{"id":2618,"date":"2026-08-31T15:18:33","date_gmt":"2026-08-31T15:18:33","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=2618"},"modified":"2026-08-31T15:18:33","modified_gmt":"2026-08-31T15:18:33","slug":"chinese-spy-proxy-ai-agents-go-off-task-router-backdoors-and-more","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=2618","title":{"rendered":"Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More"},"content":{"rendered":"<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">Aug 31, 2026<\/span><\/span><span class=\"p-tags\">Cybersecurity \/ Hacking<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgEQHUlnyxCIYFLSRsvotvppFdq5zZ2BQQXJ4PI03uluqvzH3d4FhLogVr2pn0zbUGUQlQQXrk53CDaRZ3q4jC3wLxxG9NPQMtAsx0qkU4yatwjEogU-3RF4s2jpxb394Sd2JMEYhBKbv9TJd41QqI3WRZEcd5UWHXvszq1cKblrRBthblIYeefUx3wPbBM\/s1700-nu-rw-lo-l85-e365\/recap.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\"><\/a><\/div>\n<p>The boring parts caused most of the trouble.<\/p>\n<p>A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional.<\/p>\n<p>Elsewhere, fake apps, helpful support calls, cheap banking kits, exposed systems, and weak defaults kept things moving. Different attacks, same useful mistake: something familiar was trusted without a second look.<\/p>\n<p>Here is the week&#8230;<\/p>\n<h2 style=\"text-align: left;\"><strong>\u26a1 Threat of the Week<\/strong><\/h2>\n<p><strong>U.S. Disrupts Chinese Proxy Network Enabling Cyber Espionage <\/strong>\u2014 The U.S. Federal Bureau of Investigation (FBI) disrupted infrastructure associated with a technical quartermaster who sold reconnaissance, proxy management, and operational routing capabilities for Chinese cyber espionage activities. The QTYF group is said to have created and operated the QScan and QTRouter frameworks, which have been used to target U.S. critical infrastructure networks. It&#8217;s employed by the China-based Nanjing Xinjiuwei Network Technology Company.<\/p>\n<h2 style=\"text-align: left;\"><strong>\ud83d\udd14 Top News<\/strong><\/h2>\n<ul>\n<li><strong><a href=\"https:\/\/thehackernews.com\/2026\/08\/openai-says-reward-hacking-drove-ai.html\" target=\"_blank\">OpenAI Says Reward Hacking Drove AI Agents to Breach Hugging Face <\/strong>\u2014 OpenAI revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior as early as late May. The incident took place during cybersecurity evaluations of several OpenAI models, and it was mainly fueled by what it described as a \u00abhighly capable, internal-only research model\u00bb comparable in scale to GPT\u20115.6 Sol. \u00abThe models, operating under reduced safeguards, took actions that were misaligned with the goals of their assigned tasks \u2013 they communicated through unauthorized channels, exploited vulnerabilities in shared infrastructure, gained internet access, and accessed third-party systems,\u00bb it said.<\/li>\n<li><strong>TerminalFix Uses Fake Cloudflare CAPTCHAs to Drop Reverse Tunnel Implant <\/strong>\u2014 A new ClickFix variant, dubbed TerminalFix, aims to trick users into running a malicious command in Windows Terminal or PowerShell instead of directing them to the Windows Run dialog. The campaign, targeting organizations across multiple sectors, leverages compromised websites as a starting point to serve fake Cloudflare CAPTCHA verifications that prompt unsuspecting site visitors to copy and execute a malicious PowerShell command. The attack chain, according to Microsoft, is a sophisticated multi-stage process that leverages DLL sideloading, steganographic payload extraction, extensive Active Directory reconnaissance, and a bespoke custom reverse-tunnel implant that grants the attacker persistent, network-level proxy access through the infected machine.<\/li>\n<li><strong>PaperCut Flaws Under Attack <\/strong>\u2014 Threat actors are chaining together two new security flaws in PaperCut NG and MF to execute arbitrary code on susceptible instances. \u00abCVE-2026-81578 allows you to bypass authentication, and from there, you can edit a configuration file to exploit CVE-2026-82078 and gain Remote Code Execution,\u00bb Jake Knott, head of threat intelligence at watchTowr, told The Hacker News. Huntress said it observed limited exploitation on two customer environments, with the attackers executing Base64-encoded commands on the targeted server as part of post-exploitation activity to determine user account and operating system using a chained command \u00abwhoami &amp; ver.