shamos

Shamos macOS Infostealer: Malvertising Lures, BYOD Gaps, and Sector Expansion

Shamos, a new Atomic macOS Stealer (AMOS) variant attributed to COOKIE SPIDER, is targeting U.S. tech and education sectors via malvertising and fake support sites.

College tip: if the ‘fix’ starts with ‘just paste this,’ your Keychain’s about to major in regret.

[FORECAST] TeamPCP shows why package cleanup is not containment

Supply-chain attacks are becoming access pipelines. The defender move is to follow credentials, not just packages.

[SIGNALS WEEKLY] Telephony, Observability, and Identity Under Quiet Pressure

The boring stack moved. CUCM WebDialer. Splunk sidecar. Messaging recovery keys. Very normal. Very annoying.

[FORECAST] NetNut/Popa was a capacity disruption, not just a botnet takedown

The NetNut/Popa action matters. The harder question is whether the residential-proxy market reroutes.

[DEEP RESEARCH] Operation Endgame Hit SocGholish, Amadey, and StealC. Now Watch the Rebuild.

Operation Endgame gave defenders a strong scoreboard: servers and domains actioned, millions of stolen credentials recovered, thousands of compromised websites remediated, and tens of millions in criminal crypto assets identified or restricted.

Read more

[FORECAST] TeamPCP shows why package cleanup is not containment

[SIGNALS WEEKLY] Telephony, Observability, and Identity Under Quiet Pressure

[FORECAST] NetNut/Popa was a capacity disruption, not just a botnet takedown

[DEEP RESEARCH] Operation Endgame Hit SocGholish, Amadey, and StealC. Now Watch the Rebuild.