Hackers pull off $133 million French bank heist via service provider
2026-11-08T01:23:22Z•c2424d6aa701395a2799f01404ef1d417a6fa221e7e3912b1eb447e8ea4f3f7d
API-tokensD-LinkGitHubMFA-bypassNASOT-securityPlex2ShellQNAPSSL-VPNSonicWallactively-exploited-vulnerabilitybankingcredential-exposurecybersecurity-newsfinancial-fraudindustrial-control-systemsinfostealermalwarephishingphishing-as-a-servicesecrets-managementsocial-engineeringsupply-chain-attackzero-day
What happened
A BleepingComputer security-news feed containing reports on major cyber incidents, including a $133 million bank fraud enabled through a service provider, an actively exploited SonicWall SSL-VPN authentication bypass, attacks against QNAP NAS devices through the Plex2Shell vulnerability chain, exposed customer credentials and tokens at Chainalysis, zero-days in D-Link switches, phishing campaigns targeting Microsoft and Google accounts, malware-laced GitHub security tools, and attacks against industrial refrigeration systems.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- c2424d6aa701395a2799f01404ef1d417a6fa221e7e3912b1eb447e8ea4f3f7d
- Enrichment time
- 2026-11-08T01:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.