https://blog.dansec.red/vendors/experian/Recent content in Experian on DanSec DailyHugoen-gbMon, 20 Oct 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-10-20-cybersecurity-news/Mon, 20 Oct 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-10-20-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li>China’s Ministry of State Security (MSS) has accused the US National Security Agency (NSA) of conducting a multi-stage cyberattack against the National Time Service Center (NTSC) in Beijing. The MSS claims the NSA used 42 different cyber tools and exploited vulnerabilities in the messaging services of a foreign mobile phone brand to steal sensitive information.</li> <li>Experian Netherlands has been fined €2.7 million ($3.2 million) for violations of the General Data Protection Regulation (GDPR) related to the mass collection of personal data.</li> </ul> <h2 id="notable-threat-actor-activity">Notable Threat Actor Activity</h2> <ul> <li>Cybercriminals are leveraging TikTok videos disguised as free activation guides for popular software (including Windows, Spotify, and Netflix) to distribute information-stealing malware as part of ongoing ClickFix attacks.</li> </ul> <h2 id="trends-tools-or-tactics-of-interest">Trends, Tools, or Tactics of Interest</h2> <ul> <li>Recent malware samples have demonstrated the use of direct syscall() invocation for obfuscation and fileless activity, bypassing traditional detection mechanisms by avoiding standard API calls and making analysis more difficult.</li> </ul> <h2 id="regulatory-or-policy-developments">Regulatory or Policy Developments</h2> <ul> <li>The €2.7 million GDPR fine against Experian Netherlands highlights ongoing regulatory enforcement actions against improper data collection practices within the EU.</li> </ul>