Get live statistics and analysis of International Cyber Digest's profile on X / Twitter

‼️ Unremovable Israeli Spyware Found on Samsung Devices Samsung faces backlash over AppCloud, an Israeli-developed app pre-installed on budget Galaxy A and M series devices. Investigations reveal the app is embedded in the operating system, preventing full removal. Even when disabled, AppCloud remains on the device, reappears after updates, and can covertly install additional software.

‼️ Meet the scammer who drained a cancer patient's treatment fund, ruining many lives to drive sports cars and wear expensive watches. He is an Argentine immigrant in the US, and the OSINT nerds who found him have reported him to ICE.

‼️🇰🇵 Another North Korean hacker using AI to alter his face caught while trying to infiltrate Bitso. Meet "Sebastian," a software engineer from Colombia who can't speak Spanish. Strange, right?

‼️ China's largest cybersecurity firm, Knownsec, was breached, exposing details of China's state cyber operations. The data includes cyberweapon documentation, internal hacking tool source code, and global target lists covering over 20 countries, including Japan, Vietnam, and India. A spreadsheet lists 80 hacked foreign organizations, plus evidence of 95 GB of stolen Indian immigration data and 3 TB of call records from South Korean mobile operator LG U Plus. One of the documents mention a malicious power bank, disguised as a charging device. Knownsec is key to China's cybersecurity, providing advanced defense and offensive capabilities, including espionage tools. A thread with their tools 🧵

🚨 vx-underground reverse-engineered the malware that stole $32k donated to Rastaland for his cancer fight. They uncovered the entire infrastructure, operations, the people that fell victim, and people behind it.

🚨 Multiple cybercriminals were arrested during Operation SIMCARTEL. Europol and Latvian law enforcement dismantled five servers, seized 1,200 SIM box devices and 40,000 active SIM cards. The criminals were linked to over 1,700 cyber fraud cases in Austria and 1,500 in Latvia, causing losses of several million euros, including EUR 4.5 million in Austria and EUR 420,000 in Latvia.

‼️ Proton is cancelling journalists by blocking their mail accounts. This has huge consequences for their reputation and for all the people who thought they were safe by avoiding big tech.

🚨 The Discord breach is worse than expected! - 1.5 TB of data - Over 2 million government ID photos - Threat actor publishes some user data due to Discord's inaction Sample of a user showing her face, ID, and a written note:

‼️An Anduril engineer uploaded a hardcoded private key, hashed root passwords, and internal Anduril emails to a public repository. We sent a responsible disclosure to Anduril last year but received no reply. This company is currently operating autonomous killer drones above your head.

🚨 The friend pendant is not your friend Someone reverse-engineered the device, exposing lack of basic security: - Anyone can connect via Bluetooth and hear the microphone's recordings - Friend's audio is unencrypted. - Audio can be accessed on non onboarded devices as well

🚨 Discord Breach Update - Discord negotiated with the threat actor for two weeks, promising payment. - Discord then ceased communication. - The threat actor, now angry, is releasing files individually. Leaked tables will be posted next.

‼️ X preloads links without user clicks, raising serious cybersecurity and OPSEC concerns. Malicious code could load automatically, or your identity could be exposed to malicious actors.

❗️We’ve had multiple reports in the comments section indicating the app is present on more Samsung device types and regions than the sources tell us. This means the scope is even bigger than we thought.

❌ Vercel’s new head of security is off to a good start with all his personal information uploaded into a folder on his website.

‼️ North Korean hackers from the Chollima APT, part Lazarus, were caught. Meet Mateo and Alfredo, skilled engineers, allegedly from Mexico. But actually North Korean hackers.They were caught using AI to alter their faces and voices during a job interview. Their goal was to infiltrate Western companies, especially in crypto, Web3, and fintech, posing as software engineers for corporate espionage and financial theft.