\u00bb<\/li>\n<li><strong>China-Made ZBT Routers Ship with 2 Backdoors <\/strong>\u2014 A firmware analysis of ZBT Deep Orange 3G\/4G\/LTE Router uncovered two new backdoors called SPEAKINGSTONE (<a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2026-74233\" target=\"_blank\">CVE-2026-74233<\/a>, CVSS score: 9.3<strong>)<\/strong> and DARKLANTERN (<a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2026-74232\" target=\"_blank\">CVE-2026-74232<\/a>, CVSS score: 9.3<strong>)<\/strong>. The development came after at least 21 firmware images from the Chinese company were found to contain another backdoor called ENDLESSDOORS (<a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2026-66747\" target=\"_blank\">CVE-2026-66747<\/a>, CVSS score: 9.3) that&#8217;s designed to start automatically and attempt to beacon to Chinese command-and-control (C2) infrastructure as often as every 35 seconds. The two new backdoors predate ENDLESSDOORS. \u00abSPEAKINGSTONE, like ENDLESSDOORS, is a phone-home implant that connects back to ZBT&#8217;s cloud infrastructure and accepts remote commands,\u00bb VulnCheck said. \u00abDARKLANTERN is a backdoor that listens on the WAN and executes arbitrary commands. No authentication required. Both are written in Nim. Both communicate over UDP. Both are launched by the same binary, a connectivity watchdog called inetdetect.\u00bb<\/li>\n<li><strong>Fire Ant Targets Trusted Infrastructure in 2026 <\/strong>\u2014 The China-linked threat actor known as Fire Ant (aka UNC3886) has continued to remain active in 2026, going beyond hypervisors to target trusted infrastructure, including routers (including Cisco IOS XR routers), TACACS servers, authentication systems, and Linux management hosts to maintain covert access, collect credentials and traffic, and reach connected high-value environments. \u00abThe compromise impacted both the direct and third-party environments,\u00bb Sygnia said. \u00abIts trusted infrastructure relationships created potential reachability into connected external environments, including high-value networks and critical infrastructure. Fire Ant appeared to use this trusted position to explore access paths beyond the initially compromised environment.\u00bb Compromised routers were used for covert connectivity, traffic collection, command-output manipulation, and suppression of logging. In addition, the threat actor used deployed long-lived implants across Linux management infrastructure, including Medusa rootkit-related components, custom SSH backdoors, Zabbix-masquerading malware (aka BridgeAgent) that acts as a pathway for actor-controlled access into connected environments, and packet-triggered backdoors. Another tool in Fire Ant&#8217;s arsenal is TacTap, which is used for TACACS credential collection. \u00abThe actor also manipulated the evidence sources defenders depend on,\u00bb Sygnia added. \u00abIt suppressed router logging, altered command output, captured administrative credentials, tampered with host logs, and deployed multiple persistent backdoors.\u00bb<\/li>\n<\/ul>\n<h2 style=\"text-align: left;\"><strong>\u200e\ufe0f\u200d\ud83d\udd25 Trending CVEs<\/strong><\/h2>\n<p>Bugs drop weekly, and the gap between a patch and an exploit is shrinking fast. These are the heavy hitters for the week: high-severity, widely used, or already being poked at in the wild.<\/p>\n<p>Check the list, patch what you have, and hit the ones marked urgent first \u2014 From <a href=\"https:\/\/www.tp-link.com\/us\/support\/faq\/5239\/\" target=\"_blank\">CVE-2025-30237 through CVE-2025-30241<\/a>, <a href=\"https:\/\/www.tp-link.com\/us\/support\/faq\/5264\/\" target=\"_blank\">CVE-2025-15628, CVE-2026-9254, CVE-2026-16348, CVE-2026-78541<\/a> (TP-Link), <a href=\"https:\/\/www.imperva.com\/blog\/copyescape-taking-over-docker-hosts-with-docker-cp\/\" target=\"_blank\">CVE-2026-17106<\/a> aka CopyEscape (Docker), <a href=\"https:\/\/www.jenkins.io\/security\/advisory\/2026-08-05\/\" target=\"_blank\">CVE-2026-70426<\/a> (Jenkins), <a