55
60
45
57
60
30
60
57
57
60
45
60
30
35
55
57
60
42
60
30
Hackers posed as Amnesty International, promising anti-spyware tool that actually collects passwords
60
57
42
57
30
60
30
45
30
30
57
30
60
57
60
60
30
60
30
Surfshark Systems Targeted by Hackers
Surfshark discloses hackers accessed a misconfigured internal test server; no user data or VPN services affected.
Surfshark discovered on August 31 that a threat actor accessed an internal test server exposed to the internet through misconfiguration, obtaining some system binaries and internal configurations. Build-related credentials committed to code history were rotated, and an isolated content optimization VPS was also accessed, though no user data, encryption keys, or browsing activity were exposed. The company contained the system, rotated credentials, and announced an independent security audit.
48