ills3c Intel&Coffee

Unknown threat actors hijacked Danfoss refrigeration controllers at hundreds of French supermarkets, manipulating temperatures to cause food spoilage and equipment fires.

The RedDirection campaign weaponized 18 legitimate browser extensions via updates to facilitate traffic redirection, data hijacking, and persistent command-and-control access.

Mandiant researchers detailed a session hijacking technique using SCCM's CcmExec service to execute code in every interactive user session via AppDomainManager injection.

Aoki Infostealer has evolved to specifically target API keys and session tokens for AI coding assistants like Claude, Cursor, and GitHub Copilot to hijack developer identities.

Lumma Stealer is a Malware-as-a-Service infostealer targeting sensitive data via social engineering techniques like ClickFix and deceptive PowerShell execution.

NortonLifeLock integrated an Ethereum cryptominer named Norton Crypto into its Norton 360 antivirus suite, raising significant security and ethical concerns.

Mustang Panda and other Chinese APTs utilize the PlugX RAT for espionage and credential theft, leveraging DLL side-loading and USB propagation.

Weedhack malware is distributed to gamers through SEO-poisoned lookalike websites impersonating popular Minecraft clients and mods.

Two malicious Chrome extensions totaling 900,000 users are exfiltrating AI chat conversations and browsing history to attacker-controlled C2 servers.

Agent Tesla is a .NET-based spyware Trojan that steals credentials, keystrokes, and screenshots primarily through malicious email attachments.