#session-theft

0 stories this week · 3 this month · 10 in 6 months · mostly security

Stories per day · 30 days

10 stories, newest first · one card per story

OpenAI rated the issue P1, paid a $5,000 bounty, and blocked the cross-frame MathLive messages on both web frontends by October 26.

BlackFog verified a Windows sample’s config and modules, not every seller-advertised browser feature.

ANY.RUN28d agohigh

ANY.RUN linked 1,258 fake Claude and ChatGPT lures delivering infostealers and phishing US users.

Exploited15 min readfake-ai infostealer

Public PoC shows Telegram Desktop before 7.2.9 can leak local files and sessions via a crafted link.

Sucuri documented SC, a WordPress backdoor that restores itself from files, the database, memory, and Ethereum-based commands.

Exploited7 min readwordpress backdoor

The Hacker NewsSep 30, 2026high

US-focused CSuite phishing steals Microsoft 365 sessions and installs RMM tools for persistent access.

Exploited6 min readphishing csuite

ANY.RUNSep 29, 2026high

September campaigns CSuite, N0va, and IronToll phished US organizations for Microsoft 365 sessions, tokens, and payment data.

A Firefox PDF add-on fetches post-install instructions that steal Google sessions and can silently reset passwords.

ANY.RUNSep 23, 2026

ANY.RUN reports phishing exposure above 70% in US finance and manufacturing, driven by AiTM kits like Sneaky2FA and ClickFix social engineering.

Elastic details KREMLIN, a Brazilian banking malware whose malicious Chrome/Edge extension forges Chromium integrity checks to steal sessions.

Stories tagged #session-theft