news
Breaking Cyber News From Cyberint
Breaking news feed of the latest cyber incidents, breaches, vulnerabilities, malware, ransomware and so much more.
- All Items
- Data Encrypted For Impact
- Handala
- Asia
- Israel
- Jobinfo
- Middle East
- Business Services
- Shelter Locations In Israel
- Cyber Fattah Team
- Retail
- Saudi Arabia
- Saudi Games
- Ben Horin & Alexandrovitz
- Zachary Levi And Sons - Construction
- Sivim It
- Government
- Kibbutz Almog
- Manufacturing
- Saban Brands Israel
- Mprest
- Digitalghost
- The Knesset
- Evil_Byte
- Gonjeshke Darande
- Nobitex
- exclusive
- Sentap
- Indonesia
- Chemicals And Allied Products
- South-Eastern Asia
- Kimia Farma
- Sweden
- Europe
- Hensi
- Scania
- Transportation
- Northern Europe
- Tbn Israel
- Media
- Weizmann Institute Of Science
- Education
- Israeli Air Force
- Resistancetrench
- Dienet
- Israel Antiquities Authority
- CVE-2025-24016
- Mirai
- Wazuh
- United States
- Cve-2025-24016
- North America
- Epsilor Electric Fuel
- Technology
- Clayoxtymus1337
- Southern Asia
- Advanced Weapons And Equipment India
- India
- Fin6
- More_Eggs
- Alex Lab
- Cryptocurrency
- Zoldyck
- United Kingdom
- Edf Energy
- Critical Infrastructures
- Disable Or Modify Tools
- Amos
- Credentials In Files
- Sudo And Sudo Caching
- Spearphishing Link
- Spectrum
- Unix Shell
- Ingress Tool Transfer
- Match Legitimate Name Or Location
- Telecommunications
- Israel Defense Forces
- Coca-Cola Europacific Partners
- Ghna
- Food And Kindred Products
- Locauto
- Southern Europe
- Italy
- Automotive
- Mercadona
- Whitecoat
- Spain
- Wow Health Solutions
- Ups
- Healthcare
- Cyprus Airways
- Rip_Real_World
- Netsupport Rat
- Tel Aviv University
- Illeak
- Desec0X
- Chaos
- Lucky_Gh0$T
- Cyberlock
- Yashma
- Unc6032
- Numero
- 303
- Deloitte
- Gucci
- Screen Capture
- Password Managers
- Exfiltration Over C2 Channel
- Drive-By Compromise
- Data From Local System
- Eddiestealer
- File And Directory Discovery
- Virtualization/Sandbox Evasion
- Credentials From Web Browsers
- System Information Discovery
- Phishing
- Obfuscated Files Or Information
- Input Capture
- Credentials From Password Stores
- Windows Credential Manager
- Command And Scripting Interpreter
- User Execution
- Superloop
- W_Tchdogs
- Australia And New Zealand
- Australia
- Exploitation For Client Execution
- Resource Hijacking
- Web Protocols
- Exploit Public-Facing Application
- External Remote Services
- Network Service Discovery
- Lateral Tool Transfer
- Docker
- Escape To Host
- Smb/Windows Admin Shares
- Remote System Discovery
- Change Default File Association
- Deploy Container
- Bitdefender
- Cameleon
- Romania
- Venom Rat
- Eastern Europe
- Financial Theft
- Vicioustrap
- CVE-2023-20118
- Macao Special Administrative Region
- Cve-2023-20118
- Eastern Asia
- Cisco
- Tetraloader
- Cve-2025-0944
- CVE-2025-0944
- Uat-6382
- Trimble
- China
- Process Discovery
- Valleyrat
- Regsvr32
- Powershell
- File Deletion
- Silver Fox
- Rundll32
- Scheduled Task
- Obfuscated Files Or Information: Encrypted Or Encoded Data
- Dynamic-Link Library Injection
- Malicious File
- Masquerade Task Or Service
- Reflective Code Loading
- Trickbot
- Bumblebee
- Warmcookie
- Danabot
- Qakbot
- Cetus
- Purehvnc
- Bytebreaker
- Latin America And The Caribbean
- Telcel
- Viralgod
- Mexico
- Peter Green Chilled
- Cellcom
-
Jun 03, 2025
Exploiting AI: The Rise of Fake Installers and Ransomware
A new cybersecurity threat involves fake installers for popular AI tools like ChatGPT and InVideo AI, which are being used to distribute various ransomware families, including Cyberlock and Lucky_gh0$t, as well as a destructive malware called Numero. These fake installers are promoted through SEO poisoning and lure users with claims of free access, only to deploy malicious software that encrypts files and demands hefty ransoms. The threat actors behind this campaign are targeting individuals and organizations in the B2B sales and marketing sectors, and their tactics include using legitimate-sounding filenames and exploiting popular AI tools to gain trust. The campaign has been linked to a threat cluster with a Vietnam nexus, indicating a sophisticated and ongoing operation.
