Kimsuky's Advanced Attack Techniques: JSONPing, Webex Spoofing, and a New HttpSpy Variant

Pulse ID: 6a1fd56f3989e7f2a94ae74e
Pulse Link: https://otx.alienvault.com/pulse/6a1fd56f3989e7f2a94ae74e
Pulse Author: Tr1sa111
Created: 2026-06-03 07:19:11

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #Kimsuky #OTX #OpenThreatExchange #UK #bot #Tr1sa111

Please join Chrissie, Steve, Chris , and Kelly for some fascinating discussion interspersed with some interesting music on All Sorts; heard today on The Global Voice at 16:00 UTC, that's 12:00 Eastern, 09:00 Pacific in the Americas.

You can join in the show in several ways by going to http://theglobalvoice.info/show/allsorts

Come join us for an interesting hour's radio.
#https://theglobalvoice.info:8443/broadband #audio #radio

Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages

A supply chain attack compromised multiple @redhat-cloud-services npm packages, executing malicious payloads automatically during installation via preinstall hooks. The attack uses AES-GCM encrypted payloads and obfuscated JavaScript loaders to harvest GitHub Actions secrets, npm tokens, cloud credentials (AWS, Azure, GCP), Kubernetes and Vault material, SSH keys, Git credentials, and cryptocurrency wallet files. The payload can daemonize on developer workstations, includes Russian-locale avoidance mechanisms, and exfiltrates stolen data through encrypted HTTPS channels with GitHub API fallback mechanisms. The campaign employs tactics similar to the publicly released Shai-Hulud toolkit, though attribution remains unclear due to the availability of open-source attack tooling.

Pulse ID: 6a1dde0e4e662ca1f8b4b0b2
Pulse Link: https://otx.alienvault.com/pulse/6a1dde0e4e662ca1f8b4b0b2
Pulse Author: AlienVault
Created: 2026-06-01 19:31:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #Azure #Cloud #CyberSecurity #GitHub #HTTP #HTTPS #ICS #InfoSec #Java #JavaScript #NPM #OTX #OpenThreatExchange #RAT #RCE #Russia #SMS #SSH #SupplyChain #bot #cryptocurrency #AlienVault

#certificate management has been historically a pain. A push by #certification authorities can push IT to #authomatize #https certificate management?

https://kowalski7cc.xyz/blog/short-lived-certificates/

I just released v0.0.4 of #httpDOS, a #TLS enabled #webserver for #MSDOS (source and binaries)

https://github.com/SuperIlu/httpDOS

I updated mbedTLS from v2.28.8 to v3.6.6

#RetroComputing #FreeDOS #DJGPP #HTTPS #mbedTLS