threat-intelligence

The website presents itself as Relay, an AI-powered assembly and collaboration platform, claiming to supply options reminiscent of real-time transcription, collaborative notes, AI-generated summaries, motion gadgets, and cross-platform desktop shoppers. For somebody attending a distant interview, this workflow doesn’t seem uncommon. Being requested to set up a “assembly software” earlier than the following interview stage…

The web site presents itself as Relay, an AI-powered assembly and collaboration platform, claiming to provide options akin to real-time transcription, collaborative notes, AI-generated summaries, motion objects, and cross-platform desktop purchasers. For somebody attending a distant interview, this workflow doesn’t seem uncommon. Being requested to set up a “assembly software” earlier than the subsequent interview…

Threat Intelligence | From “Compliant Emails” to Remote Control: An Investigation into a Web3 Wallet Phishing Attack Phishing Analysis Entering the Attack Chain by way of “Compliance Notices” The attackers didn’t use frequent lures similar to “airdrops” or “profitable prizes.” Instead, they selected compliance-related matters, that are extra seemingly to decrease the guard of Web3 practitioners….

https://x.com/Will42W/status/2077938237704958154 MistEye Response MistEye is a Web3 menace intelligence and dynamic safety monitoring system independently developed by SlowMist. It integrates safety monitoring and intelligence aggregation capabilities to offer customers with real-time threat alerts and asset safety. MistEye promptly synchronized the chance by intelligence notifications and buyer alert channels. 2. Analysis of the Malicious Extension 2.1…

The attacker sends a GitHub repository by a recruitment message and persuades the goal to run the MVP earlier than the interview. The account introduced itself as a Web3 funding and enterprise skilled, with a historical past of posting about undertaking investments, product improvement, and associated subjects. As a outcome, when the attacker despatched the…

In different phrases, the malware is making an attempt to substantiate that the consumer has entered their precise macOS login password, fairly than an arbitrary string. Once the password is efficiently verified, it may be utilized in subsequent phases of the assault, corresponding to privilege escalation and utility elimination. Collecting Browser and Keychain Credentials At…

The investigation unfolds by way of the next findings. Technical Analysis Finding 1: No apparent indicators are left throughout set up. The investigation started with package deal.json. Around strains 485–500, no set up lifecycle scripts resembling postinstall or preinstall have been discovered. Simply putting in the affected model doesn’t mechanically set off knowledge exfiltration, that…

Analysis of the $2.19 Million Asset Theft from Aztec Connect: ZK-Rollup Settlement Boundary Bypass Leads to L1/L2 State Discrepancy

Threat Intelligence｜From Python to Bun: Cross-Runtime Attack Chain Analysis of the Shai-Hulud Hades Variant