Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments
2026-06-18T07:24:12Z•1dd51e3a26f1b713c8d80da96510c4d9c8ba85ecea487cfbdb7ea2ae98c3fc99
ai-sdk-vulnerabilityandroid-banking-trojancisco-sd-wandefender-zero-dayfortinet-fortisandboxgoogle-vertex-aijetbrains-malicious-pluginsjoomla-jcelitellm-vulnerabilitymalicious-browser-extensionsmicrosoft-365-copilot-exfiltrationnarwhalratnpm-compromisepersistence-tailscale-opensshsprysocks-backdoorsupply-chainwordPress-backdoor
What happened
Multiple high-impact threats and supply-chain incidents were reported across diverse targets. Highlights include Microsoft confirming a Defender privilege-escalation zero-day (RoguePlanet, CVE-2026-50656), CISA adding a maximum-severity Joomla JCE flaw (CVE-2026-48907, CVSS 10.0) to the KEV catalog, active exploitation of multiple FortiSandbox flaws (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089), and Cisco SD‑WAN Manager remediation for an actively exploited web‑UI flaw (CVE-2026-20262). Significant supply-chain and credential-theft activity was observed: 144 Mastra npm packages were backdoO
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 1dd51e3a26f1b713c8d80da96510c4d9c8ba85ecea487cfbdb7ea2ae98c3fc99
- Enrichment time
- 2026-06-18T07:24:12Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.