ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd)
2026-07-02T07:24:11Z•0760b1d05cea708b3215ceb5a3f5141f4e075637ca61e5d7e602de4339c81ca7
MITRE-T1036MetaMaskapple-patchautomated-cybercrimecredential-theftcryptocurrencyfavicon.icohost-reconisc-stormcastlinuxmalware-obfuscationpentestphishingprocess-masqueradingsecurity-updatesthreat-actor-velvet-antyarayara-x
What happened
ISC Diary roundup (Jun 24–Jul 2, 2026): Multiple short entries including a phishing campaign targeting MetaMask cryptocurrency users (credential-theft lure questioning use of “secret codes”), Apple June 2026 security updates for iOS/iPadOS/macOS and Safari, YARA-X 1.18.0 and 1.19.0 releases (features and bugfixes), automation techniques for host reconnaissance using favicon.ico, a guest diary on automated cybercrime, and an analysis of Linux process name masquerading (MITRE T1036) used by threat actors (example: Velvet Ant). Several ISC Stormcast podcast notices were also published.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 0760b1d05cea708b3215ceb5a3f5141f4e075637ca61e5d7e602de4339c81ca7
- Enrichment time
- 2026-07-02T07:24:11Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.