Country

North America

0 mentions in 7 days · 2 in 30 days · 2 total · first seen Aug 19, 2026 · last 7d ago

Timeline2 articles

AI Coding Tools Now a Prime Target for Threat Actors, Google Warns

Google Threat Intelligence Group warns threat actors increasingly target AI coding tools and proprietary AI data, with UNC6780's Dustmaker enabling large-scale supply chain compromises.

Google Threat Intelligence Group's September 8 report says AI-assisted coding tools have become prime targets, contributing to large-scale software supply chain compromises in 2025 and early 2026. Financially motivated group UNC6780 used its Dustmaker credential stealer to extract tokens from GitHub Actions runner memory and compromise packages across PyPI, npm, and Docker Hub, then sold harvested AI tool credentials to other criminals. Chinese nation-state actor UNC6508 conducted espionage against proprietary AI research at North American academic, medical, and military institutions, while extortion gangs stole models, prompts, and source code in Q2 2026. GTIG also documented agentic attacker experimentation, including an autonomous multi-agent credential harvesting campaign built in under six hours and a 'Recon' C2 framework managing over 23,800 harvested secrets.

Infosecurity MagazineSep 8, 12:02 UTC · 7d agoThreat actor in the wild 2 sources1

Banks look for fraud signals in customer behavior

ThreatMark's 2026 benchmark finds 55% of banks see social engineering in most fraud, pushing behavioral intelligence and earlier detection during customer sessions.

ThreatMark's Fraud Readiness Benchmark 2026 reports social engineering is involved in most fraud at 55% of surveyed banks, with criminals impersonating trusted people to make customers authorize payments using legitimate credentials. The report highlights behavioral intelligence as underused (18% adoption, 83% rating it effective), expects authorized push payment reimbursement regulation in North America within two years, and notes 91% agreement that AI can shorten fraud investigations. It also finds 81% of fraud professionals now carry cybersecurity responsibilities.

Help Net SecurityAug 19, 00:00 UTC · 28d agoPhishing & fraud

Appears with

threat actor UNC6508 1 threat actor UNC6780 1 malware Dustmaker 1 malware Recon 1 organization Google 1 organization ThreatMark 1 product Fraud Readiness Benchmark 2026 1 product GitHub Actions 1 vendor Docker Hub 1 vendor Gemini 1 vendor Google Threat Intelligence Group 1 vendor npm 1 vendor PyPI 1 vendor ThreatMark 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.