Threats Day: AI Compute Hijacking, Apple Email Flaw, Blue Hammer Ransomware + 14 Stories
Summary: Bitdefender reported a phishing campaign targeting small businesses across Europe, Asia, the Middle East, and the U.S. with fake law enforcement investigation emails that lead to a Proton Drive-hosted archive delivering a custom-built ransomware payload, with no fixed ransom demand and negotiations conducted through a Tox chat channel. Armadin found an attack chain in Claude Cowork on Windows that lets an attacker with local code execution run arbitrary commands as root in the sandbox without network egress restrictions, and Anthropic said it does not consider it a security issue because exploitation requires pre-existing local code execution.
What's compelling: The ransomware campaign sets no fixed price and only opens negotiations after the victim makes contact, letting attackers size the demand to the organization's revenue and data value. Anthropic's decision to close the Claude Cowork report as not a security issue leaves a root-level sandbox escape with no network filtering dependent on the attacker first having local code execution.
Read the original at The Hacker News ↗
- Topics
- Ransomware
- Related
- Ransomware Defense Using the Wazuh Open Source Platform Cyber Risks ·