Tag: data exfiltration
164 articles
Chinese Hackers Exploit AI-Powered Tool to Breach Korean Banks
Chinese hackers have breached South Korean financial institutions using an AI-powered tool, with CrowdStrike Intelligence uncovering evidence of exfiltrated data and a sophisticated campaign that went beyond mere reconnaissance. The alarming breach, active from late September to early October, highlights the growing threat of AI-fueled cyberattacks.
AI-Powered Pentesting Tool Exploited in South Korean Financial Data Heists
Meet ARTEX, an AI-powered pentesting tool that was originally designed for learning and research, but was repurposed by hackers to steal sensitive data from South Korean financial organizations. In a shocking campaign, attackers used ARTEX to breach security and get away with valuable information.
Third-Party Breach Exposes Frontline Education Data
A shocking data breach at Frontline Education exposed sensitive employee information, including Social Security numbers, after an unauthorized user exploited a vulnerability in third-party software used by the education-tech organization. The breach highlights the hidden risks of entrusting vendors with confidential data.
PowerShell Backdoor TASK#STOMP Exfiltrates Sensitive Data in Stealthy Campaign
Meet TASK#STOMP, a sneaky PowerShell backdoor that's quietly harvesting sensitive business data, including documents, Wi-Fi passwords, and clipboard contents, while also taking screenshots and allowing remote control. This stealthy campaign uses a clever VBS-driven framework to evade detection and keep its operators informed.
Insider Risk Evolves, Threatens Critical Infrastructure
The insider risk landscape has become a complex and critical security challenge, evolving beyond the traditional disgruntled worker to include emerging threats like shadow AI, synthetic identities, and ideologically motivated sabotage. Today's insider risk requires a predictive, intelligence-driven approach to safeguard against data leaks, infiltration, and rapid exfiltration.
Nutex Health Breach Exposes Patient Data to Ransomware Gang
Nutex Health revealed a devastating data breach on August 31, confirming that a ransomware gang had infiltrated its servers, compromising sensitive patient, employee, and business information. The attackers have even threatened to publicly expose the stolen data.
Australia Charges Two in TeamPCP Cybercrime Case Tied to Supply Chain Attacks
In a major breakthrough, the Australian Federal Police charged two men with 14 offences for their alleged roles in the notorious TeamPCP cybercrime syndicate, which compromised over 1,000 organizations worldwide and stole more than 500,000 credentials. The suspects, aged 23 and 21, were arrested and appeared in court after a joint operation seized electronic devices for forensic analysis.
Manic Android Malware Exploits Nearby Devices for Data Exfiltration
Meet Manic, a sneaky new Android malware that's using a clever fallback strategy to steal sensitive data from nearby devices, even when they have no internet connection. It captures credentials and in-app secrets by combining spyware, banking fraud, and remote-control capabilities into one powerful payload.
Azure Exfiltration Campaign Exposes 3.6 Million Records
A shocking data breach has hit major players like McDonald's and Gap Inc., with a hacker claiming to have made off with a staggering 3.6 million Azure account records, including 1.7 million sensitive employee records from McDonald's alone. The breach exposes names, emails, addresses, and more, serving as a stark reminder that traditional security perimeters just aren't enough.
Clop Ransomware Operation Exploits Windchill Flaw with Custom Web Shell
The Clop ransomware operation has exploited a critical flaw in PTC Windchill and FlexPLM servers, deploying a custom web shell that allows for easy credential theft and massive data exfiltration. This sneaky move gives attackers a direct path to sensitive data, with no extra tools needed.
Microsoft Uncovers 30+ Domains Linked to MacSync Stealer Infrastructure
Microsoft's investigation has uncovered a sneaky operation: over 30 domains are secretly linked to MacSync Stealer, a notorious macOS information stealer, and are actively siphoning off sensitive data. The company confirmed that data exfiltration is happening in real-time, not just sending out distress signals.
Microsoft Copilot Flaws Expose One-Click Data Exfiltration Risk
Researchers uncovered a set of flaws in Microsoft Copilot, dubbed CoSnitch, that could allow attackers to exploit a user's session with just one click, potentially leading to data exfiltration. A single crafted link could trigger actions inside a signed-in user's assistant session, putting sensitive information at risk.