href=\"https:\/\/www.djangoproject.com\/weblog\/2026\/aug\/04\/security-releases\/\" target=\"_blank\">CVE-2026-15307, CVE-2026-15337, CVE-2026-15830, CVE-2026-15920<\/a> (Django), <a href=\"https:\/\/www.wordfence.com\/blog\/2026\/08\/100000-wordpress-sites-affected-by-privilege-escalation-vulnerability-in-pods-wordpress-plugin\/\" target=\"_blank\">CVE-2026-19598<\/a> (Pods), <a href=\"https:\/\/kb.cert.org\/vuls\/id\/728712\" target=\"_blank\">CVE-2026-19874<\/a> (Konami Metal Gear Online 3), <a href=\"https:\/\/u9up.com\/blog\/marimo-notebook-rce\/\" target=\"_blank\">CVE-2026-75149, CVE-2026-67618<\/a> (Marimo), <a href=\"https:\/\/u9up.com\/blog\/headroom-ssrf-idor\/\" target=\"_blank\">CVE-2026-77775, CVE-2026-77776<\/a> (Headroom LLM Proxy), <a href=\"https:\/\/security.paloaltonetworks.com\/CVE-2026-0251\" target=\"_blank\">CVE-2026-0251<\/a> (<a href=\"https:\/\/globalunprotect.io\/timeline.html\" target=\"_blank\">Palo Alto Networks GlobalProtect App<\/a>), <a href=\"https:\/\/help.zscaler.com\/zscaler-client-connector\/client-connector-app-release-summary-2026\" target=\"_blank\">CVE-2026-59568, CVE-2026-59567, CVE-2026-59565<\/a> (Zscaler Client Connector), <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-g32j-mmxr-gfq5\" target=\"_blank\">CVE-2026-69251<\/a>, <a href=\"https:\/\/cve-2026-73601\" target=\"_blank\">CVE-2026-73601<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-wg86-r78f-74mp\" target=\"_blank\">CVE-2026-69253<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-x6vm-w76m-8j7g\" target=\"_blank\">CVE-2026-69256<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-rqh4-rxw3-93rp\" target=\"_blank\">CVE-2026-73602<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-x3hf-7cj6-3r4m\" target=\"_blank\">CVE-2026-69259<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-4j8x-x6v7-w9rq\" target=\"_blank\">CVE-2026-69264<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-x58f-9m57-qc4m\" target=\"_blank\">CVE-2026-73484<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-vmv7-4m6c-3cg5\" target=\"_blank\">CVE-2026-69255<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-5xvg-pmgg-3mxr\" target=\"_blank\">CVE-2026-70477<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-c5hr-rc98-xp3g\" target=\"_blank\">CVE-2026-73485<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-4878-cqgq-j53v\" target=\"_blank\">CVE-2026-73486<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-w7x8-q2gp-5cgg\" target=\"_blank\">CVE-2026-73487<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-52fh-8v99-63c2\" target=\"_blank\">CVE-2026-70470<\/a>, <a href=\"https:\/\/github.com\/FlowiseAI\/Flowise\/security\/advisories\/GHSA-3769-jgqc-cxm7\" target=\"_blank\">CVE-2026-69254<\/a> (<a href=\"https:\/\/www.elttam.com\/blog\/cruising-for-shells-in-flowise\" target=\"_blank\">Flowise<\/a>), <a href=\"https:\/\/kb.cert.org\/vuls\/id\/308749\" target=\"_blank\">CVE-2026-19912, CVE-2026-19913<\/a> (Kaltura HTML5 Player Library), <a href=\"https:\/\/chromereleases.googleblog.com\/2026\/08\/stable-channel-update-for-desktop_0256176589.html\" target=\"_blank\">CVE-2026-79282, CVE-2026-79290, CVE-2026-79054, CVE-2026-79121, CVE-2026-79224, CVE-2026-79052, CVE-2026-79150, CVE-2026-78935, CVE-2026-79012, CVE-2026-79200<\/a> (Google Chrome), <a href=\"https:\/\/community.ui.com\/releases\/Security-Advisory-Bulletin-067\/fc4a3488-7c43-4628-8bab-f715e96dbfc9\" target=\"_blank\">CVE-2026-77537, CVE-2026-77550, CVE-2026-77554<\/a> (Ubiquiti UniFi), <a href=\"https:\/\/www.wordfence.com\/blog\/2026\/08\/wordfence-argus-finds-complex-6-step-critical-rce-in-avada-theme-with-1-million-sales\/\" target=\"_blank\">CVE-2026-18431<\/a> (Avada WordPress theme), <a href=\"https:\/\/cymulate.com\/blog\/cve-2026-7791-amazon-workspaces-local-privilege-escalation\/\" target=\"_blank\">CVE-2026-7791<\/a> (Amazon Skylight Workspace Config Service), <a href=\"https:\/\/www.pillar.security\/blog\/lose-control-flow-unauthenticated-tool-execution-in-dolt-mcp\" target=\"_blank\">CVE-2026-73554<\/a> (DoltHub), <a href=\"https:\/\/www.pillar.security\/blog\/valid-but-never-issued-session-spoofing-and-ssrf-in-grafana-mcp\" target=\"_blank\">CVE-2026-19516<\/a> (Grafana