The Threat Wire

Your wire for what matters in cybersecurity 🌍

[The Threat Wire @TheThreatWire]

Apple Blocks Compromised eMudhra Certificates, Plans Additional macOS Fix https://t.co/msHcIcIqY9

[The Threat Wire @TheThreatWire]

Launchpad now allows users and developers to file bugs directly against Personal Package Archives (PPAs), helping distinguish third-party packaging issues from bugs affecting official Ubuntu repository packages.
https://t.co/PNsjn6Mo0z

[The Threat Wire @TheThreatWire]

India’s CBFC Investigates Data Leak Affecting 500+ Film Titles https://t.co/uWfq6XQbhI

[The Threat Wire @TheThreatWire]

The roothide team has released Dopamine 3, version 3.0.12-28, making the project publicly available as open source on GitHub.

Dopamine-roothide is a rootless, semi-untethered jailbreak supporting multiple iOS versions and device architectures. https://t.co/bTrbZC6OHY

[The Threat Wire @TheThreatWire]

Grok has released the first seven minutes of its AI-generated adaptation of “The Odyssey,” now presented as Episode 1 of a planned series.

The project was created using Grok Imagine in collaboration with Wonder Studios and director Dev Walker, following Elon Musk’s earlier announcement of plans for a full-length AI-generated film. https://t.co/iCLZ9eF9N6

[The Threat Wire @TheThreatWire]

Elon Musk says SpaceX has closed $40 billion in debt financing primarily to purchase GPUs expected to arrive in early 2027. https://t.co/cULfQI1Dft

[The Threat Wire @TheThreatWire]

Nanbeige LLM Lab has released Nanbeige4.3-33B, a dense open-weight model designed for agentic coding and office-style tasks.

The Apache 2.0 model supports a 512K context window and tool calling, scoring a self-reported 80.9 on Terminal-Bench 2.1 and 65.5 on DeepSWE. https://t.co/HOOdZ8VDoF

[The Threat Wire @TheThreatWire]

Taiwanese Luxury Marketplace PopChill Data Allegedly Leaked

Threat actor DaOnlySpark claims to have compromised PopChill and released a database containing approximately 435,000 user records. The dataset reportedly includes account profiles, verification status, activity and marketplace information, alongside 439 business accounts and more than 8,500 phone-number records linked to users.

Organization: PopChill
Country: Taiwan
Industry: E-Commerce / Luxury Fashion
Threat Actor: DaOnlySpark
Incident: Alleged Data Breach
Status: Unverified Claim
Source: PwnForums

#CyberSecurity #DataBreach #Taiwan #PopChill #Ecommerce #DataLeak #ThreatIntel

[The Threat Wire @TheThreatWire]

Cambodia’s CADT and IDT Systems Allegedly Breached via RCE

Threat actor DaOnlySpark claims to have compromised the Cambodia Academy of Digital Technology and Institute of Digital Technology through an RCE vulnerability. The second alleged data release includes multiple SQL databases, application source code, employee documents, payment records and system configurations, alongside exposed API credentials, authentication secrets and cryptographic keys.

Organizations: CADT / IDT
Country: Cambodia
Sector: Education / Digital Technology
Threat Actor: DaOnlySpark
Incident: Alleged RCE / Data Breach
Status: Unverified Claim

#CyberSecurity #DataBreach #Cambodia #RCE #DataLeak #ThreatIntel

[The Threat Wire @TheThreatWire]

Icarus RAT Advertised with hVNC, Session Hijacking and Credential Theft Features

A threat actor using the alias Icarus777 is advertising a new native x64/x86 remote access trojan dubbed Icarus RAT. The malware reportedly combines hidden desktop control, browser-session recovery, credential theft, keylogging, cryptocurrency address hijacking, surveillance capabilities, reverse shell access and in-memory payload execution.

Malware: Icarus RAT
Threat Actor: Icarus777
Platform: Windows x64 / x86
Category: RAT / Information Stealer
Status: Advertised for Sale

#CyberSecurity #Malware #IcarusRAT #RAT #InfoStealer #ThreatIntel

[The Threat Wire @TheThreatWire]

Payment Platform https://t.co/vd6PCUYLQq Allegedly Breached

Threat actor B4b7k claims to have compromised https://t.co/vd6PCUYLQq, a payment gateway provider, and obtained approximately 400GB of data. The actor is reportedly offering source code, merchant and partner information, P2P agent records, payment-method data and financial statements for sale after an alleged extortion attempt failed.

