Remus Stealer advertises $1,000 Gmail access that survives resets
Hudson Rock has not verified persistence after password changes or a Gmail vulnerability.
Stories per day · 30 days
Relatedai-agents1backdoor1cloud-backup1connectwise1cpguard1cyberstrikeai1gmail1infostealer1japan1linux-security1maas1microsoft-3651msp1remus-stealer1supply-chain-attack1trend-micro1weblogic1
6 stories, newest first · one card per story
Stories tagged #credential-access
Hackers hijack cPGuard autoupdate to deploy backdoor
Attackers compromised OpsShield's CDN to distribute a backdoor and data-stealing script through cPGuard updates, affecting nearly 3,000 servers.
Trend Micro: three Japan-focused attacks used AI to different degrees
Only one case was confirmed as agent-driven; entry often used exposed legacy systems and default or reused credentials.
1
ConnectWise resets Cloud Backup credentials after unauthorized access
Huntress saw vendor-credential sign-ins from 144.172.64.128, then Global Administrator grants and new secrets on two tenants.
1
The Oracle of Delphi Will Steal Your Credentials
Akamai honeypots reveal attackers brute-forcing RDP credentials to download and execute a previously undetected malware family named Trojan.sysscan.
2
.png&w=828&q=75)
Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and Secrets
GreyNoise observes scanners spoofing OpenAI, Anthropic, and DeepSeek crawler user agents to hunt leaked credentials and secrets.
3