Trellix found a criminal AI service, MessiahGPT, selling on BreachForums for as little as $8 a month, generating ransomware, phishing kits and rootkits on demand with no ethical guardrails claimed by its operator, and no coding skill required.
Category: Threats
Post
Shipping Data Leaks at Trezor and SafePal Expose Hardware Wallet Buyers to Theft and Phishing
Breaches at Trezor's shipping partner and SafePal's order system exposed tens of thousands of customers' names and home addresses, not crypto keys. Researchers warn the leaked data fuels both phishing and rising physical wrench attack risk.
Post
UK Prime Minister Andy Burnham Duped by Impersonator Posing as Trump’s Chief of Staff
British Prime Minister Andy Burnham exchanged messages with someone impersonating White House Chief of Staff Susie Wiles before growing suspicious, prompting the UK embassy to alert the White House. The incident echoes a wider pattern of AI-enabled impersonation targeting senior officials.
Post
Shell Investigates Data Breach as Cl0p Claims 89GB Theft, Names Nearly 50 Companies
Cl0p's extortion gang claims to have stolen 89 gigabytes of engineering data from Shell and listed nearly 50 companies, including Philips and GE, on its leak site. The likely entry point: a critical, patched flaw in PTC Windchill and FlexPLM.
Post
Trezor Warns of Phishing Risk After ShipMonk Breach Exposes 14,000 Customers’ Data
Trezor says a breach at its shipping partner ShipMonk exposed contact details for nearly 14,000 customers via a Metabase zero-day, and is warning that the leaked names, emails and addresses raise the risk of convincing phishing attacks impersonating Trezor, banks and exchanges.