Talos details VOLTA, a Windows infostealer that ranks loot with LLMs
The same newsletter repeats claims about Railway agents, freezer attacks in 10 countries, and a Binance theft.
64
- Mentions · 7d1
- Mentions · 30d2
- All mentions9
- First seenSep 22, 2026
- Last mentioned6d ago
Timeline
9 articles · newest firstNorthflank breach leads to abuse of customers' AI API keys
Customers must assume environment variables were decrypted; Northflank has not said how attackers got in or how many were affected.
74
Huntress Tragic Quadrant: Top Cyber Threats Wrecking Businesses
Huntress finds RMM abuse, mailbox-rule BEC, and AiTM token theft most often disrupt SMBs.
68
Attackers Create Fake Jev AI Stores to Intercept Prompts Through Third-Party Servers
Eye Security found fake Jev AI storefronts reselling genuine API access while routing user prompts through attacker-controlled third-party servers at up to 11.5x official prices.
55
AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft
Microsoft disrupted EvilTokens, an AI-powered phishing platform that compromised 12,000+ email accounts across 10,000+ organizations.
75
EvilTokens made phishing-as-a-service look easy. Then it got taken down
Law enforcement takes down EvilTokens PhaaS kit that compromised 12,000 inboxes using AI-powered device-code phishing to bypass MFA.
85
Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes
Microsoft and partners seized EvilTokens infrastructure after the phishing service compromised over 12,000 inboxes.
84
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
Microsoft dismantled EvilTokens, an AI-assisted device-code phishing service linked to about 12,000 inbox takeovers.
76
UK Cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites
UK police arrested two EvilTokens admins as Microsoft seized sites used to phish over 12,000 inboxes.
77
Appears with
- Microsoftvendor · 6
- SpyCloudorganization · 5
- OpenAIorganization · 5
- Microsoftorganization · 5
- Health-ISACorganization · 5
- Cloudflareorganization · 5
- Coinbaseorganization · 5
- TRM Labsorganization · 4
- Microsoft 365product · 4
- EvilTokensmalware · 4
- The Shadowserver Foundationorganization · 3
- Storm-2992threat actor · 2
- Coinbasevendor · 2
- Huntressorganization · 2
- Metropolitan Police Serviceorganization · 2
- Mimecastvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.