MCP), <a href=\"https:\/\/github.com\/vercel\/next.js\/security\/advisories\/GHSA-p293-qw3h-jr36\" target=\"_blank\">CVE-2026-75604<\/a>, <a href=\"https:\/\/github.com\/vercel\/next.js\/security\/advisories\/GHSA-2xp9-vwfh-vxw4\" target=\"_blank\">GHSA-2xp9-vwfh-vxw4<\/a> (Next.js), <a href=\"https:\/\/support.cpanel.net\/hc\/en-us\/articles\/42959571221527-Security-CVE-2026-65643-Vulnerability-in-cPanel-s-Domain-Parking-Functionality-August-27-2026\" target=\"_blank\">CVE-2026-65643<\/a> (cPanel and WebHost Manager), <a href=\"https:\/\/boschko.ca\/g1-ble-rce\/\" target=\"_blank\">CVE-2026-76639, CVE-2026-76640<\/a> (Unitree G1 EDU), <a href=\"https:\/\/support.servicenow.com\/kb?id=kb_article_view&amp;sysparm_article=KB3152242\" target=\"_blank\">CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820<\/a> (ServiceNow AI Platform).<\/p>\n<h2 style=\"text-align: left;\"><strong>\ud83c\udfa5 Cybersecurity Webinars<\/strong><\/h2>\n<ul>\n<li><strong><a href=\"https:\/\/thehacker.news\/ai-threat-readiness\" target=\"_blank\">AI Can Build Attack Paths in Minutes. Is Your SOC Ready?<\/a> <\/strong>\u2192 AI can now discover zero-days, generate working exploits, and chain full attack paths, often within minutes of disclosure. Learn how to assess your AI threat readiness and build the visibility, context, and response speed needed to keep pace.<\/li>\n<li><strong><a href=\"https:\/\/thehacker.news\/outpacing-ai-era-attacks\" target=\"_blank\">AI Finds Flaws Faster. Your Exposure Answers Can\u2019t Take Days<\/a> \u2192 <\/strong>AI is speeding up vulnerability discovery, but the answer that matters is still slow: Are we exposed? See how Tines unified SBOM, application, cloud, and vulnerability data into one view to assess exposure faster and execute human-reviewed response playbooks at machine speed.<\/li>\n<\/ul>\n<h2 style=\"text-align: left;\"><strong>\ud83d\udcf0 Around the Cyber World<\/strong><\/h2>\n<ul>\n<li><strong>Play Ransomware Encryption <\/strong>\u2014 The closed ransomware group known as Play (aka PlayCrypt) has been found to employ a double extortion model, encrypting systems after exfiltrating data and threatening to publish stolen data on their Tor-hosted data leak site if ransom is not paid. In one incident observed in early 2026, the threat actor deployed SystemBC after gaining initial access, followed by reconnaissance, lateral movement, data exfiltration, and abusing SentinelOne&#8217;s own legitimate removal tool to uninstall the product. \u00abThe threat actor gained initial access via a compromised SonicWall VPN, consistent with the group&#8217;s well-documented pattern of exploiting external remote services,\u00bb GuidePoint Security <a href=\"https:\/\/www.guidepointsecurity.com\/blog\/how-play-achieves-encryption\/\" target=\"_blank\">said<\/a>. \u00abWhat makes this case particularly instructive for defenders is the combination of three specific behaviors: Domain-wide tool staging via the SYSVOL share rather than per-host delivery, EDR removal using the victim&#8217;s own SentinelOne uninstallation utility rather than a kernel-level driver exploit, and the recovery of a crash dump from a host where the encryptor failed to complete, an artifact that provides a rare forensic window into the encryption execution itself.\u00bb<\/li>\n<li><strong>Email Bombing and Quick Assist for Ransomware Deployment <\/strong>\u2014 ZeroBEC disclosed details of an email bombing campaign targeting at least 10 users inside an organization, causing them to receive about 3,000 messages per day. \u00abThe messages were not a conventional phishing blast. Many were genuine verification, registration, deployment, and inquiry confirmations generated after the victims&#8217; email addresses were submitted to unrelated public platforms,\u00bb the email security company <a href=\"https:\/\/zerobec.com\/blog\/email-bombing-quick-assist-ransomware\" target=\"_blank\">said<\/a>. About a day and a half after the email flooding, some of the users were contacted via Microsoft Teams by attackers masquerading as IT help desk personnel to help them tackle the problem. One of the employees, who was a local administrator, granted Microsoft Quick Assist access, enabling the attackers to deploy Xray-core, a reverse proxy tool, and expand their access. \u00abThe credential-theft step was woven directly into social engineering,\u00bb ZeroBEC said. \u00abThe attacker mimicked the installation of a Windows security update and launched a local credential prompt from the compromised endpoint. The victim, who was still listening to the person he believed was IT, entered domain credentials into that prompt. The tooling validated and captured the credentials and then uploaded the resulting credential\/configuration artifacts to an external Microsoft Dev Tunnel.