Polymarket Script Hijack Drained Wallets; Refund Plan Reaches $3.9M
Polymarket says a compromised monitoring script abused active sessions. Its October 30 update separates stolen funds from trading-pause compensation.
Searchjacked: Hidden Chrome Extensions Put a Proxy Between You and Search
Socket traces 319 extensions across a decade. See how a simple search setting routes queries through a proxy, and what to check in Chrome.
VOLTA Stealer Asks AI to Rank Victims Using Stolen Receipts and Sessions
Talos finds VOLTA turning stolen sessions and receipts into an AI-ranked dossier. What its harvest log means and why account recovery goes beyond deleting a file.
Claude Code in Cursor Planted an SSH Backdoor That Outlives Uninstall
Tampered Claude Code builds in Cursor’s marketplace planted SSH keys and startup scripts. Check versions 2.1.312/2.1.313 and the traces uninstalling leaves behind.
VBCSCompiler.exe: High CPU, Safe Shutdown, or Suspicious Copy?
VBCSCompiler.exe is usually a legitimate compiler server. Check high CPU, stop the right build server safely, and investigate an unexplained copy.
Binance Hack: $6.3B Theft Exposes Questions About Signing Access
Binance says losses will be covered after a $6.3 billion theft. Investigators trace signing access, repeated wallet sweeps and the race to freeze stolen assets.
Synology NAS Ransomware Locks Files as Sources Disagree on Entry
Synology warns of ransomware on outdated DSM. A 360 report identifies C3RB3R, but cites different flaws. What to patch, preserve and check before recovery.
QuickBooks Phishing Uses Callback Traps and Invisible Tracking
Infoblox traced more than 350 QuickBooks-lookalike domains to callback phishing. A hidden pixel identifies recipients; separate installers carry malware.
Fake Cloudflare Check Sends Windows and Mac Users to Run Commands
A fresh ClickFix lure uses Run on Windows and Terminal on Mac. SANS captured both traps, but failed downloads left the final malware unidentified.
Keystone Stolen Key Could Let Fake Wallets Pass Verification
Keystone will destroy 18,835 unsold wallets after its device-check key was stolen. Why a passing test is insufficient for some deliveries, and what owners should do.
Fake 6,500 UAH Aid Offers Led to Bank-Account Theft
Ukrainian police describe how a fake aid offer collected card secrets and bank codes. Learn the handoff behind the case and what to do if you entered details.
Malware in Windows.old: What an Antivirus Detection Means
Found malware in Windows.old after reinstalling? Check the alert, scan the current system, save needed files, and remove the old installation safely.
