allegationSaid on 2026-11-06
Fake versions of tools such as ChatGPT and Claude were used to steal users' login information and session cookies.
A allegation by intsec, said on 2026-11-06. Statements are as reported by the cited publishers — not verified by DecisionGateway.
در کنار آن، نسخههای جعلی ابزارهایی مثل ChatGPT و Claude برای سرقت اطلاعات ورود و کوکیهای نشست کاربران به کار گرفته شدند.
Related claims
In three of these campaigns, the common point was abuse of Microsoft's Device Code Authentication, a method by which an attacker, by deceiving the user, can gain access to their Microsoft 365 account without stealing a password and even while directly bypassing MFA.intsec · allegationBinance said that to penetrate the system, the hackers used a fake job interview and the company's internal AI tool.Binance · statementAccording to available information, some profiteers separate chips from fuel smart cards and install them on SIM card bodies to misuse these chips for fueling operations.شرکت ملی پخش فرآوردههای نفتی ایران · allegationThe accused deceived 10 to 15 people in several provinces using forged cheques.فرمانده انتظامی کردستان · allegationFor security teams, the message of this report is clear: merely protecting passwords and endpoints is not enough; control of authentication processes, active sessions, and changes to defensive tool settings must also be taken seriously.intsec · statementHackers moved billions stolen from Binance.gulfnewsuae · statement
More claims by intsec
The rumor of a cyber attack on the capital's electricity network is rejected.denialA news report was published claiming that cyber attacks on Tehran's electricity network had begun.statementThe full RedShell article examines all five campaigns and countermeasures against them.statementFor security teams, the message of this report is clear: merely protecting passwords and endpoints is not enough; control of authentication processes, active sessions, and changes to defensive tool settings must also be taken seriously.statementWKLP malware, by manipulating Microsoft Defender settings, stopping security processes, and stealing information, provides the attacker with the ability to persist on the system.allegation
All claims by intsec