Search results for Google Threat Intelligence Group
Crypto
Ledger CTO warns iPhone Safari exploit could steal crypto wallet data
A warning has emerged that crypto wallet information could be stolen on an iPhone simply by opening a malicious web page in Safari. Ledger Chief Technology Officer Charles Guillemet said an iOS attack chain dubbed “Darksword” is being used in real attacks and urged users to review how they store seed phrases and other sensitive wallet data. The chain is said to bypass Safari isolation through multiple vulnerabilities and may access key device data. Google said flaws were fixed by iOS 26.3.
AI & Enterprise
Google works with FBI to disrupt \'NetNut\' malicious proxy network
Google Threat Intelligence Group said on July 6 it worked with the FBI and industry partners to disrupt NetNut, one of the world’s largest malicious residential proxy networks. It said the proxy network industry is closely interconnected through operators trading botnet resources. Google estimated NetNut infected and controlled at least 2 million devices via the BadBox 2.0 botnet and trojan apps, including many smart TVs and set-top boxes.
AI & Enterprise
North Korean hackers hit Axios NPM package in supply-chain attack, millions distributed in 3 hours
North Korean hackers tampered with the Axios NPM package in a supply-chain attack that triggered millions of malicious distributions in about three hours, SecurityWeek reported. Google Threat Intelligence Group attributed the attack to UNC1069. Attackers posted backdoored Axios versions 1.14.1 and 0.30.4 to the NPM registry, designed to auto-run a malicious payload on Windows, macOS and Linux. The versions were later removed.