TGTGInsighttelegram intelligenceLIVE / telegram public index
← The Hacker News
The Hacker News avatar

TGINSIGHT POST

Post #8426

@thehackernews

The Hacker News

Views8,730Post view count
PostedFeb 1702/17/2026, 12:44 PM
Post content

Post content

⚠️☠️🤖 A trojanized Oura AI connector is being used to spread SmartLoader malware. Attackers cloned the MCP server, staged fake GitHub contributors, and planted it in trusted registries. The payload drops StealC to steal credentials, wallets, and cloud access. 🔗 Read → https://thehackernews.com/2026/02/smartloader-attack-uses-trojanized-oura.html