Tag: credential theft

black flat screen computer monitor turned on beside black computer keyboard
Security

Leak vs Lure: How the March 2026 Claude Code source leak and InstallFix campaigns turned install guides into credential-stealing attack chains

In March 2026 an accidental release of 512,000 lines of Anthropic’s Claude Code source combined with concurrent InstallFix social‑engineering campaigns to create a single, practical threat: attackers now pair intimate knowledge of an AI agent’s internals with cloned install pages that convince developers to run one-line commands that deploy credential‑stealing malware. What the leak actually […]

admin 
Laptop displaying code with a coffee mug nearby.
Security

TeamPCP’s Telnyx Compromise: credential-based, steganographic backdoor in PyPI releases

On March 27, 2026 the Telnyx Python SDK on PyPI was backdoored by the actor known as TeamPCP using stolen maintainer credentials — not typosquatting. Malicious code landed only in telnyx/_client.py inside published releases 4.87.1 and 4.87.2 (no corresponding GitHub tags or releases), and the package’s ~700,000 monthly-download footprint made the trojanized SDK a high-value […]

admin 
A bearded man reviews documents at a desk with a laptop in a modern office setting.
Security

Weaponizing management vs. malware: Stryker’s Intune wipe shows stolen admin credentials are deadlier than new exploits

On March 11, 2026, an Iran-linked group calling itself Handala used compromised Microsoft Entra ID and Intune administrative access to remotely wipe more than 200,000 devices in 79 countries. The incident demonstrates a specific danger: legitimate MDM capabilities can be weaponized through stolen admin credentials, producing destruction without any endpoint malware. How a single admin […]

admin