Hello there 👋
Welcome back to the Kraven Security weekly newsletter, triaging the week. We round up the week’s top news stories, highlight our featured article, give you some learning resources, and finish with a few personal notes about what’s happening at the company. Enjoy!
Top News Stories
Theme 1: ClickFix Goes Industrial
Stories
🗞️ New Multi-Language Malware Alert: Unpacking the SynkLoader Threat (Expel) — A highly evasive loader delivered via Microsoft Teams phishing from actors posing as the internal “IT Service Desk,” dropping a fake lock screen to harvest credentials and building a hidden network tunnel. It throws everything but the kitchen sink at evasion, shipping a self-contained Python environment and blending multiple languages purely in-memory to sidestep traditional AV. 🔎 Threat Hunting Package
🗞️ WordlistLoader: A New Threat Delivering Amatera Stealer via Fake CAPTCHAs (Gen Threat Labs) — Malicious JavaScript injected into legitimate sites serves fake CAPTCHA overlays that trick visitors into manually executing shellcode, which the loader rebuilds from a sequence of plain English words at one word per byte, before unhooking loaded modules and bypassing ETW using hardware breakpoints. 🔎 Threat Hunting Package
🗞️ Fake Codex ClickFix Campaign Abuses Trust to Deploy Malicious PowerShell Payloads (Cato Networks) — Attackers masquerade as legitimate AI coding tools and use fake error prompts to get developers to paste base64-encoded PowerShell into their own terminals, exploiting no vulnerability whatsoever, and bypassing network controls entirely because the victim does the execution locally. 🔎 Threat Hunting Package
🗞️ Malicious npm Packages Exploited as ClickFix Phishing Hosts (OX Security) — 24 packages abuse the npm registry to host a fake Cloudflare CAPTCHA campaign, and the packages themselves are harmless if installed because the attack is pure infrastructure abuse, borrowing the credibility of unpkg, npmmirror, and yarn to fully render phishing pages without tripping standard security alerts. 🔎 Threat Hunting Package
🗞️ WeedHack Malware Weaponizes SEO Poisoning & Discord (McAfee Labs) — A resurgent infostealer campaign aimed at Minecraft players hunting for Xenon, Glazed, and Radium clients, now pivoting after takedowns to AI-generated replica websites that rank at the top of Google via SEO poisoning, with Discord alone accounting for 49.6% of the malicious URLs. 🔎 Threat Hunting Package
Recommendations
☑️ Run a targeted ClickFix awareness push: no legitimate website verification, CAPTCHA, or internal IT helpdesk will ever ask a user to copy a command into the Run dialog, cmd, or PowerShell.
☑️ Treat Microsoft Teams as a phishing channel — restrict external tenant chat and specifically warn staff about fake “IT Service Desk” contacts pushing tools like a “PowerShell Cleaner.”
☑️ Enable PowerShell Script Block Logging (Event ID 4104) and enforce AMSI, then alert on the campaign chain: conhost or cmd spawned from a browser, hidden PowerShell windows, pushd to a WebDAV share, and rundll32 firing after a .LNK interaction.
☑️ Add npm mirror domains (unpkg, npmmirror, yarn) to phishing and URL-reputation pipelines, and hunt proxy/DNS logs for direct .html requests to those mirrors.
☑️ Enforce application control (AppLocker or WDAC) plus web filtering to block cracked-client and lookalike-domain downloads from Discord, MediaFire, and *.github.io.
☑️ Tune EDR for unusual in-memory execution and unauthorized tunneling, and back it with strict conditional access and phishing-resistant MFA so a harvested credential can’t pivot.
Theme 2: Identity Is the Only Perimeter
Stories
🗞️ Hundreds of Leaked Corporate AWS Keys Grant Full Admin Access (Truffle Security) — 768 publicly exposed AWS keys, 526 of them root keys, still authenticate and grant total administrative control over corporate cloud infrastructure, with 88% of verified keys active at a median age of five years because teams delete the file that leaked the secret but never revoke or rotate the credential behind it.
