Email compromise that wiped half a billion $

6 hours ago

TripleX ransomware group breached Bank of Baroda via a compromised employee email account, exfiltrating 1 TB of sensitive data.
The leaked data includes customer PII (Aadhaar, PAN, photos), financial records, audit reports, and loan documents, posing identity theft risks.
The attack likely involved phishing, MFA bypass (e.g., AiTM phishing), OAuth abuse, or endpoint compromise, exploiting excessive permissions.
Five technical scenarios explain how a single mailbox led to massive data exfiltration, including session token theft and cloud collaboration pivoting.
TripleX operates as a data-extortion collective, not traditional ransomware, publicly leaking data for ideological and financial motives.
The group previously targeted PT Bank Negara Indonesia, indicating a pattern of preying on large financial institutions.
Post-breach, Android banking malware and phishing campaigns were observed, exploiting the breach for follow-on attacks.
TripleX's motives include retaliatory extortion, underground market monetization, brand elevation, and potential stock market manipulation.
The incident highlights a shift toward identity-based attacks that bypass traditional email security, requiring continuous evaluation of user behavior and context.

A hacker breached Romania's cadastre agency, wiping the entire land registry database after a failed extortion attempt, halting the real-estate market.
Hugging Face was hacked using an autonomous AI agent, stealing internal datasets and cloud credentials, while guardrails hindered their response analysis.
A critical WordPress vulnerability (CVE-2026-63030, wp2shell) allows remote unauthenticated attackers to execute code, affecting versions since last December.

FBI issued a FLASH alert about the TeamPCP criminal group on July 2, 2026, detailing its large-scale software supply chain attacks targeting developer and security tools to steal credentials.
TeamPCP compromised tools including Trivy, KICS, LiteLLM, and Telnyx Python SDK by injecting malicious code into legitimate packages, which were then distributed through normal channels and pulled into CI/CD pipelines.
The group deployed four malware families: CanisterWorm, SANDCLOCK, Mini Shai-Hulud, and Miasma, harvesting cloud tokens, API keys, Kubernetes secrets, and cryptocurrency data, with worms spreading autonomously across npm and PyPI registries.

The author describes a targeted fake-interview scam that attempted to backdoor their machine through a TypeScript repository named 'Ticket Harbor'.
The attack used a malicious patch file (typescript+5.9.2.patch) containing a base64-blob that injected a RAT (PinpinRAT) into the system upon running typecheck or build commands.
The malware employed multiple obfuscation layers, including XOR decryption and WASM stubs, to evade detection and executed a remote-access trojan with capabilities like file exfiltration and arbitrary command execution.

Unauthorized access to internal datasets and credentials occurred, with ongoing assessment of potential impact on partners and customers.
The intrusion exploited vulnerabilities in the data-processing pipeline via a malicious dataset, leading to node-level access and lateral movement within internal clusters.
An autonomous agent framework executed thousands of actions across sandboxes, matching industry-predicted 'agentic attacker' scenarios.

Hugging Face disclosed a hack compromising internal datasets and service credentials.
Attackers exploited a vulnerability via a malicious dataset to escalate permissions and access internal systems.
Stolen credentials have been revoked and rotated; users advised to review their accounts.

A hacker breached Romania's cadastre agency, wiping the entire land registry database after a failed extortion attempt, halting the real-estate market.
Hugging Face was hacked using an autonomous AI agent, stealing internal datasets and cloud credentials, while guardrails hindered their response analysis.
A critical WordPress vulnerability (CVE-2026-63030, wp2shell) allows remote unauthenticated attackers to execute code, affecting versions since last December.

FBI issued a FLASH alert about the TeamPCP criminal group on July 2, 2026, detailing its large-scale software supply chain attacks targeting developer and security tools to steal credentials.
TeamPCP compromised tools including Trivy, KICS, LiteLLM, and Telnyx Python SDK by injecting malicious code into legitimate packages, which were then distributed through normal channels and pulled into CI/CD pipelines.
The group deployed four malware families: CanisterWorm, SANDCLOCK, Mini Shai-Hulud, and Miasma, harvesting cloud tokens, API keys, Kubernetes secrets, and cryptocurrency data, with worms spreading autonomously across npm and PyPI registries.

The author describes a targeted fake-interview scam that attempted to backdoor their machine through a TypeScript repository named 'Ticket Harbor'.
The attack used a malicious patch file (typescript+5.9.2.patch) containing a base64-blob that injected a RAT (PinpinRAT) into the system upon running typecheck or build commands.
The malware employed multiple obfuscation layers, including XOR decryption and WASM stubs, to evade detection and executed a remote-access trojan with capabilities like file exfiltration and arbitrary command execution.

Unauthorized access to internal datasets and credentials occurred, with ongoing assessment of potential impact on partners and customers.
The intrusion exploited vulnerabilities in the data-processing pipeline via a malicious dataset, leading to node-level access and lateral movement within internal clusters.
An autonomous agent framework executed thousands of actions across sandboxes, matching industry-predicted 'agentic attacker' scenarios.

Hugging Face disclosed a hack compromising internal datasets and service credentials.
Attackers exploited a vulnerability via a malicious dataset to escalate permissions and access internal systems.
Stolen credentials have been revoked and rotated; users advised to review their accounts.

Hasty Briefsbeta