#abused


Hackers abused Claude to extract secrets from 1.8M Android apps

Sep 12, 2026 // 01:36

Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its Claude AI model […]

Google Play Early Access Abused to Push Thousands of Deceptive Android Apps

Sep 10, 2026 // 17:39

Bad actors are misusing Google Play’s Early Access program to push deceptive apps that claim to offer money, rewards, casino winnings, and premium content. Early […]

Google Gemini CLI abused as a hacking agent, malware botnet operator

Jul 15, 2026 // 23:17

A Russian-speaking threat actor known as “bandcampro” used Google’s open-source Gemini CLI AI tool as a hacking agent and to operate a small-scale botnet. The […]

Order-tracking app Shop abused to push callback phishing attacks

Jun 25, 2026 // 23:37

Threat actors are increasingly abusing Shop, the order-tracking app from Shopify, by adding fake purchase receipts in users’ order histories to trick them into providing […]

Steam Workshop abused to spread malware via Wallpaper Engine app

Jun 16, 2026 // 21:37

Threat actors are abusing Steam Workshop, Valve’s community hub for downloading game-related content, to push various malware hidden in wallpaper packages. Infected wallpapers can lead […]

GhostTree Attack Abused Recursive Windows Junctions to Hide Malware

Jun 16, 2026 // 17:37

Most security teams think of NTFS junctions and symbolic links as niche file system features. They let one directory point to another, like a shortcut […]

Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails

Jun 15, 2026 // 22:49

A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, quietly stealing sensitive research and defense […]

Maine breach portal abused to publish fake data breach disclosures

Jun 12, 2026 // 01:57

In an unusual misinformation campaign, fraudulent data breach disclosures were submitted to Maine’s official breach portal and publicly posted before their legitimacy could be verified, […]

Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT

Jun 3, 2026 // 19:34

Cybersecurity researchers have flagged a new malspam campaign that makes use of Google’s DoubleClick domain as a way to evade detection and ultimately deliver a […]

Instagram users locked out after Meta AI abused to steal accounts

Jun 2, 2026 // 18:56

Multiple Instagram users had their accounts hijacked after attackers convinced Meta’s AI-powered support tools that they were the legitimate owners. In many cases, impacted users […]

1 2 3 Next