28th September – Threat Intelligence Report

2026-09-28T20:52:18Z•9ee1c082168babd98503f394a687884d4ba57d6798d5240761cc6adee46d49c3
AI-securityChatGPTClickFixEarth-BerberokaJSCealLLM-securityLinux-malwareMicrosoft-DefenderPowerShellSEO-poisoningShinyHuntersVPN-exploitationWordPress-compromisecross-account-data-leakagecryptocurrency-stealerdata-breachkernel-driver-abuseprompt-injectionransomwarethreat-intelligence

What happened

Check Point Research’s September 2026 feed covers major breaches and threat activity, including ShinyHunters’ FBIjobs.gov defacement and alleged data theft, exploitation of a VPN appliance affecting Japan’s Digital Agency, AI-assisted attacks and prompt-injection techniques, cross-account data leakage in ChatGPT sandboxes, Earth Berberoka-linked compromises of Brazilian government sites, the JSCeal cryptocurrency stealer, abuse of Microsoft Defender’s signed remediation driver for kernel-level file and registry operations, StopAndProtect ransomware campaigns using ClickFix and PowerShell, and

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
checkpoint_research
Record identifier
9ee1c082168babd98503f394a687884d4ba57d6798d5240761cc6adee46d49c3
Enrichment time
2026-09-28T20:52:18Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · 28th September – Threat Intelligence Report · Baitaphish