Post #8771

Another Thursday, another avalanche. 🦠 Hybrid botnet, 125K/day 🔓 13-yr Apache RCE, still live 💸 $17.7B lost to fraud in 2025 🌊 8M DDoS hits, H2 2025 📸 Meta insider, 30K stolen photos 🎭 BPOs hijacked, enterprises breached 🛒 SVG skimmer, 99 Magento stores 🙂 Emojis beating security filters 🐀 ClickFix → Node.js RAT, in-memory 🍎 ClickFix → macOS via AppleScript 🤖 PyPI package stealing AI prompts 🏭 5K+ Rockwell PLCs, wide open 💀 Claude Code leak → stealer wave 👾 Remus = Lumma's 64-bit ghost ⚖️ Anthropic's risk label stands 📋 Fake Proxifier → clipboard clipper 📧 GitHub & Jira flipped for phishing 🔑 Linux SMB3 leaks AES keys 🧠CLAUDE.md → prompt injection 👻 GrafanaGhost, silent data exfil 💳 LSPosed = Android payment fraud 🔗 Read more → https://thehackernews.com/2026/04/threatsday-bulletin-hybrid-p2p-botnet.html