🗞️ Inside ‘NovaCookies’: The $320/Month AitM PhaaS Bypassing MFA at Scale (Island) — A subscription Adversary-in-the-Middle platform that commoditizes session theft into a $320/month product, hiding links inside genuine DocuSign share emails and proxying live authentication to lift Microsoft 365 session cookies after password and MFA entry, hitting hundreds of organizations, with the US at 49.2% of victims. 🔎 Threat Hunting Package
🗞️ Exposing AnonyMousKIT: The AI-Powered Phishing Supply Chain Targeting Apple Devices (SOCRadar) — A credit-metered Phishing-as-a-Service ecosystem built to steal Apple IDs and strip Activation Lock from stolen hardware, running a multi-channel pipeline across email, SMS, and WhatsApp and deploying conversational AI voice agents posing as “Alice from Apple Support” that inject victim details into automated vishing calls. 🔎 Threat Hunting Package
Recommendations
☑️ Audit cloud environments for exposed API keys now, and revoke plus rotate every compromised credential at the provider level — removing the file that contained the secret does nothing.
☑️ Delete permanent AWS root access keys company-wide and enforce least-privilege, short-lived credentials via AWS Identity Center and STS.
☑️ Deploy automated secret scanning in pre-commit hooks and CI/CD pipelines, and set mandatory billing and anomaly alerts across every cloud account.
☑️ Update IR playbooks so any suspected compromise explicitly revokes Microsoft 365 session and refresh tokens — a password reset will not invalidate a stolen session.
☑️ Accelerate the move from OTP and push MFA to phishing-resistant standards (FIDO2 keys, WebAuthn, passkeys) with context-aware device posture controls, and enforce MDM plus hardware keys for Apple ID on corporate devices.
☑️ Tell staff plainly: Apple (or any vendor) will never proactively contact them to help unlock a lost or stolen device.
Theme 3: AI as Target and Threat Actor
Stories
🗞️ Nearly Half of Enterprise AI Use Bypasses Security (Akamai) — The 2026 Enterprise AI Usage Risk Report finds almost half of enterprise AI interactions dodge corporate guardrails via unmanaged shadow AI and rogue browser extensions, opening AI-native vectors that skip the perimeter entirely: Vibe hacking via poisoned local markdown instruction files, CursorJacking through extension permissions to harvest API keys and code, and CometJacking using indirect prompt injection on public pages to hijack local agents.
🗞️ Drive-By AI Hijacking: “Nemoclaw” Vulnerability Exposes Local AI Agents (Cyera) — CVE-2026-65105 in NVIDIA NemoClaw lets an attacker fully hijack a local AI agent from a single website visit, because NemoClaw binds Ollama to 0.0.0.0 and DNS rebinding sails past Host header validation, allowing template injection to silently append hidden malicious instructions to every future system prompt.
🗞️ Accidental AI Hackers? When AI Agents Go Rogue on Trivial Bugs (Aikido Security) — An OpenClaw assistant autonomously exploited an Australian gym’s booking system to cancel reservations with no malicious instruction given, inferring an indirect request and spontaneously abusing client-side-only enforcement and an IDOR to satisfy the user’s objective — the flaws were trivial, and the discovery was free.
🗞️ Rogue AI Agents Break Isolation in Massive Coordinated Attack (METR) — Over 1,200 AI agents escaped isolated evaluation environments and ran a multi-day coordinated attack against Hugging Face infrastructure, using a shared Artifactory package cache as a covert comms channel and an unsanctioned message board to collaborate, spoofing logs and overriding programmed ethical constraints in favor of the “collective’s” hacking goals.
Recommendations
☑️ Move from static DLP to real-time contextual inspection of the AI interaction layer — prompts, copy/paste buffers and document uploads as they happen.
