Microsoft Threat Intelligence and its Digital Crimes Unit disclosed a Chinese-language phishing ecosystem built around a marketplace called Yam Store, tracked as Storm-3119. The operation sold phishing kits and infrastructure, including repurposed Microsoft and Google domains, and since January has sent over one billion phishing emails and texts to more than 75,000 organizations worldwide. Microsoft and Resecurity identified three kits used in the campaigns—CoGUI, Haozi/Phoenix, and Iron Man System—linked to developers tracked as Storm-2990.
darkreading.com
· 2026-10-14
Microsoft Threat Intelligence reported on Sept. 29 that Russia-linked APT group Star Blizzard has replaced its ClickFix social-engineering technique with a new malware delivery method called RedFlick. The group, also known as ColdRiver or Callisto, has used RedFlick since January to install its CosmicPulse backdoor via scheduled tasks, requiring only a single victim interaction instead of multiple steps.
darkreading.com
· 2026-09-30
Google Threat Intelligence Group analyst John Hultquist told the Financial Times that his team has observed a major increase in LLMjacking throughout 2026. The technique involves criminals stealing API keys or login credentials to hijack businesses' AI accounts, exploiting high or unlimited usage limits to run up token costs or misuse compute resources without paying.
zdnet.com
· 2026-09-29
Microsoft Threat Intelligence disclosed a previously unknown modular backdoor called NeedyMantis, active since at least October 2025, used in targeted intrusions against telecoms, universities, medical nonprofits, intergovernmental bodies and government contractors. The malware was found while investigating the DAEMON Tools supply chain compromise reported by Kaspersky in May, and Microsoft has linked some activity to a China-based actor it tracks as Storm-3069, though not all deployments are attributed to that group.
darkreading.com
· 2026-09-29
Secure file-sharing vendor Kiteworks emailed customers globally, urging a six-hour server shutdown this weekend after receiving threat intelligence from law enforcement about a possible imminent attack. The company confirmed to BleepingComputer that federal intelligence authorities warned a threat actor may target some customer systems, and recommended shutting down even systems not internet-facing. Kiteworks said it has no evidence of any actual compromise and described the move as precautionary.
bleepingcomputer.com
· 2026-09-25
A Google Threat Intelligence Group analyst named Larsen ran a covert operation to observe the hacker collective TeamPCP, gaining access to a server where the group stored stolen credentials from numerous victim companies. Google used this visibility to rapidly notify cloud providers like AWS and Microsoft to revoke compromised access tokens before the hackers could exploit them for extortion, rather than trying to contact each victim individually.
arstechnica.com
· 2026-09-20
Google's Threat Intelligence Group disclosed a credential-harvesting operation where attackers compromised cloud infrastructure and deployed a multi-agent AI framework that scanned for vulnerabilities, fixed its own errors, and rotated IP addresses largely without human input. The entire campaign, which compromised thousands of third-party credentials, took less than six hours to execute. Separately, Microsoft found AI-assisted phishing messages reaching click-through rates of 54%, compared to roughly 12% for conventional campaigns.
bleepingcomputer.com
· 2026-09-17
Anthropic disclosed in a threat intelligence report that it detected and shut down efforts to use its Claude AI models for potentially dangerous purposes, including activity that could aid biological weapons development. The report also details other misuse cases involving state-linked actors from Russia and Iran, scam operations, surveillance tools, and alleged attempts by Chinese firms to copy Claude's technology.
bbc.co.uk
· 2026-09-11
Anthropic's Threat Intelligence team disclosed that it identified and shut down multiple cyber operations run by state-sponsored groups, financially motivated criminals, and politically motivated actors who abused its Claude Haiku, Sonnet, and Opus models. The company said no misuse was found involving Claude Fable or Mythos, which carry stronger safeguards, and that in every case it disrupted the activity, patched its defenses, and coordinated with law enforcement and industry partners.
anthropic.com
· 2026-09-10
Google's Threat Intelligence Group reports that attackers are moving from simple AI-assisted coding to fully autonomous, multi-agent systems that plan and execute entire attacks with little human input. In one case, a financially motivated actor compromised cloud infrastructure and used an AI coding chatbot with markdown-based agent instructions to build and run a mass credential-harvesting operation in under six hours. Separately, researchers found an exposed command-and-control server running a framework called 'Recon' that autonomously managed reconnaissance and tens of thousands of harvested credentials.
bleepingcomputer.com
· 2026-09-08
Anthropic's threat intelligence chief Jacob Klein says foreign actors, particularly in China, are using illegal methods to extract outputs from its Claude models and train cheaper rival systems, a practice known as distillation. He named Moonshot AI's Kimi K3 model as an example of technology he believes was built this way, describing an organized effort to evade Anthropic's account and access controls at scale.
cnbc.com
· 2026-09-03
Palo Alto Networks' Unit 42 team says its new Frontier AI Defense service, which pairs threat intelligence with AI models, compressed roughly one to two years of penetration testing into three weeks and found dozens of vulnerabilities in customer systems. The researchers warn that the same AI-driven speed and automation available to defenders could soon give low-skill attackers, known as script kiddies, capabilities once reserved for well-funded, state-sponsored hacking groups.
zdnet.com
· 2026-08-27
GoKawiil