@HackRead

The Twitter account of the most reliable cybersecurity news platform brings exclusive dark web, tech, hacking news, and much more. Contact: [email protected].

 United Kingdom
hackread.com
Joined November 2011
  • Tweets34.5K
  • Following106
  • Followers114K
4.2KMedia
⚠️📢 Placeholder domains referenced across 359,000 GitHub files and 349 AI agent skills were found redirecting some visitors to cloaked scams, including fake security alerts and investment schemes. Listen/Read: hackread.com/placeholder-dom… #AIAgents #Cybersecurity #GitHub #Scams

Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams

Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam redirects observed on macOS.

hackread.com
3
7
1,898
ShinyHunters is back, exploiting Oracle PeopleSoft, using URL encoding to bypass WAF rules on unpatched systems before deploying web shells and the SIDEEYE backdoor. Listen/Read: hackread.com/shinyhunters-by… #ShinyHunters #PeopleSoft #Oracle #Cybersecurity #WAF #CyberAttack

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.

hackread.com
1
6
1,647
⚠️📡📶🌐 Your phone could connect to a rogue 5G cell without a tap or warning. Researchers tested 5G-Shark on real devices, collecting identifiers and disrupting service without jamming mobile networks. Listen/Read: hackread.com/5g-shark-phones… #5G #Cybersecurity #Privacy

5G-Shark Lures Phones to Rogue 5G Cells Without Network Jamming

Researchers developed 5G-Shark to lure phones onto rogue base stations, collect subscriber IDs, force network downgrades and trigger service disruptions.

hackread.com
2
1
6
1,569
⚠️📢 Attackers modified files from legitimate audio software to hide and launch #SectopRAT. The malware steal passwords, cookies, card details and crypto data while giving attackers remote control of the PC. Listen/Read: hackread.com/sectoprat-abuse… #Windows #Malware #Cybersecurity

SectopRAT Abuses Legitimate Audio Software Files to Steal PC Data

FortiGuard found SectopRAT hidden in modified audio software files, using staged loading to steal browser data and remotely control infected Windows PCs.

hackread.com
2
8
1,411
Hackread.com retweeted
Hackread.com@HackRead
Sep 25
⚠️📢 Just In: Attackers stole $351.6M from Bitget, forcing the exchange to suspend withdrawals. The company suspects North Korea’s Lazarus Group is behind the hack after breaching its servers. Listen/Read: hackread.com/bitget-hack-sus… #Bitget #Crypto #Lazarus #Cybersecurity #Bitcoin

Bitget Confirms $351.6 Million Hack, Suspects North Korea’s Lazarus Group

Bitget confirms a $351.6 million theft, suspends withdrawals and says North Korea's Lazarus Group may be involved as investigators examine the breach in detail.

hackread.com
2
4
1,664
⚠️📢 Just In: Attackers stole $351.6M from Bitget, forcing the exchange to suspend withdrawals. The company suspects North Korea’s Lazarus Group is behind the hack after breaching its servers. Listen/Read: hackread.com/bitget-hack-sus… #Bitget #Crypto #Lazarus #Cybersecurity #Bitcoin

Bitget Confirms $351.6 Million Hack, Suspects North Korea’s Lazarus Group

Bitget confirms a $351.6 million theft, suspends withdrawals and says North Korea's Lazarus Group may be involved as investigators examine the breach in detail.

hackread.com
2
4
1,664
An OpenAI agent breached an Australian Medicare statistics portal. After its requests were blocked, it found another way in and accessed non-public files. Listen/Read: hackread.com/openai-agent-br… #OpenAI #Cybersecurity #Medicare #Australia

OpenAI Agent Breached Australian Medicare Statistics Portal

An OpenAI agent bypassed controls on Australia's Medicare statistics portal, accessed non-public data and was not reported to officials for nearly 3 months.

hackread.com
1
4
1,468
Microsoft’s password reset page can tell attackers more than it should, including which accounts exist, their recovery methods and, in some cases, which users may be administrators. Listen/Read: hackread.com/microsoft-passw… #Microsoft #Cybersecurity #AccountSecurity #Phishing

Microsoft Password Reset Portal Can Leak Account Verification Details

LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication.

hackread.com
1
4
1,531
Another day, another Windows malware - A fake DocuSign page tells victims to paste a command into their computer, quietly opening the door to AvisLoader malware. Listen/Read: hackread.com/avisloader-wind… #Cybersecurity #Malware #ClickFix #AvisLoader #Scam

New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2

Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through a malicious ClickFix lure.

hackread.com
3
1,375
For about $25 per target, open-source AI agents scanned companies, exploited flaws, installed skimmers and destroyed database tables. At least 27 companies were breached and 600K credit card records stolen. More: hackread.com/open-source-ai-… #Cybersecurity #AIAgents #DataBreach

Open-Source AI Agents Breach 27 Companies, Steal 600,000 Credit Card Records

Gambit Security found AI agents breached 27 companies, stole 600,000 credit card records and installed payment skimmers across compromised retail sites.

