📰 TrapDoor Supply Chain Attack Hits npm, PyPI, Crates.io, Stealing Crypto & Dev Secrets

⚠️ Widespread 'TrapDoor' supply chain attack hits npm, PyPI & Crates.io! 34+ malicious packages steal crypto wallets, SSH keys & dev credentials, abusing AI coding assistants for exfiltration. #SupplyChainAttack #TrapDoor #npm #PyPI

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/trapdoor-supply-chain-attack-steals-developer-credentials/?utm_source=mastodon&utm_med…

TrapDoor Attack Spreads Credential-Stealing Malware Across Software Ecosystems

A massive supply chain attack, dubbed TrapDoor, has been spreading credential-stealing malware across three major language ecosystems, infecting over 34 malicious packages and 384 versions. The coordinated campaign began on May 22, 2026, and continues to target developers with cleverly named packages…

https://osintsights.com/trapdoor-attack-spreads-credential-stealing-malware-across-software-ecosystems?utm_source=mastodon&utm_medium=social

#SupplyChain #CredentialstealingMalware #Trapdoor #MalwareOperations #EmergingThreats

📰 'Trapdoor' Android Ad Fraud Campaign Used 455 Malicious Apps to Hijack Millions of Devices

📱 'Trapdoor' Android ad fraud operation uncovered! 455 malicious apps on Google Play, with 24M+ downloads, generated 659M fake ad requests daily. The apps used a clever 2-stage attack to stay hidden. #Android #Malware #AdFraud #Trapdoor

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/trapdoor-android-ad-fraud-operation-hijacks-millions-of-devices/?utm_source=…

Trapdoor Android Ad Fraud Scheme Exposes 455 Malicious Apps

Meet Trapdoor, a massive Android ad fraud scheme that used 455 malicious apps to generate a staggering 659 million daily bid requests, fueling a self-sustaining machine that turned innocent installs into big bucks. This complex operation was uncovered by HUMAN's Satori Threat Intelligence and Research Team, shedding light on a pipeline for…

https://osintsights.com/trapdoor-android-ad-fraud-scheme-exposes-455-malicious-apps?utm_source=mastodon&utm_medium=social

#AndroidAdFraud #Malvertising #Trapdoor #MobileSecurity #AdFraud

They haven't read Orwell's 1984 - will they ever understand?

source: citizenlab.ca/research/analysi…

Key Findings
• #Webloc is a global #geolocation #surveillance system that monitors hundreds of millions of people based on data purchased from consumer apps and digital advertising. It was developed by Cobwebs Technologies and is now sold by its successor #Penlink.
• In collaboration with the European investigative #journalism platform #VSquare, we reveal that Hungarian domestic #intelligence has been using Webloc since at least 2022 and continues to use it as of today. Webloc customers also include the national police in El Salvador.
• U.S. customers include #ICE, the U.S. #military, #Texas Department of Public Safety, #DHS West #Virginia, #NYC district attorneys, and several #police departments in #LosAngeles, #Dallas, #Baltimore, #Tucson, #Durham and in smaller cities and counties like City of Elk Grove and Pinal County.
• Based on the responses to 96 #freedom of information requests we conclude that governments in #Europe and the U.K. are highly nontransparent about their potential use of ad-based surveillance.
• Cobwebs Technologies has links to the #spyware vendor #Quadream through Cobwebs Technologies founder Omri #Timianker, who now oversees the international operations of Penlink.
• Webloc is sold as an add-on product to the social #media and #web intelligence #system Tangles. Based on technical #analysis and other sources we show that Tangles and other products developed by #Cobwebs Technologies are used in many countries across the globe.
• We briefly investigate another Cobwebs product named #Trapdoor that appears to help trick victims into revealing information. Our analysis leads us to believe that Trapdoor can help facilitate the #deployment of #malware on devices.

#tracking #gps #mobile #monitor #usa #smartphone #app #software #internet #online #bigbrother #bigdata #orwell #dystopia #privacy #economy #politics #security #news #cybersecurity #anonymity #fail #justice #user #freedom #ethics #abuse #omg #wtf #policestate #democracy #society #maga #conspiracy #www #socialmedia #bigtech #technology #future #humanity #spy #position #map