Operation DragonReturn, NetNut Botnet Takedown & AI Agent Credential Theft
カートのアイテムが多すぎます
ご購入は五十タイトルがカートに入っている場合のみです。
カートに追加できませんでした。
しばらく経ってから再度お試しください。
ウィッシュリストに追加できませんでした。
しばらく経ってから再度お試しください。
ほしい物リストの削除に失敗しました。
しばらく経ってから再度お試しください。
ポッドキャストのフォローに失敗しました
ポッドキャストのフォロー解除に失敗しました
Operation DragonReturn, NetNut Botnet Takedown & AI Agent Credential Theft
-
ナレーター：
-
著者：
(00:01:22) NetNut Botnet FBI Google Takedown
(00:02:14) BioShocking AI Browser Credential Theft
(00:03:19) ValleyRAT Targets Chinese Japanese Users
(00:03:43) What To Watch Next
Today's briefing opens with Operation DragonReturn, a China-linked espionage campaign targeting Indian taxpayers during filing season. Threat actors impersonating the Indian tax authority delivered spear-phishing emails containing a malicious ZIP archive that used DLL side-loading and steganography to install DcRAT — a full remote access trojan capable of keylogging, credential theft, and persistent surveillance. Infrastructure overlaps with Silver Fox, a Chinese cybercrime group with a documented history of tax-themed attacks on Indian targets.
Next, the FBI and Google jointly disrupted NetNut, a residential proxy botnet that silently conscripted millions of home routers and consumer devices — some arriving pre-compromised from grey-market suppliers — into criminal relay infrastructure used for password spraying, account takeover, advertising fraud, and DDoS operations. While the disruption is significant, historical patterns suggest operators will attempt to rebuild quickly.
The episode's most forward-looking story is BioShocking, a proof-of-concept demonstrating that prompt injection can manipulate agentic AI browsers into accessing authenticated repositories and exfiltrating SSH credentials. Researchers tested six mainstream agentic products; all six were vulnerable. Because these agents operate inside live sessions with inherited user permissions, a compromised agent becomes an account takeover vector — and most enterprises currently have no telemetry covering what their AI agents do inside those sessions.
Finally, LevelBlue's tracking of ValleyRAT highlights a converging playbook: DLL side-loading appearing across multiple independent campaigns targeting Chinese and Japanese speakers via fake LINE installers and salary-themed lures.
The through-line is trust — placed too early, at the wrong layer, with insufficient visibility. A YesWee production.
This episode includes AI-generated content.
adbl_web_anon_alc_button_suppression_t1
まだレビューはありません