Netcrook
#credential theft
Guilty Plea Deepens the Snowflake Credential-Theft Case
A court admission in the Snowflake-linked case underscores how stolen credentials can fuel broad data theft and extortion.
ClickFix Lures Are Feeding a macOS Credential Heist
A social-engineering chain is turning user trust into code execution, then targeting the secrets that make account takeover and crypto theft possible.
Inside the Python Stealer Built to Hide in Plain Sight
Vanta Stealer shows how packaging and obfuscation can turn familiar developer tools into a concealment layer for credential theft, token abuse, and wallet scraping.
AI Coding Agents on GitHub: How a Small Workflow Gap Can Become a Big Security Problem
Research presented at Black Hat USA 2026 points to a fragile trust boundary: once AI coding tools touch GitHub workflows, a mistake in permissions or input handling can raise the risk of code execution, token exposure, and pipeline control.
Vanta Stealer Turns Trust Into a Windows Trap
A Python-based infostealer linked to fake updates, cracked software, and game cheats shows how one careless launch can turn into credential theft and account takeover.
Oracle SQL Injection Can Become a Database-Side Siege
A reported toolkit called KHunt shows how a web-facing SQL injection can be pushed past data access and into database-hosted execution, raising the stakes for over-privileged Oracle deployments.
Exposed Ransomware Toolkit Points to a Silent Access Phase
A directory left visible online appears to contain tooling for Windows access, credential theft, security evasion, lateral movement, and a blockchain-linked command channel.
When a Browser Trick Becomes an Apple ID Trap on iPhone
A leaked iOS exploit chain paired with a counterfeit Apple sign-in page shows how one malicious visit can blend device exploitation and credential theft into a single attack path.
The Quiet Path to Domain Control: What an Exposed Server Revealed About Identity Theft in Windows Networks
A compromised internet-facing system can expose how credential theft and Active Directory abuse turn a routine foothold into domain-level control.
Fake AI Downloads Are Becoming a Shortcut to Stolen Developer Trust
Attackers are using AI-branded lures and cloned GitHub repositories to push infostealers toward developers and AI users, with credentials and cloud secrets in the crosshairs.
Fake AI Toolkits Are Becoming Secret-Harvesting Traps for Developers
Cloned repositories, infostealers, and social-engineering lures are turning routine AI setup work into a path to cloud credential theft.
Travel Networks Turned Toxic in a Token-Theft Play for Microsoft 365
A reported campaign tied to ChocoShell shows how compromised hospitality guest networks can be used to collect cloud session material, not just passwords, from roaming users.
Lobby Signals, Hidden Hands: Why Hotel Wi-Fi Is Back on the Espionage Map
A fresh attribution tied to Russian state-sponsored operators puts hotel wireless networks in the spotlight as a credential and malware delivery surface, not just a convenience layer for travelers.
MacSync and the New Mac Trap: When a Fake Prompt Becomes a Password Vault Raid
A newly documented macOS threat shows how social engineering, browser-session theft, and Keychain harvesting can turn one user interaction into a much wider credential crisis.
The CAPTCHA Trap on Mac: How a Browser Check Can Become a Shell Command
Attackers are using fake CAPTCHAs to trick macOS users into running malicious commands, in a campaign that reportedly deploys AMOS and targets browser credentials and crypto wallets.
AI Anxiety Is Rising, But the Old Break-Ins Still Matter More
As concern over AI grows, Arctic Wolf warns that companies may be paying less attention to the familiar threats that still drive most day-to-day security work.
One Phishing Kit Fell, but Microsoft 365 Attackers Kept the Blueprint
The disruption of Kratos may have removed one criminal service, but the deeper problem is the reusable playbook behind modern Microsoft 365 account-takeover campaigns.
Fake AI Installers Are the New Phishing Kit for Developer Macs
A malvertising campaign dressed up as a Claude Code setup guide shows how one pasted command can turn a developer workstation into a map of reusable secrets.
Vendor Trust, Not Just Data, Is the Real Target in EY Extortion Claim
A public claim tied to EY points to the risk hidden in third-party support access, where one trusted link can become the pressure point for an extortion attempt.
Hotel Wi-Fi Became the Trapdoor to Microsoft 365
A compromise at the network edge can turn a routine travel login into a credential-and-token capture event, with cloud identity as the real target.