From Stars to Upvotes: Fake Reputation Fueling a Crypto Clipboard Hijacker
2026-06-17T20:52:25Z•9e2d2afe91fc503533065c13cd45cc5d799154126526aa2557c846ec1551f44b
AI agentsGentlemen ransomwareIRGC-linkedLangGraphNimbus ManticoreRCERaaSSQLiShinyHuntersTDSVECTclick hijackingclipboard hijackercrypto theftdata breachesimpersonationmalware distributionpersistence/checkpointerransomwaresupply-chain
What happened
Check Point Research feed (May–June 2026) summarizing multiple active threats and technical research: a crypto-themed clipboard hijacker distributed via fake ‘tools/solutions’; an exploitable LangGraph checkpointer (SQLi → RCE) impacting AI memory/persistence stacks; analyses of a malware distribution ecosystem using impersonation, click‑hijacking and TDS; ongoing ransomware/RaaS activity (Gentlemen, VECT) and nation‑linked operations (Nimbus Manticore/UNC1549); and weekly threat intelligence reports documenting high‑impact breaches (ShinyHunters, Lapsus$, victims across education, healthcare,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- checkpoint_research
- Record identifier
- 9e2d2afe91fc503533065c13cd45cc5d799154126526aa2557c846ec1551f44b
- Enrichment time
- 2026-06-17T20:52:25Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.