🚨 Discord Breach Update Discord maintained a list of accounts that agents were instructed not to interact with, directing them to quietly close tickets without response. Source: NTTS

‼️ Unremovable Israeli Spyware Found on Samsung Devices Samsung faces backlash over AppCloud, an Israeli-developed app pre-installed on budget Galaxy A and M series devices. Investigations reveal the app is embedded in the operating system, preventing full removal. Even when disabled, AppCloud remains on the device, reappears after updates, and can covertly install additional software.

‼️ Meet the scammer who drained a cancer patient's treatment fund, ruining many lives to drive sports cars and wear expensive watches. He is an Argentine immigrant in the US, and the OSINT nerds who found him have reported him to ICE.

‼️ Proton is cancelling journalists by blocking their mail accounts. This has huge consequences for their reputation and for all the people who thought they were safe by avoiding big tech.

‼️ China's largest cybersecurity firm, Knownsec, was breached, exposing details of China's state cyber operations. The data includes cyberweapon documentation, internal hacking tool source code, and global target lists covering over 20 countries, including Japan, Vietnam, and India. A spreadsheet lists 80 hacked foreign organizations, plus evidence of 95 GB of stolen Indian immigration data and 3 TB of call records from South Korean mobile operator LG U Plus. One of the documents mention a malicious power bank, disguised as a charging device. Knownsec is key to China's cybersecurity, providing advanced defense and offensive capabilities, including espionage tools. A thread with their tools 🧵

🚨 BREAKING: Here's a statement from Valentin, identified by OSINT nerds as the scammer allegedly draining cancer treatment funds. Do you think he's telling the truth?

🚨 vx-underground reverse-engineered the malware that stole $32k donated to Rastaland for his cancer fight. They uncovered the entire infrastructure, operations, the people that fell victim, and people behind it.

🚨 The Discord breach is worse than expected! - 1.5 TB of data - Over 2 million government ID photos - Threat actor publishes some user data due to Discord's inaction Sample of a user showing her face, ID, and a written note:

‼️An Anduril engineer uploaded a hardcoded private key, hashed root passwords, and internal Anduril emails to a public repository. We sent a responsible disclosure to Anduril last year but received no reply. This company is currently operating autonomous killer drones above your head.

‼️🇰🇵 Another North Korean hacker using AI to alter his face caught while trying to infiltrate Bitso. Meet "Sebastian," a software engineer from Colombia who can't speak Spanish. Strange, right?

🚨 Multiple cybercriminals were arrested during Operation SIMCARTEL. Europol and Latvian law enforcement dismantled five servers, seized 1,200 SIM box devices and 40,000 active SIM cards. The criminals were linked to over 1,700 cyber fraud cases in Austria and 1,500 in Latvia, causing losses of several million euros, including EUR 4.5 million in Austria and EUR 420,000 in Latvia.

🚨 Meet Sevy aka Darya, a member of Scattered LAPSUS$ Shiny Hunters and an admin of their Telegram group. She is a Russian national living in Turkey and a drug addict who commits crimes to support her addiction.

🚨📧 This is how the npm attackers gained access to maintainer accounts and uploaded their malicious code. Can you spot what's wrong?

‼️ Meet Ryan Clifford Goldberg, a Digital Forensics and Incident Response manager at Sygnia, he is one of three insiders accused of cybercrimes. He allegedly conducted cyberattacks using ALPHV BlackCat ransomware. Goldberg and two other insiders ran ransomware operations since 2023 while employed at cybersecurity firms. After an FBI visit, Goldberg confessed. He now faces up to 50 years in prison.

🚨 The friend pendant is not your friend Someone reverse-engineered the device, exposing lack of basic security: - Anyone can connect via Bluetooth and hear the microphone's recordings - Friend's audio is unencrypted. - Audio can be accessed on non onboarded devices as well

‼️ X preloads links without user clicks, raising serious cybersecurity and OPSEC concerns. Malicious code could load automatically, or your identity could be exposed to malicious actors.

Meet the women of Conti ransomware group. 💅