Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

Apple CEO Succession
Legitimate RMM Abuse
Enterprise data retention
Agent Observability
Agentic AI Security
AI Agent Security
Open-Weight Model Competition
AI Data Center Siting
AI Subscription Pricing
Neural rendering

How this is made

Today For You My Stack Off Radar Search

other

COBALTSPIN

Rust-based routing malware that opens a reverse SOCKS5 proxy over WebSocket to tunnel traffic through boundary firewalls to financial API infrastructure.

Current clusters

security1 distinct publisher

Breeze Comet talks its way into Brazilian payment systems with a help-desk call and AnyDesk

Google Threat Intelligence and Mandiant put the Brazilian crew's route to Pix and STR at password spraying plus a fake IT support call, which means the controls that bite here are RMM allow-listing and out-of-band verification of the help desk.

Publishers:thehackernews.com

Reality

Evidence58
Adoption54
Hype gap+14
Incentives66

Confidence55

COBALTSPIN — other — Clarity Today