Netcrook
#account hijacking
How Malware Can Aim at Synced Passkeys Without Breaking the Math
Researchers demonstrated attack paths against Google’s synced passkey setup, showing that the weak point may be the device, browser, or recovery layer around the credential rather than WebAuthn itself.
Inbox AI Turns Every Message Into a Possible Attack Path
Built-in email assistants can make work faster, but a poisoned message may also steer summaries, drafts, or trust decisions in ways attackers can exploit.
Passkeys Were Supposed to Kill Password Theft. Malware Found the Device Instead.
The risk is no longer just phishing: on a compromised Windows machine, synced passkeys can become part of the attacker’s path to account takeover.
Insurance Phishing Has Learned to Move at the Speed of a Login
CTM360-linked research points to a shift from delayed credential theft to real-time account hijacking, a change that shrinks the defender’s window from hours to seconds.
When a Mailbox Becomes an API Problem
A targeted campaign tied to ToddyCat shows how malware, installer lures, and cloud authorization abuse can turn Gmail from an inbox into an identity-risk surface.
When a Phone Number Turns Into a Crypto Break-In Tool
A Polish arrests case shows how SIM-swapping can move through telecom trust, email access, and identity recovery.
When the Login Becomes the Breach: Tchap Shows How Identity Can Outrun Encryption
France’s government messenger was tied to a hijacked account, a reminder that secure chat can still bend if the person behind the screen is no longer trusted.
Weedhack Turns Minecraft Curiosity Into a Credential-Grabging Business
A subscription-style malware operation tied to Minecraft lures shows how fake mod sites, search poisoning, and social promotion can be turned into a repeatable theft pipeline.
When Recovery Becomes the Prize: Instagram’s Support Flow Lands in the Attackers’ Crosshairs
A reported Instagram takeover tied to Meta’s AI-assisted support tools shows how account recovery can become a high-value security boundary, not just a convenience feature.
When the Help Desk Becomes the Lockpick
Multiple Instagram users lost account access after attackers abused AI-driven support and identity checks, showing how recovery flows can turn into a takeover path.
Avatar Uploads, Full Trust: The Open WebUI Flaw That Turned a Profile Feature Into a Security Fault Line
A reported stored XSS issue in Open WebUI’s upload path shows how a routine profile-image workflow can become a persistent browser-side attack surface, with a claimed route to account hijacking and even deeper compromise in chained scenarios.
When a Trusted Installer Turns Into a Message Relay
Reported activity around TCLBANKER shows how a banking trojan can borrow the credibility of a signed installer and the reach of hijacked accounts to spread further.
WhatsApp Hijacks: How Cybercriminals Are Turning Trusted Chats into Cash Traps
A wave of WhatsApp account takeovers is fueling a new breed of convincing scams-here’s how to spot and stop them.