Cybersecurity News
Filters
Filtered by tag: credential theft × Clear
Hacker With Limited Skills Used DeepSeek AI to Breach Indian University and Steal Over 5,200 Records
Matched: Artificial Intelligence, cryptocurrency
A low-skilled hacker using the handle BUGSTER combined DeepSeek AI with other tools to breach two Indian universities, stealing a MongoDB database of over 5,200 student and staff records. The attacker exploited weak passwords and exposed services rather than software flaws. Additional activity included credential scanning, Wi-Fi cracking, cryptocurrency research, and VoIP fraud planning, though no evidence confirmed the latter schemes were executed, per Palo Alto Networks' Unit 42.
Hackers Hijack 333 Tor Exit Nodes to Intercept SSH Logins and Steal Credentials
Matched: health
Hackers compromised 333 Tor exit nodes beginning October 2, redirecting SSH connections to interception servers to steal credentials using Ebury, an OpenSSH backdoor. The affected relays represented roughly 10% of Tor's exit nodes. Attackers redirected port 22 traffic while passing other traffic normally. Users who ignored host-key warnings and used password authentication exposed their credentials. A researcher discovered the campaign via SSH fingerprint testing and reported it to Tor's network health team, which flagged affected relays by October 4. All identified servers were shut down October 5.
Hackers Hijack 790 GitHub Repositories to Steal Cloud Credentials and AI API Keys
Matched: Claude
A campaign called GhostAction has compromised at least 790 GitHub repositories by injecting malicious Actions workflows into trusted developer accounts. The workflows scan repository files and Git history for credentials including AWS keys and tokens for OpenAI, Anthropic, GitHub, and others, then exfiltrate findings to attacker-controlled infrastructure. Removing the workflow is insufficient; affected teams must revoke tokens and rotate all secrets the workflow could have accessed.
Two Australians Charged Over TeamPCP Supply-Chain Attacks That Hit 1,000+ Organizations
Matched: Australia
Two Western Australian men have been charged with 14 combined offenses over alleged supply-chain attacks linked to hacking group TeamPCP. Authorities say they inserted malicious code into open-source repositories, compromising over 1,000 organizations globally, stealing 500,000+ credentials and exfiltrating 300GB of data. Remediation costs are estimated in the hundreds of millions. The AFP and FBI began investigating in April 2026. Both men appear in Perth Magistrates Court on 27 August 2026.
Phantom Stealer Hides Inside PNG Files, Then Steals Your Passwords, Cookies and Crypto
Matched: cryptocurrency
Phantom Stealer is a credential-stealing malware that conceals malicious code inside PNG image files to avoid detection. Once executed on Windows systems, it harvests passwords, browser cookies, cryptocurrency wallet data, and other sensitive information. The malware has been used in campaigns targeting users across multiple countries.
Malicious Solidity Pro VS Code Extension Steals Crypto Wallets, API Keys and SSH Keys via Telegram
Matched: cryptocurrency
A malicious VS Code extension called Solidity Pro has been discovered stealing cryptocurrency wallet data, API keys, and SSH keys from developers. Disguised as a legitimate Solidity development tool with polished documentation, the extension exfiltrates stolen data via Telegram. The attack highlights how convincing branding and familiar tooling can lower developers' guard against supply chain threats.
Russian Hacker Breaches Companies, Sells Their Access and Spies on Ukrainian Military Sites
Matched: health
A Russian-speaking hacker has been linked to a broad campaign breaching organizations across multiple sectors worldwide, including education, healthcare, finance, and government. The actor exploited exposed security appliances and public applications to harvest credentials and sell network access to ransomware groups. The operation also reportedly included surveillance activity targeting Ukrainian military websites.