Daily Hunt Feed - 2026-10-09

Threat Hunt Feed (2026-10-09)

Hacker News: Best

• Anti-patterns in software blogging — Wed, 07 Oct 2026 13:08:26 +0000
  • Matched TTPs: Server (T1584.004), Tool (T1588.002), Software (T1592.002), At (T1053.002)

BleepingComputer

• FBI disrupts Chinese hacking tools used to breach critical infrastructure — Thu, 08 Oct 2026 17:42:51 -0400
  • Matched TTPs: Sharepoint (T1213.002), IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Vulnerability Scanning (T1595.002), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Ransomware attack disrupts Japan’s IDCF Cloud used by govt clients — Thu, 08 Oct 2026 16:09:45 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Databases (T1213.006), Vulnerabilities (T1588.006), Proxy (T1090), Tool (T1588.002), Software (T1592.002), At (T1053.002)
• Low-cost Android phones ship with residential proxy malware — Thu, 08 Oct 2026 15:20:33 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Firmware (T1592.003), Software (T1592.002), At (T1053.002)
• FakeGit malware campaign returns with 17,610 malicious GitHub repos — Thu, 08 Oct 2026 13:10:55 -0400
  • Matched TTPs: DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Cisco warns of critical flaws allowing Nexus switch takeover — Thu, 08 Oct 2026 11:26:33 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Credentials (T1589.001), At (T1053.002)
• Microsoft Teams to get support for third-party deepfake detection tools — Thu, 08 Oct 2026 08:08:16 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Impersonation (T1656), At (T1053.002)
• Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland — Thu, 08 Oct 2026 02:32:16 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Proxy (T1090), Tool (T1588.002), Firmware (T1592.003), Software (T1592.002), At (T1053.002)

Darkreading

• ‘AgentCorruption’ Puts AWS Environments At Risk With Single Prompt — Thu, 08 Oct 2026 20:39:44 GMT
  • Matched TTPs: Malvertising (T1583.008), Hardware (T1592.001), Vulnerabilities (T1588.006), Credentials (T1589.001), At (T1053.002)
• Venezuelan Cartel’s Malware Honcho Nabbed for ATM Jackpotting — Thu, 08 Oct 2026 19:08:16 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), Python (T1059.006), At (T1053.002)
• Russian Spies Give ‘MatchBoil’ Malware a Stealthy Facelift — Thu, 08 Oct 2026 18:01:50 GMT
  • Matched TTPs: Scheduled Task (T1053.005), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)

The Hacker News

• FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails — Fri, 09 Oct 2026 00:02:21 +0530
  • Matched TTPs: IP Addresses (T1590.005), DNS (T1071.004), DNS Server (T1584.002), Malware (T1588.001), Databases (T1213.006), Vulnerabilities (T1588.006), Botnet (T1584.005), Cloud Accounts (T1078.004), Domains (T1584.001), Web Shell (T1505.003), Server (T1584.004), Password Spraying (T1110.003), Web Services (T1584.006), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), DCSync (T1003.006), At (T1053.002)
• ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories — Thu, 08 Oct 2026 23:28:02 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), DLL (T1574.001), Botnet (T1584.005), Domains (T1584.001), Process Injection (T1055), Control Panel (T1218.002), Web Shell (T1505.003), Server (T1584.004), Cloud Services (T1021.007), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Impersonation (T1656), Python (T1059.006), At (T1053.002), Dead Drop Resolver (T1102.001), Local Accounts (T1078.003)
• Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks — Thu, 08 Oct 2026 21:15:56 +0530
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Databases (T1213.006), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Server (T1584.004), Web Service (T1102), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML — Thu, 08 Oct 2026 20:56:56 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), DLL (T1574.001), Botnet (T1584.005), Web Shell (T1505.003), Proxy (T1090), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Impersonation (T1656), Visual Basic (T1059.005), At (T1053.002), Dead Drop Resolver (T1102.001)
• ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms — Thu, 08 Oct 2026 19:42:34 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Web Shell (T1505.003), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Credential Stuffing (T1110.004), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia — Thu, 08 Oct 2026 16:00:00 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Web Shell (T1505.003), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases — Thu, 08 Oct 2026 15:16:32 +0530
  • Matched TTPs: JavaScript (T1059.007), Malware (T1588.001), Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Private Keys (T1552.004), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks — Thu, 08 Oct 2026 13:12:04 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm — Thu, 08 Oct 2026 11:16:20 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Web Shell (T1505.003), Cloud Services (T1021.007), Web Services (T1584.006), PowerShell (T1059.001), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)

데일리시큐 - 최근인기기사

• 국가 도메인 운영 인프라 뚫렸다…구글 등 주요 기업 인증서 무단 발급 정황 — 2026-10-08 13:45:23
  • Matched TTPs: DNS (T1071.004)