Why Ask Credentials If There Are Secret Codes?, (Wed, Jul 1st)
2026-07-01T19:23:44Z•ad75b551832146bfe51d82a61766f0036071b17c875473da5589e126cf1f7ea3
apple-updatescredential-harvestingcrypto-wallethost-reconmalware-obfuscationmetamaskmitre-t1036patchingpentestingphishingprocess-masqueradingsocial-engineeringthreat-intelyara-x
What happened
The feed contains multiple ISC diary posts: a fresh phishing campaign targeting MetaMask cryptocurrency wallets that solicits user credentials and “secret codes” (credential-harvesting social engineering with potential direct loss of funds; follow-up to a February campaign); Apple released June 2026 updates for iOS/iPadOS/macOS and Safari (patching note); YARA-X 1.18.0 and 1.19.0 were released (tool improvements/bugfixes); a technical write-up on Linux process name masquerading (malware obfuscation, MITRE T1036) and discussion of host reconnaissance automation using favicon.ico. No CVEs are 직접
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- ad75b551832146bfe51d82a61766f0036071b17c875473da5589e126cf1f7ea3
- Enrichment time
- 2026-07-01T19:23:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.