Wesco Probes Data Exfiltration After ExfilSquad Leak Claim
Wesco is investigating a cybersecurity incident involving its cloud CRM environment after a third-party group, ExfilSquad, claimed to have exfiltrated company data. The company says it has contained the issue, found no evidence of sensitive data being compromised, and continues to operate as usual.
Open VSX Eradicates Malicious Extensions Exfiltrating Developer Data
A shocking discovery by Manifold Security revealed that 77 malicious extensions on Open VSX were secretly siphoning off sensitive data from developers' machines between July 26 and August 1, 2026. These fake extensions, masquerading as legitimate tools, were swiftly removed by Open VSX on August 3, 2026.
Open VSX Extensions Exfiltrate Developer Data in "Evil Twin" Campaign
Beware of fake developer tools on Open VSX! A recent "evil twin" campaign revealed 77 malicious extensions that masqueraded as legitimate tools, secretly collecting and transmitting sensitive data about your system and development environment.
Amgen Discloses Cloud Data Breach Exposing Patient Health Info
Amgen recently discovered a cloud data breach that compromised patient health information, prompting immediate action to contain and investigate the incident. The breach, detected in July 2026, involved unauthorized access to multiple cloud systems operated by third-party service providers, resulting in the theft of sensitive data, including proprietary information and protected health records.
Craneware Data Breach Exposes Healthcare Sector Risks
A recent data breach at Craneware, a software provider for healthcare, has exposed the sector to new risks, highlighting that the initial compromise is just the beginning of a larger story. The breach, which involved unauthorized access to a subset of data, has already revealed a significant volume of sensitive file names were viewed and exfiltrated.
Craneware Discloses Data Theft in Cyber Incident
A recent cyber incident at healthcare finance software provider Craneware exposed a significant volume of sensitive data, including customer and business partner records, highlighting the ease with which determined attackers can carry out data exfiltration. Even seemingly low-severity incidents can pose a real risk of data exposure.
GoSerpent Malware Evolves with Advanced Data Exfiltration Tactics
In late 2025, a new wave of malicious activity emerged, led by the evolved GoSerpent malware, which has been quietly lurking in the shadows since at least 2021. This stealthy backdoor has upgraded its data exfiltration tactics, putting organizations on high alert.
macOS Malware Exploits User Trust to Steal Sensitive Data
Beware of a sneaky new macOS malware that tricks you into stealing your own sensitive data - all it needs is for you to paste a single command into Terminal. Dubbed ClickLock Stealer, this clever con artist has already duped at least 100 victims across 33 countries.
FBI Traces Scattered Spider Hacker via Persistent Windows Device ID
In a brazen ransom email, the attackers boldly declared, "IMPORTANT: WE STOLE THE DATA, CONTACT UMMEDIATELY," leaving no doubt about their malicious intentions. The hackers infiltrated the retailer's network through a clever help-desk ploy, tricking staff into resetting passwords and gaining control of critical accounts.
Opera GX Flaw Enables Sites to Auto-Install Malicious Mods
A critical flaw in Opera GX allowed websites to secretly install malicious customization mods, which could then siphon sensitive data from other sites you visited - and it took a $5,000 bounty and a May 8 patch to fix the issue. This sneaky exploit let attackers install mods without your consent, putting your online security at risk.
TrojPix Exploits Video Cables to Leak Air-Gapped Data
Meet TrojPix, a sneaky technique that can stealthily siphon air-gapped data at lightning-fast speeds of up to 1 megabyte per second - fast enough to exfiltrate a 100MB file in under two minutes while the monitor appears dark and inactive.
Microsoft Warns AI Agents Can Leak Data via Poisoned Tool Descriptions
A single line of plain text can unwittingly turn a helpful AI agent into a stealthy data thief, exposing sensitive information through a vulnerability in the Model Context Protocol (MCP). This fast-growing attack surface has Microsoft warning of a potentially disastrous trust boundary breach.