Organization: Finaxis
Sector: Financial Technology / Payment Processing
Threat Actor: B4b7k
Incident: Alleged Data Breach / Extortion / Data Sale
Status: Unverified Claim

#CyberSecurity #DataBreach #FinTech #PaymentSecurity #DataLeak #Extortion #ThreatIntel

[The Threat Wire @TheThreatWire]

PT Kurnia Jaya Bersama Database Allegedly Offered for Sale

Threat actor Xvst claims to be selling a database allegedly obtained from Indonesian electronics distributor and service provider PT Kurnia Jaya Bersama. The 252.96MB database reportedly contains approximately 1.49 million records across 57 tables, including banking, customer, service, inventory, purchasing, sales and transaction-related information.

Organization: PT Kurnia Jaya Bersama
Country: Indonesia
Industry: Electronics / Technology Distribution
Threat Actor: Xvst
Incident: Alleged Database Sale
Status: Unverified Claim

#CyberSecurity #DataBreach #Indonesia #DataLeak #Electronics #ThreatIntel

[The Threat Wire @TheThreatWire]

Argentina’s Cotelcam Comunicaciones Database Allegedly Leaked

Threat actor Lenken claims to have obtained data associated with Argentine telecommunications provider Cotelcam Comunicaciones. The purported leak contains approximately 400,000 records and appears to include customer account, contact, billing, service and payment-related information.

Organization: Cotelcam Comunicaciones
Country: Argentina
Industry: Telecommunications
Threat Actor: Lenken
Records: ~400K
Incident: Alleged Data Leak
Status: Unverified Claim

#CyberSecurity #DataBreach #Argentina #Telecom #DataLeak #ThreatIntel

[The Threat Wire @TheThreatWire]

French Digital Agency https://t.co/YMVLaMn4HL Allegedly Breached

A threat actor claims to have compromised Graphcom, a French digital and visual communication company, and released data allegedly obtained from its infrastructure. Shared evidence appears to reference exposed server configuration information, database access and an object-storage backup containing multiple directories and files.

Organization: Graphcom
Country: France
Sector: Digital Communication / Web Services
Incident: Alleged Infrastructure and Data Breach
Status: Unverified Claim

#CyberSecurity #DataBreach #France #Graphcom #DataLeak #ThreatIntel

[The Threat Wire @TheThreatWire]

Phishing Alert #43

Url: hxxps://wicksappsoauth.click/
Country: United States
Organization: Discord Inc.
Industry: Technology / Social Communication & Messaging
Main services: Text messaging, voice and video calls, community servers, private messaging, screen sharing, live streaming, file and media sharing, bots and app integrations, gaming-focused communities, and online collaboration.

[The Threat Wire @TheThreatWire]

Phishing Alert #42

Url: hxxps://verify-google-app.netlify.app/
Country: United States
Organization: Google LLC
Industry: Information Technology / Internet Services
Main services: Google Account authentication and access to services including Gmail, Google Drive, YouTube, Google Photos, Google Maps, Google Calendar, Google Meet, Google Workspace, Android services, cloud storage, and other Google products.

[The Threat Wire @TheThreatWire]

Phishing Alert #41

Url: hxxps://microsoftconfig-3.vercel.app/
Country: United States
Organization: Microsoft Corporation
Industry: Information Technology / Email & Cloud Services
Main services: Email and calendar services through Outlook and Exchange Online, Microsoft account authentication, Microsoft 365 integration, contacts management, cloud-based mail storage, spam and phishing protection, enterprise email, and integration with Teams, OneDrive and other Microsoft services.

[The Threat Wire @TheThreatWire]

Phishing Alert #39

Url: hxxps://desenrola-br-consulte.netlify.app/
Country: Brazil
Organization: Desenrola Brasil — Federal Government of Brazil / Ministry of Finance
Industry: Government / Financial Services / Debt Renegotiation
Main services: Government debt-renegotiation program designed to help individuals resolve overdue debts, negotiate with participating creditors, obtain discounted settlement terms, arrange installment payments, and restore access to credit.