browser data theft
-
Salesforce disables Klue app after data theft incident
Salesforce disabled the Klue Battlecards app after a June 11 security incident at Klue that may have exposed customer data through connected accounts. Klue said legacy credentials were used to steal OAuth tokens.
-
Silent Ransom Group targets U.S. law firms in fake IT support calls
The Silent Ransom Group is targeting U.S. law firms and professional services firms with fake IT support calls that can lead to data theft within hours, according to a Mandiant technical analysis.
-
FBI warns Silent Ransom Group is targeting US law firms in in-person data theft attacks
The FBI warned that Silent Ransom Group is targeting U.S. law firms with phishing, callback scams and, if needed, in-person access to steal data. The gang may use remote tools or connect external drives to victim computers.
-
MuddyWater campaign hit at least nine organizations across four continents, researchers say
MuddyWater was linked to a 2026 campaign that hit at least nine organizations in nine countries. Researchers said the group used DLL side loading, signed binaries and browser-stealing malware to support espionage.
