#data-exfiltration
#data-exfiltration
[ follow ]
#cybersecurity #ransomware #prompt-injection #malware #shadowleak #agentic-ai #extortion #social-engineering
fromArs Technica
6 days agoNew attack on ChatGPT research agent pilfers secrets from Gmail inboxes
Accordingly, OpenAI mitigated the prompt-injection technique ShadowLeak fell to-but only after Radware privately alerted the LLM maker to it. A proof-of-concept attack that Radware published embedded a prompt injection into an email sent to a Gmail account that Deep Research had been given access to. The injection included instructions to scan received emails related to a company's human resources department for the names and addresses of employees. Deep Research dutifully followed those instructions.
Information security
Information security
fromThe Hacker News
2 weeks agoRussian APT28 Deploys "NotDoor" Outlook Backdoor Against Companies in NATO Countries
APT28 deployed an Outlook VBA backdoor called NotDoor that monitors emails for a trigger to exfiltrate data, upload files, execute commands, and persist via DLL side-loading.
Information security
fromIT Pro
2 weeks agoCybersecurity experts issue urgent warning amid surge in Stealerium malware attacks
Stealerium infostealer has surged, exfiltrating credentials, crypto wallets, Wi‑Fi and VPN data via multiple channels and leveraging social‑engineering lures for global campaigns.
Information security
fromThe Hacker News
4 weeks agoStorm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks
Storm-0501 performs cloud-native data exfiltration, destroys backups, and extorts victims without traditional malware, targeting hybrid cloud and multi-tenant environments to escalate privileges and evade detection.
Information security
fromThe Hacker News
4 weeks agoShadowSilk Hits 36 Government Targets in Central Asia and APAC Using Telegram Bots
ShadowSilk conducts spear-phishing campaigns to exfiltrate data from government organizations across Central Asia and APAC, leveraging YoroTrooper-related tooling and bilingual operators.
fromIT Pro
2 months agoDevelopers face a torrent of malware threats as malicious open source packages surge 188%
"Attackers are no longer simply experimenting with open source. The numbers are telling us that threat actors have identified data as the most profitable target, and developers as the easiest way in."
Privacy technologies
[ Load more ]