MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data
2026-09-30T20:51:36Z•9d1504955c5e0e075f8cfe1ac8e05c3b056a67933a69dfe6b259903814fb0a9b
Discord theftGlobal GroupMALFEXMicrosoft TitanOverlord RATWinMerge abuseauthentication flawbrowser data theftbusiness email compromisecredential theftcybercrimemalicious ISOmalware distributionnpm supply-chain attackpayment-card theftphishingransomwareuniversity email hijacking
What happened
HackRead RSS items report several cyber-threat developments, including the MALFEX campaign distributing Overlord RAT through malicious npm packages to steal Discord and browser data; Global Group ransomware using phishing, malicious ISO files, and WinMerge; Amazon Prime credential and payment-card phishing; hijacked university accounts used for impersonation scams; and an authentication flaw in Microsoft’s Titan analytics service. The feed also contains cybersecurity services, red-team, cryptocurrency, and law-enforcement news. No CVE identifiers are provided in the supplied content.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hackread
- Record identifier
- 9d1504955c5e0e075f8cfe1ac8e05c3b056a67933a69dfe6b259903814fb0a9b
- Enrichment time
- 2026-09-30T20:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.