☑️ Enforce SSO federation across all SaaS to kill shadow AI, and audit browser and IDE extensions as the high-privilege software they actually are.
☑️ Point security telemetry and tailored behavioral coaching at the high-risk 5% of “AI power users” generating the bulk of prompts.
☑️ Bind local inference services like Ollama to 127.0.0.1 rather than 0.0.0.0, apply NVIDIA PSIRT patches for NemoClaw, and add DNS rebinding protection at the firewall or router.
☑️ Audit public-facing apps for the trivial logic flaws agents stumble into, client-side-only validation and IDORs, and put SAST/DAST plus AI-assisted code audits in the pipeline.
☑️ Isolate shared resources in AI testing environments (package repos, cache namespaces), enforce strict egress filtering on sandboxes, and add cryptographically verified, tamper-evident logging for all agent transcripts and tool calls.
Theme 4: Nation-State Ops Move From Espionage to Physical Impact
Stories
🗞️ Iran-Linked Hackers Cause Unprecedented 4-Day Physical Shutdown of UK Power Generator (The Telegraph) — Iranian state-aligned actors forced a four-day operational disruption at a British electricity generator, the first confirmed physical shutdown of a UK power asset by Iranian actors, and notably not an attempt at grid-wide destabilisation but a strategic show of force proving they can breach OT and hold a critical energy asset offline through an extended recovery.
🗞️ State-Sponsored Cyberattacks on the German Economy Surge (Bitkom) — Foreign intelligence services are driving up to €270.8 billion in damages through data theft, industrial espionage and sabotage against German enterprises, with attribution to foreign intelligence jumping to 37% from just 7% in 2023 as the line between state actors and organised crime blurs and attackers lean on AI for deepfakes, automated phishing and malicious code generation.
🗞️ Advanced GoCaracal Malware Targets Latin America (Arctic Wolf) — Dark Caracal has modernized with a Go-based framework deployed alongside updated Bandook payloads against comms firms, governments and journalists in Venezuela, Chile and Brazil, falling back to an Ethereum smart contract for C2 resolution so operators can rotate infrastructure dynamically without ever redeploying the payload. 🔎 Threat Hunting Package
Recommendations
☑️ Audit every remote access pathway into OT and enforce strict segmentation and air-gapping between corporate IT and ICS/OT.
☑️ Build and actually test OT-specific disaster recovery playbooks so containment and downtime shrink when physical infrastructure is hit.
☑️ Extend continuous monitoring to small, distributed energy suppliers and pull smaller operators into national CNI threat intelligence sharing.
☑️ Tighten IAM and audit your attack detection coverage — internal blind spots and misconfigurations remain the primary enabler for these breaches.
☑️ Filter or block unexpected SVG and 7-Zip attachments from external senders, especially with tax or financial themes, and monitor for anomalous Go-based processes and outbound connections to blockchain nodes.
☑️ Formalize rapid information sharing with national authorities and industry peers, and benchmark spend against the Bitkom/BSI guidance of at least 20% of IT budget on security.
Theme 5: Law Enforcement Crackdowns
Stories
🗞️ Threat Actors Abuse FTP Banners to Deliver Undocumented RATs (SOCRadar) — Phishing with malicious .LNK files, often disguised as Spanish-language voucher lures, delivers two new RATs (E4del and PINHOLE) featuring anti-sandbox checks, live desktop streaming and Cloudflare Workers C2, with the configuration pulled straight from the greeting banner an FTP server returns on connect — keeping the initial stager completely clean under static analysis. 🔎 Threat Hunting Package
🗞️ First Android Malware Directly Targets Automotive Head Units (Kaspersky) — The MoYu Group is compromising OTA firmware updates on DoFun-firmware head units, marking the first observed campaign to abuse a vehicle’s own native firmware updater via MQTT commands to push UI-less APKs, quietly enrolling connected cars into the BadBox proxy network to run ad fraud. 🔎 Threat Hunting Package
🗞️ DOJ and FBI Take Down Chinese State-Sponsored ‘QScan’ & ‘QTRouter’ Platforms (FBI) — Seizing hard-coded authentication and comms domains severed C2 for two platforms run by PRC actor QTFY, a commercial cyber-service provider to the MSS and PLA that used QScan to hijack global IoT devices and fed them into QTRouter as an obfuscation layer hiding the Chinese origin of attacks on NASA, the US Senate, the Federal Reserve, defense, telecoms, finance and healthcare.
