hacker-news Sep 3, 2026 · Crawled Sep 4, 2026

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

6 IoCs 1 Actors 1 Malware

AI Summary

Multiple threat campaigns are leveraging social engineering, phishing-as-a-service (PhaaS), and abuse of trusted software to gain unauthorized access to corporate and personal accounts. Microsoft Teams is being abused in vishing attacks to trick users into granting remote access via RMM tools, while PhaaS platforms like Outsider and BlueKit enable credential theft through browser-in-the-middle attacks. Malicious actors are also exploiting misconfigurations in AI instruction files (llms.txt) to deliver malicious packages, and trojanized Electron apps are distributing the RevStealer information stealer. Additionally, attackers are abusing legitimate tools like Faronics Deploy and ScreenConnect to establish persistent remote access, and ransomware operations such as The Gentlemen and CRPx0 continue to target organizations with sophisticated, multi-stage attack chains.

AI-extracted · verify before operational use

Extracted Entities 2 found

Threat Actor Infy → Malware Tonnerre →

Indicators of Compromise 6 extracted

Type	Value	Detail
Domain	crpx0[.]su	Details →
Domain	www[.]mxsetuplogi[.]com	Details →
Filename	llms.txt	Details →
Filename	llms-full.txt	Details →
Package	clerk-next-fix-auth-protection	Details →
Package	@clerk/eslint-plugin	Details →

MITRE ATT&CK TTPs 15 techniques

T1059.001 PowerShell · Execution T1078 Valid Accounts · Defense Evasion T1090 Proxy · Command And Control T1105 Ingress Tool Transfer · Command And Control T1129 Shared Modules · Execution T1133 External Remote Services · Persistence T1190 Exploit Public-Facing Application · Initial Access T1202 Indirect Command Execution · Defense Evasion T1212 Exploitation for Credential Access · Credential Access T1485 Data Destruction · Impact T1558 Steal or Forge Kerberos Tickets · Credential Access T1566 Phishing · Initial Access T1570 Lateral Tool Transfer · Lateral Movement T1588 Obtain Capabilities · Resource Development T1647 Plist File Modification · Defense Evasion