\u00bb Through the reverse tunnel, the threat actor conducted domain reconnaissance and attempted NTLM relay against certificate enrollment, all hallmarks of pre-ransomware deployment. It&#8217;s worth noting the modus operandi shares overlaps with that of Aurora ransomware.<\/li>\n<li><strong>ValleyRAT Delivered via Rogue Installer <\/strong>\u2014 A malicious installer disguised as adware has been observed deploying a modified version of the Chinese desktop wallpaper management tool, QN Wallpaper, which then performs DLL sideloading to establish persistence on Windows systems by dropping a file to the Startup folder and ultimately launching ValleyRAT, a backdoor linked to a threat actor known as Silver Fox. The malware, besides taking steps to protect its process, can collect system information, reboot\/shut down the computer, take screenshots, wipe logs, update command-and-control (C2) addresses, download additional modules, and send keylogger logs along with clipboard contents. Per <a href=\"https:\/\/securelist.com\/valleyrat-backdoor-adware\/121175\/\" target=\"_blank\">Kaspersky<\/a> telemetry, ValleyRAT and its related components have been detected more than 100,000 times, with more than 1500 unique users affected, mainly in China and India.<\/li>\n<li><strong>Brazil Fines ByteDance $29.81M for Privacy Violation <\/strong>\u2014 Brazil&#8217;s data \u200cprotection authority, ANPD, <a href=\"https:\/\/www.reuters.com\/legal\/government\/brazil-fines-tiktok-owner-bytedance-unlawful-processing-teenagers-data-2026-08-25\/\" target=\"_blank\">fined<\/a> TikTok&#8217;s owner ByteDance 153.8 million reais ($29.81 million) for allegedly violating the country&#8217;s General Data Protection Law. ANPD said that the local unit of China&#8217;s ByteDance had processed personal data of teenagers aged 13 to 18 without \u200ba valid legal basis. The regulator estimated that TikTok may have processed the data of at \u200bleast 8 million children during the review period.<\/li>\n<li><strong>DeepMind Debuts Double-Blind AI Evaluations <\/strong>\u2014 Google&#8217;s DeepMind division launched a pilot of double-blind AI evaluations with an aim to keep external evaluations in a cryptographic \u00abbox\u00bb to stop benchmark contamination and protect intellectual property. To that end, Google said it&#8217;s partnering with the Singapore AI Safety Institute, OpenMined, AVERI, and MLCommons, to test a Gemini Flash Lite model against confidential benchmarks in a privacy-preserving environment to increase evaluation integrity. \u00abBy using Confidential Space within Google Cloud\u2019s Confidential Computing portfolio, we can cryptographically verify that both the external evaluation data and the proprietary model remain private to their respective owners,\u00bb DeepMind <a href=\"https:\/\/deepmind.google\/blog\/piloting-the-worlds-first-double-blind-ai-evaluations\/\" target=\"_blank\">said<\/a>. \u00abThe evaluator cannot see the Gemini model weights, and Google cannot see the evaluator\u2019s test prompts.\u00bb<\/li>\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiNi_zKVfFUHHE2EjGRJZEcbQ4kxWpmBjNrA_9Y5iY-yQ1jcgE8nKZYTXswrrVT62opDOJE4FFVnQSTSsX23Ul18LostKhqJDwuyiiuPlvdHyZDOFLcp-VCRAI0ew-VS8WrtQ82bhXJUc1WIKShmCR-CCu7ginZEb1rocxYcvhq_6-9fEoZTFZzKK-7PF0T\/s1700-nu-rw-lo-l85-e365\/model.