DanSec

Threat actor

Contagious Interview

In 14 briefs, most recently 22 September 2026. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. Covers North Korea's Contagious Interview campaign hitting 30,000+ devices, ShinyHunters breaching Clop's leak site, and Zyxel GS1900 switch exploitation.
  2. Abbott's Exact Sciences breach, WordPress Core critical RCE flaws, and SonicWall SMA zero-days exploited for root access by threat actors.
  3. US government entity paid Kairos extortion group about $1M; Apple Hide My Email flaw exposed real addresses; JadePuffer became first LLM-automated ransomware …
  4. ShinyHunters breaches at Council of Europe and Infinite Campus, Novo Nordisk and Tchap data theft, and exploited Cisco SD-WAN Manager flaw CVE-2026-20262.
  5. The Oracle E-Business Suite breach at Madison Square Garden, APT28's MSHTML zero-day CVE-2026-21513, and North Korea's Contagious Interview npm campaign.
  6. LastPass phishing aimed at master passwords, Google Gemini calendar prompt-injection leaks, and PDFSider malware sideloading.
  7. The Asahi Group breach affecting up to 1.9 million people, the FFF data theft via a compromised account, and a Microsoft Teams cross-tenant flaw bypassing …
  8. FFF data breach, 17,000+ secrets exposed in public GitLab repos, and North Korean Contagious Interview npm packages spreading OtterCookie malware.
  9. Envoy Air's Oracle EBS data theft claimed by Clop, Prosper's breach of 17.6 million accounts, and Zendesk email bombing.
  10. Co-op's £80M cyberattack loss, Shai-Hulud npm worm infecting 500+ packages, and Cisco zero-days under CISA emergency directive.
  11. SonicWall cloud backup breach, Tiffany & Co. data theft and BianLian-linked Medical Associates of Brevard breach affecting nearly 250,000 people.
  12. The Belk and McDonald's data incidents, North Korea's npm Contagious Interview campaign, and Chrome 138's fifth zero-day of 2025.
  13. Citrix NetScaler 'CitrixBleed 2' exploitation, Cyber Fattah's leak of 2024 Saudi Games data, and arrests of BreachForums operators in France.
  14. Marks & Spencer cyberattack halts online orders, SAP NetWeaver zero-day exploited with web shells, and Craft CMS zero-days hit servers. Plus MTN breach and Salt …