Daily Hunt Feed - 2026-06-26

Threat Hunt Feed (2026-06-26)

Hacker News: Best

• Slate EV truck starts at $24,950 — Wed, 24 Jun 2026 13:26:43 +0000
  • Matched TTPs: At (T1053.002)
• NSA lost access to Mythos amid Anthropic dispute — Wed, 24 Jun 2026 11:45:47 +0000
  • Matched TTPs: Tool (T1588.002)

BleepingComputer

• Poland busts SIM-swapping gang tied to millions in crypto theft — Thu, 25 Jun 2026 18:37:42 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Email Accounts (T1585.002), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)
• Order-tracking app Shop abused to push callback phishing attacks — Thu, 25 Jun 2026 15:45:48 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• New macOS malware embeds fake errors to confuse AI analysis tools — Thu, 25 Jun 2026 12:23:19 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)
• PirloTV sports piracy network disrupted as 44 domains seized — Thu, 25 Jun 2026 11:36:56 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Domains (T1584.001), Search Engines (T1593.002), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)
• Bluekit phishing kit adopts browser-in-the-middle for login theft — Thu, 25 Jun 2026 11:00:00 -0400
  • Matched TTPs: Adversary-in-the-Middle (T1557), JavaScript (T1059.007), Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Phishing (T1566), Browser Fingerprint (T1036.012), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

Darkreading

• In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw — Thu, 25 Jun 2026 21:54:34 GMT
  • Matched TTPs: Vulnerabilities (T1588.006), Web Shell (T1505.003), Server (T1584.004), Software (T1592.002), At (T1053.002)
• Russian APT ‘Gamaredon’ Upgrades Its Arsenal, Requiring New Defenses — Thu, 25 Jun 2026 21:12:01 GMT
  • Matched TTPs: Windows Management Instrumentation (T1047), Serverless (T1584.007), Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), At (T1053.002)
• EdTech Attackers Shift From Schools to Their Software Suppliers — Thu, 25 Jun 2026 20:34:14 GMT
  • Matched TTPs: Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)

The Hacker News

• Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability — Thu, 25 Jun 2026 19:42:52 +0530
  • Matched TTPs: Rootkit (T1014), JavaScript (T1059.007), Malware (T1588.001), Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Server (T1584.004), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories — Thu, 25 Jun 2026 17:54:43 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Rootkit (T1014), Keychain (T1555.001), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Remote Access Tools (T1219), Domains (T1584.001), Masquerading (T1036), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Surviving the Mythos Era: Richard Bejtlich on the Case for NDR — Thu, 25 Jun 2026 16:47:31 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Rootkit (T1014), Malware (T1588.001), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis — Thu, 25 Jun 2026 14:53:03 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Rootkit (T1014), Keychain (T1555.001), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Python (T1059.006), At (T1053.002)
• New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns — Thu, 25 Jun 2026 14:24:37 +0530
  • Matched TTPs: Rootkit (T1014), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), DLL (T1574.001), Remote Access Tools (T1219), Masquerading (T1036), Server (T1584.004), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Python (T1059.006), At (T1053.002)
• Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access — Thu, 25 Jun 2026 11:16:54 +0530
  • Matched TTPs: Rootkit (T1014), Network Devices (T1584.008), Vulnerabilities (T1588.006), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)

보안뉴스 > SECURITY

• 외우지 말고 맡겨 관리하자, ‘비밀번호 관리자’ 활용 가이드 — Thu, 25 Jun 2026 18:06:00 +0900
  • Matched TTPs: Credential Stuffing (T1110.004)
• SGA솔루션즈 레드캐슬, CC인증 EAL4 획득 — Thu, 25 Jun 2026 13:41:00 +0900
  • Matched TTPs: Server (T1584.004)