ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Trezor”

4 stories in the last 3d

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllMalware 4Data breach 3
SeverityAllcritical 0high 7medium 0low 0info 0

240,000 Hit by Data Breach at Japan’s Digital Agency

Japan's Digital Agency says hackers exploited a VPN flaw and a maintenance account to steal ~246,000 records on 240,000 people.

Japan's Digital Agency disclosed a breach of its Government Solution Service (GSS) affecting roughly 240,000 individuals, discovered in late June. Attackers exploited a publicly disclosed vulnerability in a VPN product and used a maintenance and operations employee's account to access over 246,000 records, including names (~236,000), email addresses (~231,000), phone numbers (~94,000), and addresses (~1,000). The agency blocked external access to the affected server, suspended the account, and said no ID numbers or financial account data were compromised.

SecurityWeekupdated · 1d agofirst · 1d agoData breach in the wild 2 sources

HBO Max Reddit Account Hijacked to Spread PasteSwitch ClickFix Malware

Hijacked HBO Max verified Reddit account ran 108 ClickFix malvertising ads delivering AMOS and Amatera stealers plus crypto clippers to macOS and Windows users.

Threat actors hijacked HBO Max's verified Reddit account (u/hbomax) to run 108 malicious ClickFix ads over 48 hours in a campaign tracked as PasteSwitch, researched by Hudson Rock and ADAMnetworks. macOS victims were served curl | zsh chains deploying MacSync and Atomic macOS Stealer (AMOS), which harvest browser credentials, Telegram data, Apple Notes, and macOS passwords, while fake Ledger, Trezor, and Exodus apps targeted BIP39 seed phrases. Windows users received an InstallFix chain using an MP3/HTA polyglot with mshta and PowerShell, scheduled-task persistence, AMSI disabling, and in-memory Amatera Stealer that hid C2 traffic (77.91.65.13:443) behind a facebook.com TLS SNI. AnimateClipper and ZigClipper components swapped copied crypto wallet addresses and used Binance Smart Chain contracts as mutable C2 dead drops; Reddit paused the ads and the initial access path remains undisclosed.

GBHackersupdated · 1d agofirst · 1d agoMalware 7 sources

Personal, Financial Info Exposed in Revolut Data Breach

Revolut says a scammer using a legitimate government agency email domain obtained affected users' PII, ID copies, selfies and full financial records.

Revolut, a London-based neobank serving over 80 million users in 160 countries, notified affected users that personal and financial data was exposed to a third party posing as a government agency. Exposed data included names, addresses, dates of birth, driver's licenses, passports, verification selfies, IBANs, account statements, withdrawal records and full transaction history including Bitcoin. Revolut blocked the attacker's email and notified the relevant agency, regulators and law enforcement, but did not disclose how many individuals were impacted.

SecurityWeek · 2d agoData breach

Telus Warns Customers of Account Breaches

Telus warns customers that attackers used compromised credentials to access accounts and personal data between February 2025 and June 2026.

Telus, one of Canada's largest telecom providers, is notifying customers that attackers accessed consumer telecom accounts using compromised credentials between February 2025 and June 2026. Exposed data includes names, account numbers, phone numbers, billing addresses, email addresses, partial payment card numbers, subscription details, and payment history. The stolen information was used to push customers toward competitors and to make unauthorized service changes; the number of affected accounts is undisclosed. Telus reset credentials, added enhanced monitoring, notified Vancouver police, and offered identity theft protection; the incident may be credential stuffing and follows a ShinyHunters-claimed breach of subsidiary Telus Digital.

SecurityWeek · 2d agoData breach in the wild