Search: “broadcom”

5 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 123 Malware 99 Ransomware 73 Exploit / PoC 63 Industry 40 Threat actor 34 Policy & legal 18 Data breach 17 AI tools & infra 6 AI industry 5 Tools 4 Advisory 3 Phishing & fraud 1 AI research 1

SeverityAll critical 212 high 170 medium 49 low 27 info 29

Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations

Broadcom researchers link the Chinese APT group 'Jewelbug' to a lucrative crypto-fraud hack-for-hire operation.

Threat intelligence researchers at Broadcom reported that the known Chinese APT group tracked as Jewelbug may be connected to a profitable crypto fraud scheme. The findings suggest the group blends traditional espionage tradecraft with financially motivated hack-for-hire work. Victimology and operational scale were not detailed in the initial disclosure.

Infosecurity MagazineAug 14, 07:30 UTC · Aug 14, 2026Threat actor

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Symantec reports multiple threat actors, including KongTuke, abusing the trusted signed Node.js runtime and blockchain C2 (EtherHiding) to deliver backdoors in targeted attacks.

Symantec's Threat Hunter Team (Broadcom) reports that since February 2026 attackers have used the legitimate signed node.exe binary and interpreted scripts to deliver implants while evading signature-based detection, hitting government departments, technology companies, and hotels. One intrusion at an Asian technology firm (March 23–July 25, 2026) used ClickFix social engineering, the official Node.js installer, and EtherHiding to fetch commands via the Ethereum blockchain after AdaptixC2 and Cobalt Strike attempts were blocked. Related chains involve KongTuke (Woodgnat) using ModeloRAT, Mistic, NexShield, and GateKeeper, plus C2Looper, AsukaStealer, and EtherRAT; GuidePoint Security separately linked a fake-CAPTCHA ClickFix campaign to at least 31 compromised organizations using the Polygon blockchain as a dynamic C2 address book.

The Hacker NewsSep 3, 10:43 UTC · 13d agoThreat actor in the wild1

Search: “broadcom”

Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Warning: New Adware Campaign Targets Meta Quest App Seekers

New 'Loop DoS' Attack Impacts Hundreds of Thousands of Systems

Hydrochasma: New Threat Actor Targets Shipping Companies and Medical Labs in Asia