Police seize over 100 servers linked to investment fraud with more than €4 million in losses
2026-11-03T20:51:40Z•a5c2aa557e7e2761d7909b9133b48e96db87c1fc293690e0b29abe08ef027e6b
CVE-2026-58115AI-enabled attacksAPTChina-linked threat actorsGorbagLLMjackingLinux botnetNode-REDRussia-alignedUkraineactive exploitationbackdoorscloud account compromisecybersecurity newsindustrial control systemsinvestment fraudransomware recoveryself-deleting malwarespearphishing
What happened
Help Net Security reports multiple cybersecurity developments: law enforcement dismantled an international investment-fraud network; attackers are actively exploiting the critical Node-RED authentication flaw CVE-2026-58115 to deploy Linux bots and backdoors; China-linked operators are using AI agents to scale attacks; the Gorbag Russia-aligned APT is targeting Ukrainian public-sector organizations with self-deleting malware; and criminals are abusing compromised cloud accounts for LLMjacking, causing substantial costs. Additional items cover backup scanning, external attack-surface testing,-A
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- a5c2aa557e7e2761d7909b9133b48e96db87c1fc293690e0b29abe08ef027e6b
- Enrichment time
- 2026-11-03T20:51:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.