Daily Hunt Feed - 2026-06-02

Threat Hunt Feed (2026-06-02)

BleepingComputer

• Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks — Mon, 01 Jun 2026 18:14:19 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malware (T1588.001), Hardware (T1592.001), Domains (T1584.001), PowerShell (T1059.001), Tool (T1588.002), Brute Force (T1110), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Red Hat npm packages compromised to steal developer credentials — Mon, 01 Jun 2026 17:38:29 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), SSH (T1021.004), Tool (T1588.002), Brute Force (T1110), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Dashlane password manager users locked out by brute force attacks — Mon, 01 Jun 2026 14:17:13 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Phishing (T1566), Brute Force (T1110), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• WordPress malware campaign hides payloads in Steam profiles — Mon, 01 Jun 2026 13:04:16 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malware (T1588.001), Hardware (T1592.001), Domains (T1584.001), Tool (T1588.002), Brute Force (T1110), Software (T1592.002), Credentials (T1589.001)
• Race Against Time: Why Faster Vulnerability Alerts Matter — Mon, 01 Jun 2026 10:00:10 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Brute Force (T1110), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Microsoft fixes outage affecting MFA setup, MySignIn service — Mon, 01 Jun 2026 07:40:16 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Brute Force (T1110), Multi-Factor Authentication (T1556.006), Software (T1592.002), Credentials (T1589.001)

Darkreading

• Microsoft’s Zero-Day Legal Threats Spark Backlash — Mon, 01 Jun 2026 18:52:26 GMT
  • Matched TTPs: Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)

The Hacker News

• Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm — Mon, 01 Jun 2026 23:10:28 +0530
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001)
• ⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More — Mon, 01 Jun 2026 19:29:54 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malware (T1588.001), Hardware (T1592.001), Cron (T1053.003), Vulnerabilities (T1588.006), SSH (T1021.004), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Brute Force (T1110), Multi-Factor Authentication (T1556.006), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), Malicious Link (T1204.001), At (T1053.002)
• China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan — Mon, 01 Jun 2026 17:24:24 +0530
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Server (T1584.004), Proxy (T1090), PowerShell (T1059.001), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Impersonation (T1656), Python (T1059.006), At (T1053.002)
• The Security Growth Platform: Why MSPs Are Moving Beyond vCISO Tools — Mon, 01 Jun 2026 17:00:00 +0530
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack — Mon, 01 Jun 2026 15:01:15 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), WHOIS (T1596.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Web Services (T1584.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)