Beyond the kill chain: What cybercriminals do with their money (Part 2)
In the second of our five-part series, Sophos X-Ops investigates the so-called ‘white’ (legitimate) business interests of threat actors
Similar Posts
Hackers wipe out Rs 384 crore from Bengaluru cryptocurrency firm Neblio Technologies; firm says inside job
Bys sExpress News Service reports: Bengaluru-based Neblio Technologies Private Limited, the parent company of cryptocurrency exchange platform CoinDCX, said it has lost Rs 384 crore due to hacking, in one of the biggest cyber crimes reported in the country. In a police complaint on July 22, Hardeep Singh, Vice-President, Public Policy and Government Affairs, Neblio Technologies,…
ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface
Bys sCybersecurity researchers have disclosed details of a vulnerability in OpenAI ChatGPT that leverages the artificial intelligence (AI) assistant’s implicit trust in Markdown links and images to trigger prompt injections and open the door to phishing attacks. The technique has been codenamed ChatGPhish by Permiso Security. “The chatgpt.com response renderer trusts Markdown links and Markdown
APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign
Bys sA Pakistan-nexus threat actor has been observed targeting Indian government entities as part of spear-phishing attacks designed to deliver a Golang-based malware known as DeskRAT. The activity, observed in August and September 2025 by Sekoia, has been attributed to Transparent Tribe (aka APT36), a state-sponsored hacking group known to be active since at least 2013….
Shoot the Messenger, Sunday Edition: Reporting on a leak is not unethical, Hamilton County
Bys sOn March 26, DataBreaches linked to reporting by the Chattanooga Times Free Press. Their report indicated that the local government had not notified residents of a data breach potentially affecting 14,000 people despite having been notified of the incident 240 days ago. According to the memo, the firm sent a letter on Feb. 17 saying…
In Other News: McDonald’s API Hacking, Netflix Fine, Malware Kills ICS Process
Bys sNoteworthy stories that might have slipped under the radar: McDonald’s API hacking, Netflix fined nearly $5 million in Netherlands, experimental malware killing ICS process. The post In Other News: McDonald’s API Hacking, Netflix Fine, Malware Kills ICS Process appeared first on SecurityWeek.
Iranian Hackers Launch ‘SpearSpecter’ Spy Operation on Defense & Government Targets
Bys sThe Iranian state-sponsored threat actor known as APT42 has been observed targeting individuals and organizations that are of interest to the Islamic Revolutionary Guard Corps (IRGC) as part of a new espionage-focused campaign. The activity, detected in early September 2025 and assessed to be ongoing, has been codenamed SpearSpecter by the Israel National Digital Agency (INDA)….