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiNi_zKVfFUHHE2EjGRJZEcbQ4kxWpmBjNrA_9Y5iY-yQ1jcgE8nKZYTXswrrVT62opDOJE4FFVnQSTSsX23Ul18LostKhqJDwuyiiuPlvdHyZDOFLcp-VCRAI0ew-VS8WrtQ82bhXJUc1WIKShmCR-CCu7ginZEb1rocxYcvhq_6-9fEoZTFZzKK-7PF0T\/s1700-nu-rw-lo-l85-e365\/model.jpg\" alt=\"\" border=\"0\" data-original-height=\"1080\" data-original-width=\"1920\"\/><\/a><\/div>\n<li><strong>34 Malware Families Targeting Banking Apps <\/strong>\u2014 Zimperium found <a href=\"https:\/\/zimperium.com\/blog\/mobile-banking-fraud-2026-malware-is-actively-targeting-mobile-banking-apps-in-europe-middle-east-africa\" target=\"_blank\">34 mobile malware families<\/a> actively targeting more than 1,243 mobile banking and fintech apps across 90 countries globally. \u00abThe concentration of targeted applications across EMEA reflects where threat actors anticipate the highest return on investment, focusing heavily on the region&#8217;s major financial centers,\u00bb it said. Some of the active malware families in the EMEA region are TsarBot, CopyBara, HOOK, Nexus, Flubot, Eventbot, and MaliBot.<\/li>\n<li><strong>Fake KYC Apps Target Indian Customers to Deliver Ghost Penal <\/strong>\u2014 A new malware-as-a-service (MaaS) operation on Telegram, dubbed Ghost Penal, is selling ready-made Android banking trojan kits impersonating five major Indian banks. \u00abThe operation supplies a two-stage dropper protected by a custom native packer, a public cloud database that receives stolen UPI PINs and device data with no authentication required, and a downstream channel that relays intercepted one-time passwords for immediate fraudulent use,\u00bb iZOOlogic <a href=\"https:\/\/izoologic.com\/threat-advisory\/threat-intelligence-alert-ghost-penal-android-banking-trojans-targeting-indian-customers-through-fake-kyc-apps\/\" target=\"_blank\">said<\/a>. The toolkit costs $25 for a five-credit pack and $400 for a three-month unlimited plan. One of the droppers containing the malicious payload masquerades as a video-calling application, while requesting access to SMS and telephony features. \u00abThe payload\u2019s real functionality, including SMS interception, WebView-based KYC phishing, and data exfiltration, is not present in a static scan of the installed application,\u00bb the company added. \u00abIt is protected by a native library, internally named libdpt.so, that decrypts a hidden code section in memory using RC4, forks the process before executing that code as an anti-debugging measure, installs hooks on libc and on the ART runtime\u2019s class loader, and splices a second, hidden DEX archive into the application\u2019s running ClassLoader. The same mechanism is then used in reverse to remove the trace of that injection.\u00bb<\/li>\n<li><strong>Bauman University Leak Exposes Russia&#8217;s Military Cyber Training Pipeline <\/strong>\u2014 <a href=\"https:\/\/theins.press\/en\/inv\/292314\" target=\"_blank\">Leaked Bauman University records<\/a> have revealed a long-running program that trained about 250 career and reserve students for special intelligence,  operational information-technical effects, and information-technology protection under Department No. 4. \u00abThe curriculum combined both offensive and defensive techniques for cyber defense, as well as offensive doctrine for active measures campaigns and GRU activities,\u00bb DomainTools <a href=\"https:\/\/dti.domaintools.com\/research\/threat-intelligence-report-university-leak-exposes-russias-military-cyber-training-pipeline\" target=\"_blank\">said<\/a>. \u00abField placements then moved students from classroom instruction into military units and academies aligned with their specialties, giving them supervised exposure to intelligence operations and preparing them for military and government operations careers.\u00bb Department No. 4 is assessed to be tied to the GRU, with identified graduates assigned to military units associated with APT28 and Sandworm.<\/li>\n<li><strong>Pentagon&#8217;s Anthropic Blacklisting Ruled Illegal <\/strong>\u2014 A U.S. judge blocked Anthropic&#8217;s designation by the Pentagon as a supply chain risk earlier this year. \u00abThough the Department of War is undisputedly free to select the AI vendor of its choice, the evidence demonstrates that the broad measures imposed on Anthropic were illegal and baseless,\u00bb District Judge Rita Lin said. \u00abThe empty invocation of national security is not a blank check to punish and retaliate against government critics.