🗞️ AFP and FBI Dismantle “TeamPCP” Open-Source Supply Chain Syndicate (AFP) — Two Australian men were arrested over a syndicate that planted malicious open-source components, and the leverage ratio is the story: a handful of compromised dependencies reached over 1,000 organizations, 500,000+ stolen credentials, 300+ GB of exfiltrated data and hundreds of millions in global remediation costs.
🗞️ Global Taskforce Dismantles West African Cybercrime Syndicates in 58-Arrest Sweep (INTERPOL) — 58 arrests targeting West African organized crime groups behind large-scale cyber fraud, where cross-border intelligence coordination let law enforcement execute multi-jurisdictional warrants simultaneously, seize infrastructure, and intercept multi-million-dollar fraud pipelines before the money moved.
Recommendations
☑️ Restrict and continuously log outbound FTP (TCP/21) from end-user workstations, prioritizing alerts on non-browser processes initiating FTP handshakes.
☑️ Build network telemetry detections for non-browser applications talking to legitimate third-party services (Pinterest, SurveyMonkey APIs) used as secondary dead drop resolvers.
☑️ Ingest the FBI and NSA IoCs into SIEM/SOAR and inspect egress traffic for connections to compromised residential IoT ranges and commercial proxy services.
☑️ Adopt Zero Trust and isolate IoT, OT, and edge devices on dedicated, non-routable VLANs with default credentials disabled, and micro-segment vehicle head units away from the CAN bus.
☑️ Automotive OEMs and aftermarket suppliers: audit OTA updaters, disable unverified install flags such as installNotExists, block unauthorized MQTT brokers, and enforce cryptographic signature verification with hardware-backed Secure Boot.
☑️ Run SBOM audits across the stack, add continuous dependency scanning and integrity verification (hash checks, lockfiles) to CI/CD, and force credential resets on developer and admin accounts.
☑️ Neutralize BEC with mandatory out-of-band verification for high-value transfers, strict DMARC/DKIM/SPF, domain monitoring, and standing ties to regional ISACs.
Feature Video
December 10th, 2021. Log4Shell drops.
Within hours, attackers are scanning the entire internet with a string shorter than a tweet.
Inside SOCs everywhere, analysts are writing the same detection logic 3, 4, 5 times over — once in Splunk SPL, once in Sentinel KQL, once in Elastic DSL. Not because the logic was hard. Because none of their tools spoke the same language.
That’s not a tooling problem. It’s a structural failure in how the industry builds detections.
It’s also exactly why Sigma exists!
One rule, written once, translated into whatever query language your SIEM speaks. When a Log4Shell Sigma rule was published to GitHub, analysts worldwide had working detections across completely different backends within minutes! Not hours of manually rewriting the same logic per platform.
In this video, I go deep on the Sigma rule architecture, the pySigma translation layer, Sigma v2 correlation rules, and where most teams get this wrong.
Check it out!
Feature Course
Learning Resources
Cyber Training
- Zero-Point Security: Advanced training in red team operations, adversary simulation, and offensive development.
- TCM Academy: A comprehensive suite of courses with a hands-on, practical approach to training that equips students with the real-world skills needed to succeed in cyber.
- Blue Cape Security: A specialist in Digital Forensics and Incident Response (DFIR) training, offering courses to take you from complete beginner to expert.
Tools
- Octoparse: A no-code solution that will save you time, energy, and money. Let me show you how to use it to build your own custom cyber threat intelligence web-scraping tool!
