news
Breaking Cyber News From Cyberint
Breaking news feed of the latest cyber incidents, breaches, vulnerabilities, malware, ransomware and so much more.
- All Items
- Asia
- Data Encrypted For Impact
- Middle East
- Handala
- Business Services
- Israel
- Jobinfo
- Shelter Locations In Israel
- Saudi Games
- Retail
- Cyber Fattah Team
- Saudi Arabia
- Ben Horin & Alexandrovitz
- Zachary Levi And Sons - Construction
- Sivim It
- Kibbutz Almog
- Government
- Saban Brands Israel
- Manufacturing
- Mprest
- Digitalghost
- Evil_Byte
- The Knesset
- Gonjeshke Darande
- Nobitex
- exclusive
- South-Eastern Asia
- Indonesia
- Kimia Farma
- Chemicals And Allied Products
- Sentap
- Transportation
- Sweden
- Scania
- Europe
- Hensi
- Northern Europe
- Tbn Israel
- Media
- Education
- Weizmann Institute Of Science
- Resistancetrench
- Israeli Air Force
- Dienet
- Israel Antiquities Authority
- Wazuh
- Cve-2025-24016
- CVE-2025-24016
- Mirai
- United States
- North America
- Clayoxtymus1337
- Technology
- Epsilor Electric Fuel
- India
- Southern Asia
- Advanced Weapons And Equipment India
- More_Eggs
- Fin6
- Cryptocurrency
- Alex Lab
- Zoldyck
- Critical Infrastructures
- United Kingdom
- Edf Energy
- Match Legitimate Name Or Location
- Unix Shell
- Spearphishing Link
- Sudo And Sudo Caching
- Telecommunications
- Amos
- Ingress Tool Transfer
- Spectrum
- Credentials In Files
- Disable Or Modify Tools
- Israel Defense Forces
- Food And Kindred Products
- Coca-Cola Europacific Partners
- Ghna
- Italy
- Locauto
- Automotive
- Southern Europe
- Whitecoat
- Spain
- Mercadona
- Ups
- Wow Health Solutions
- Healthcare
- Rip_Real_World
- Cyprus Airways
- Netsupport Rat
- Tel Aviv University
- Illeak
- Desec0X
- Lucky_Gh0$T
- Cyberlock
- Numero
- Yashma
- Unc6032
- Chaos
- 303
- Deloitte
- Gucci
- Windows Credential Manager
- Eddiestealer
- Obfuscated Files Or Information
- Input Capture
- Screen Capture
- Phishing
- File And Directory Discovery
- Exfiltration Over C2 Channel
- Drive-By Compromise
- Password Managers
- Virtualization/Sandbox Evasion
- Credentials From Password Stores
- Credentials From Web Browsers
- User Execution
- Data From Local System
- System Information Discovery
- Command And Scripting Interpreter
- Australia
- W_Tchdogs
- Superloop
- Australia And New Zealand
- Resource Hijacking
- External Remote Services
- Docker
- Network Service Discovery
- Change Default File Association
- Web Protocols
- Deploy Container
- Smb/Windows Admin Shares
- Lateral Tool Transfer
- Exploit Public-Facing Application
- Escape To Host
- Remote System Discovery
- Exploitation For Client Execution
- Bitdefender
- Financial Theft
- Romania
- Venom Rat
- Cameleon
- Eastern Europe
- CVE-2023-20118
- Vicioustrap
- Cve-2023-20118
- Cisco
- Eastern Asia
- Macao Special Administrative Region
- Cve-2025-0944
- Tetraloader
- CVE-2025-0944
- Trimble
- Uat-6382
- Reflective Code Loading
- Malicious File
- Silver Fox
- File Deletion
- Masquerade Task Or Service
- Powershell
- Scheduled Task
- Dynamic-Link Library Injection
- Obfuscated Files Or Information: Encrypted Or Encoded Data
- Rundll32
- China
- Valleyrat
- Process Discovery
- Regsvr32
- Warmcookie
- Danabot
- Bumblebee
- Trickbot
- Qakbot
- Cetus
- Purehvnc
- Bytebreaker
- Latin America And The Caribbean
- Viralgod
- Telcel
- Mexico
- Peter Green Chilled
- Cellcom
-
Jun 10, 2025
New Clickfix Infostealer Campaign Targets macOS Users
Cybersecurity researchers have identified a new malware campaign that uses social engineering tactics to distribute an information stealer known as Atomic macOS Stealer (AMOS) targeting Apple macOS systems. The campaign employs typosquatting domains that mimic the U.S.-based telecom provider Spectrum, tricking users into executing a malicious shell script that steals system passwords and downloads the AMOS variant. The attack begins on a fake webpage that prompts users to complete a CAPTCHA verification, ultimately leading them to execute harmful commands under the guise of fixing a non-existent issue. The campaign is believed to be orchestrated by Russian-speaking cybercriminals, as indicated by the presence of Russian language comments in the malware's code.
-
May 29, 2025
Threat Actor Sells Access to Superloop
On May 28, 2025, the threat actor w_tchdogs claimed to have breached Superloop, an Australian telecommunications company. The actor is offering access to Superloop’s internal portal, which allegedly includes domain administration tools and other sensitive resources, for $750.
-
May 21, 2025
Threat Actor Claims Breach of Mexican Telcel
In May 2025, a threat actor named Eternal claimed to have breached Telcel Mexico and to have gained access to its database. According to the threat actor, 10 million lines of data belonging to Telcel's customers were taken, including phone numbers, tax IDs (RFC), full names, and full addresses.
-
May 21, 2025
Cellcom Reports Data Breach Following Outages
In May 2025, mobile carrier Cellcom became the victim of a cyberattack that caused widespread service outages and disruptions across Wisconsin and Upper Michigan. According to Cellcom, while the incident affected voice and SMS services, there is no evidence that personal information, such as names, addresses, or financial data, was compromised during the attack.