\u00bb Anthropic said it welcomed the ruling and it remained \u00abfocused on working productively with the government to harness AI for our national security so all Americans benefit from this technology.\u00bb<\/li>\n<li><strong>State of AI-Enabled Malware in August 2026 <\/strong>\u2014 Palo Alto Networks Unit 42&#8217;s analysis of 405 malware samples that integrate AI in some capacity has found that only 12 of them reached a production environment, with about 97% existing only in sandboxes and on VirusTotal in the form of proof-of-concept and research code, security validating and testing, and AI-themed brand abuse. Among those that were detected in customer endpoints were FunkSec ransomware, a trojanized AI application called Recipe Lister, Oyster, Rhadamanthys Stealer, and a COM hijacking DLL. \u00abFor defenders, the practical takeaway is straightforward. Existing behavioral detection, cloud-based sandboxing and endpoint analytics catch these threats using the same mechanisms that stop conventional malware,\u00bb it <a href=\"https:\/\/unit42.paloaltonetworks.com\/ai-enabled-malware-analysis\/\" target=\"_blank\">said<\/a>. \u00abThe AI component does not evade detection. It changes how the code is authored, not how it executes.\u00bb<\/li>\n<li><strong>Rogue Pornographic Android Apps Lead to Financial Fraud <\/strong>\u2014 The Indian Cyber Crime Coordination Center (I4C) warned that malicious Android applications masquerading as pornography apps under the names Night Play, Reloop, Kyss, Vimo, Rivo, Nexo, and Vixa are being used to disseminate a banking trojan capable of carrying out financial fraud. These bogus apps are circulated through Facebook and Instagram ads and instruct victims to sideload the APK file. \u00abAfter installation, the app requests permissions that allow it to install additional applications and, by abusing accessibility permission, take control of the users&#8217; device, which may result in financial fraud,\u00bb I4C <a href=\"https:\/\/i4c.mha.gov.in\/theme\/resources\/advisories\/ADVISORY-TAU-ADV-NIGHTPLAY-INSTAGRAM-ADS.pdf\" target=\"_blank\">said<\/a>. \u00abSome apps also install a VPN, which may be used to route internet traffic pertaining to malicious\/criminal activity. The app may prevent users from uninstalling it through the device settings.\u00bb Details about the KYSS malware were published by security researcher Rudra Ponkshe in July 2026, <a href=\"https:\/\/blog.realrudrap.dev\/sealed-with-a-kyss-inside-an-android-banking-rat\" target=\"_blank\">describing<\/a> it as a trojan designed to perform overlay attacks against 19 targets across Japan and Latin America, as well as abuse Android&#8217;s accessibility services to grant itself extensive permissions, exfiltrate photos and contacts, and issue commands for subsequent execution.<\/li>\n<\/ul>\n<h2 style=\"text-align: left;\"><strong>Conclusion<\/strong><\/h2>\n<p>The useful lesson is not that every attack became smarter. It is that more of them arrived through things already trusted: shipped devices, familiar prompts, support tools, valid access, and systems meant to protect the network.<\/p>\n<p>That changes the question. \u201cIs it working?\u201d is no longer enough. Ask what else it can do, who else can reach it, and whether the evidence it produces can be trusted. Quiet systems deserve a second look.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ue804Ravie Lakshmanan\ue802Aug 31, 2026Cybersecurity \/ Hacking The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted&hellip;<\/p>\n","protected":false},"author":1,"featured_media":2619,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[335,104,106,3249,354,697,565],"class_list":["post-2618","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-agents","tag-backdoors","tag-chinese","tag-offtask","tag-proxy","tag-router","tag-spy"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/2618","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2618"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/2618\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/2619"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2618"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2618"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2618"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}