement actions, sanctions, and strategic abandonments have resulted in 50 such providers losing their autonomous system numbers. Despite these disruptions, operators rapidly rebrand and acquire new ASNs to continue malicious activities. The investigation involved multiple international law enforcement agencies and private partners.
This is a credential phishing campaign targeting professionals through fake business bid invitations. It uses password-protected PDF attachments to evade automated security scans. The PDFs contain a fake OneDrive button that redirects victims to a fraudulent document-sharing site, prompting them to enter their email and then credentials on a counterfeit Microsoft login page. The campaign exploits trusted business workflows and familiar brand interfaces to bypass technical and human defenses.
A Brazilian Magecart group exploited a critical vulnerability (CVE-2026-8467) in Plausible Community Edition versions 3.0.0 through 3.2.0 to inject a card skimmer into the Plausible analytics script used by the Brazilian ecommerce platform Convertr. From October 24 to October 27, 2026, the malicious script stole payment card details, CVV, expiry dates, cardholder names, and CPF taxpayer numbers from shoppers during checkout. The stolen data was exfiltrated to the domain 1x0.is. Convertr removed the skimmer and patched the vulnerability on October 27. This Magecart group has targeted multiple Brazilian ecommerce platforms since 2024 using distinctive data exfiltration techniques.
