Keio Corporation Cyberattack Halts Hotel and Payment Systems
Japan's trains run on a reputation for being on time, and that record rarely slips. It took a hit over the weekend of September 26, when a cyberattack reached Keio Corporation and the group pulled its network offline. Ransomware had already landed on its servers. Trains kept running, but the business systems behind them went dark, and that is where
Malicious Custom GPTs Deliver RAT Malware via ClickFix
A new malware campaign starts where almost nobody thinks to check: inside a ChatGPT page. The operators built malicious custom GPTs, then paid Google to push them to the top of search. Victims trusted what they saw and followed the steps. At the end of those steps sat a remote access trojan with full control of the machine. How malicious
JadePuffer Ransomware Wipes 100+ Azure Accounts in 7 Minutes
Seven minutes was all it took to wipe more than 100 storage accounts from a single Microsoft Azure tenant. No human sat at the keyboard, because AI agents did the scouting, stole the keys, and started deleting on their own. Microsoft researchers have tied two of these break-ins to the JadePuffer ransomware operation. The ending everyone expects from a ransomware
OpenAI Always-On Assistant Could Soon Read Your Inbox
A line of text that was never meant for the public spent a short while sitting on OpenAI's website, and it named a product the company has yet to announce. The $100 ChatGPT Pro plan listed "o, your always-on assistant" among its benefits, right beside the storage and usage perks that buyers already pay for. Then it vanished. Users on
RemControl: New Android Malware Hides Inside a Fake IPTV App
A free app that promises live TV and sports streams is the kind of download many people grab without a second thought, and criminals know it. Researchers at Group-IB have found RemControl, a new strain of Android malware hiding inside a fake TVTap streaming app. Once it lands on a phone, it switches off one of Google's key defences and
Ryuk Ransomware Insider Jailed for Breaching US Companies
A member of the Ryuk ransomware operation will spend the next two years in a US federal prison. Karen Serobovich Vardanyan, a 35-year-old Armenian national, helped break into American companies and lock down their systems. He also received three years of supervised release after he pleaded guilty earlier this year. His case closes one chapter of a gang that took
ClosedQuorum Malware Lets Four AI Models Vote on Its Attacks
A new strain of Windows malware no longer waits for a hacker to tell it what to do. Researchers at Cisco Talos have found the ClosedQuorum malware, which lets four AI models vote on its next move. The panel of Gemini, DeepSeek, Qwen, and Mistral then decides if the malware steals data, digs in, or injects code. For anyone who
Google Hit With €403M GDPR Fine Over Location Tracking
Ireland's privacy regulator has handed Google a GDPR fine of €403 million over the way it tracked and stored user locations. The Data Protection Commission (DPC) found that three everyday features broke Europe's data protection rules. As a result, the tech giant now has six months to fix its practices. For Android and Google Account holders, the case raises an
Rapuncel Infostealer Hides Behind Fake LastPass GitHub Pages
A new malware campaign is turning one of the most trusted names in password security into bait. Attackers built fake GitHub pages that pose as LastPass Authenticator and dozens of other apps. Anyone who downloads from them ends up with the Rapuncel infostealer. It also brings a driver that shuts off antivirus tools before the theft begins. How Fake GitHub
RatHat Android Malware Lets AI Take Over Your Phone
A new mobile threat has handed the boring part of phone hijacking to an AI model. Researchers at Zimperium have pulled apart RatHat, an Android malware family with an unusual trick. It ships live screen data to a well known AI assistant, then asks the model where to tap next. Scripted phone trojans break when an app changes its layout,