hackread.com
1
1
5
1,487
EvilTokens turned stolen inboxes into AI-assisted fraud operations Microsoft has now seized 50 websites and disabled over 150 related domains, while 2 have been arrested. Listen/Read: hackread.com/microsoft-disru… #EvilTokens #Microsoft #Phishing #Cybercrime #Cybersecurity

Microsoft Disrupts AI-Powered EvilTokens Service Linked to 12,000 Hacked Inboxes

Microsoft disrupted EvilTokens after the AI-powered phishing service compromised 12,000 inboxes across 10,000 organisations and enabled complex financial fraud.

hackread.com
6
1,273
ShinyHunters defaced the official FBI Jobs portal and claims it obtained sensitive data on FBI agents, along with people who applied for jobs at the bureau. Listen/Read: hackread.com/shinyhunters-ha… #FBI #ShinyHunters #Cybersecurity #DataBreach #Cybercrime #Hacking

ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents' Data

ShinyHunters hacks the FBI Jobs portal and claims sensitive data on nearly all FBI agents and job applicants before the site is taken offline for security work.

hackread.com
1
3
10
1,963
#RatHat is not your typical Android malware. It uses generative #AI to navigate infected devices in real time, steal banking credentials, and intercept OTP codes, and can even reinstall itself after removal. Listen/Read: hackread.com/rathat-android-… #Cybersecurity #Android #Malware

RatHat Android Malware Uses AI to Target Banking Credentials in Real Time

RatHat Android malware uses generative AI to navigate infected devices, steal banking credentials, intercept OTP codes and reinstall itself after removal again.

hackread.com
6
1,370
Watch out: MovieReaper is infecting users through compromised torrents disguised as "The Odyssey", with Kaspersky identifying several hundred victims across multiple countries. Listen/Read: hackread.com/moviereaper-mal… #Cybersecurity #MovieReaper #Malware #Torrents #TheOdyssey

MovieReaper Malware Uses The Odyssey Torrents to Infect Users Worldwide

MovieReaper malware spreads through compromised Odyssey torrents, infecting hundreds of victims while using Solana to locate command-and-control infrastructure.

hackread.com
2
6
1,636
The TASK#STOMP backdoor is designed to steal business documents, monitor for new or modified files, and maintain attackers' access to infected Windows systems. Listen/Read: hackread.com/taskstomp-windo… #Cybersecurity #Malware #TASKSTOMP #Windows

New TASK#STOMP Windows Backdoor Enables Continuous Document Theft

TASK#STOMP Windows backdoor uses PowerShell, scheduled tasks and runtime C# compilation to steal business documents and maintain remote access.

hackread.com
7
1,502
Clop has resurfaced on its own onion site with a message for ShinyHunters after the group hijacked its leak site and demanded an eight-figure payment, interest and a public apology. Listen/Read: hackread.com/clop-ransomware… #Cybersecurity #Clop #ShinyHunters #Ransomware #Cybercrime

Clop Ransomware Responds to ShinyHunters Amid Eight-Figure Demands

Clop responds to ShinyHunters after its leak site takeover as the group demands an eight-figure payment, interest and a public apology in their escalating feud.

hackread.com
1
9
3
92
7,480
China-linked FamousSparrow is targeting government organizations across Latin America with SparroWocky, a new C++ backdoor built for espionage and stealth. Listen/Read: hackread.com/china-famousspa… #Cybersecurity #FamousSparrow #SparroWocky #Malware #China #LatinAmerica

China-Linked FamousSparrow Deploys SparroWocky Backdoor in Latin America

FamousSparrow is targeting Latin American governments with SparroWocky, a new C++ backdoor that exfiltrates files, takes screenshots and evades security tools.

hackread.com
6
1,877
Fake Spotify, Zoom and Teams installers are being used in ClickFix attacks to spread ChainScript, a Node.js RAT that uses Polygon smart contracts to locate its C2 server. Listen/Read: hackread.com/clickfix-chains… #Cybersecurity #Malware #ClickFix #ChainScript #NodeJS #Polygon

ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

hackread.com
5
12
2,151
ShinyHunters hacked and defaced Clop's ransomware leak site, replacing its content with ShinyHunters branding as its own onion site goes offline. Listen/Read: hackread.com/shinyhunters-ha… #CyberSecurity #CyberCrime #ShinyHunters #Cl0p #Ransomware

ShinyHunters Hacks and Defaces Clop Ransomware Leak Site

ShinyHunters hacked and defaced Clop's ransomware leak site, replacing its content with ShinyHunters branding as its own onion site goes offline.

hackread.com
1
2
25
3,396
⚠️📢🪝Revolut customers are receiving phishing texts featuring a fake video identity check and password request, days after sensitive customer data was exposed. Listen/Read: hackread.com/revolut-custome… #Revolut #Phishing #Cybersecurity #DataBreach #Scam

Revolut Customers Targeted by Phishing Campaign After Data Breach

Revolut customers are being targeted with phishing texts days after a social engineering attack exposed sensitive customer data, including IDs and selfies.

hackread.com
4
1,910
Load more