87105 matches found
MAL-2025-192690 Malicious code in smtrlib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2c1075f7c4373ccaac9936bfd75a22a27f0c9ba06a5402a68a45fe8121f58783 Malicious copy of a standard library module that during class initialization downloads and executes remote code and after that attempts to cover its tracks by...
WordPress WP Telegram Widget and Join Link plugin <= 2.2.12 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin WP Telegram Widget and Join Link versions = 2.2.12...
Insider Threat: Hackers Paying Company Insiders to Bypass Security
A new report from Check Point Research reveals a growing trend of cyber criminals recruiting employees at banks, telecoms, and tech giants. Learn how hackers use the darknet and Telegram to offer payouts up to $15,000 for internal access to companies like Apple, Coinbase, and the Federal Reserve...
CVE-2025-14302
creationtimestamp| type| source ---|---|--- 2025-12-22 08:39:26+00:00| published-proof-of-concept| https://t.me/xakepru/18676...
Android Malware Operations Merge Droppers, SMS Theft, and RAT Capabilities at Scale
Threat actors have been observed leveraging malicious dropper apps masquerading as legitimate applications to deliver an Android SMS stealer dubbed Wonderland in mobile attacks targeting users in Uzbekistan. "Previously, users received 'pure' Trojan APKs that acted as malware immediately upon...
MAL-2025-192686 Malicious code in runtimeutils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4d312906cc585fcd02b2ac0b52bb04a23b0294532e3625c7f5e27bf1e4b51e4a Importing the module, downloads and starts a malicious executable identified as infostealer. Based on Telegram links, this is related to the 2025-12-synium...
Malicious code in runtimeutils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4d312906cc585fcd02b2ac0b52bb04a23b0294532e3625c7f5e27bf1e4b51e4a Importing the module, downloads and starts a malicious executable identified as infostealer. Based on Telegram links, this is related to the 2025-12-synium...
CVE-2025-67435
creationtimestamp| type| source ---|---|--- 2025-12-21 03:00:06+00:00| published-proof-of-concept| Telegram/t-VGx2tYz7zkt5cKHuKO0m7dpm-T1fz3zebST3-fjI9Ic 2026-01-02 18:48:53+00:00| published-proof-of-concept| Telegram/YF7SiVU4fRdeEbPrgEybP1PhAHJtxgx2UciXBwDQ1HiRhM...
Malicious code in ai-cypher (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5484d32cf20d26ce1585cb1cf90d2ed28c9cf9ccdcf038976a5cec33dd939e4d The compiled native extension hides the code that during import exfiltrates sensitive Telegram files. --- Category: MALICIOUS - The campaign has clearly...
MAL-2025-192683 Malicious code in ai-cypher (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5484d32cf20d26ce1585cb1cf90d2ed28c9cf9ccdcf038976a5cec33dd939e4d The compiled native extension hides the code that during import exfiltrates sensitive Telegram files. --- Category: MALICIOUS - The campaign has clearly...
CVE-2022-1476
creationtimestamp| type| source ---|---|--- 2025-12-19 20:18:03+00:00| seen| https://t.me/Dooztoria/22...
CVE-2022-0888
creationtimestamp| type| source ---|---|--- 2025-12-19 20:18:03+00:00| seen| https://t.me/Dooztoria/22...
CVE-2022-2436
creationtimestamp| type| source ---|---|--- 2025-12-19 20:18:03+00:00| seen| https://t.me/Dooztoria/22...
CVE-2022-3227
creationtimestamp| type| source ---|---|--- 2025-12-19 20:18:03+00:00| seen| https://t.me/Dooztoria/22...
CVE-2022-2864
creationtimestamp| type| source ---|---|--- 2025-12-19 20:18:03+00:00| seen| https://t.me/Dooztoria/22...
CVE-2022-1119
creationtimestamp| type| source ---|---|--- 2025-12-19 20:18:03+00:00| seen| https://t.me/Dooztoria/22 2026-07-29 12:01:06+00:00| seen| https://t.me/CVEhub/451 2026-07-30 00:01:46+00:00| seen| https://t.me/CVEhub/451 2026-08-01 07:00:04+00:00| published-proof-of-concept| https://t.me/CVEhub/451...
Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks
Authorities in Nigeria have announced the arrest of three "high-profile internet fraud suspects" who are alleged to have been involved in phishing attacks targeting major corporations, including the main developer behind the RaccoonO365 phishing-as-a-service PhaaS scheme. The Nigeria Police Force...
CVE-2025-63353
creationtimestamp| type| source ---|---|--- 2025-12-19 03:00:07+00:00| seen| Telegram/iRuzp0CuSyW9LBw5wJCbHvBDGRyj3e1op05yhSdYb6lHYSQ 2026-04-10 03:00:06+00:00| published-proof-of-concept| Telegram/UD4f2fAiHC8hrDsfHLnzkdfzuqQpRpS5NbwfSwmP7L4Z6U 2026-05-26 03:00:05+00:00| seen|...
The Ultra-Realistic AI Face Swapping Platform Driving Romance Scams
Capable of creating “nearly perfect” face swaps during live video chats, Haotian has made millions, mainly via Telegram. But its main channel vanished after WIRED's inquiry into scammers using the app...
Iranian APT ‘Prince of Persia’ Resurfaces With New Tools and Targets
SafeBreach reports the resurgence of the Iranian APT group Prince of Persia Infy. Discover how these state-sponsored hackers are now using Telegram bots and Thunder and Lightning malware to target victims globally across Europe, India, and Canada...