https://blog.dansec.red/vendors/oxford-city-council/Recent content in Oxford City Council on DanSec DailyHugoen-gbMon, 23 Jun 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-06-23-cybersecurity-news/Mon, 23 Jun 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-06-23-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li>CoinMarketCap experienced a website supply chain attack that injected a malicious Web3 popup, exposing site visitors to a wallet drainer campaign designed to steal cryptocurrency from connected wallets.</li> <li>Oxford City Council suffered a data breach affecting legacy systems, resulting in unauthorised access to personally identifiable information spanning two decades.</li> <li>Reports indicate that 16 billion passwords have been leaked from various platforms, including Apple and Google, as a result of cumulative data breaches. The scale of exposure increases the risk of credential stuffing and related attacks.</li> </ul> <h2 id="notable-threat-actor-activity">Notable Threat Actor Activity</h2> <ul> <li>The CoinMarketCap incident involved the use of a wallet drainer, a tool commonly deployed by threat actors targeting the cryptocurrency sector via supply chain compromises and malicious popups.</li> </ul> <h2 id="trends-tools-or-tactics-of-interest">Trends, Tools, or Tactics of Interest</h2> <ul> <li>The use of website supply chain attacks to inject malicious Web3 popups, as seen in the CoinMarketCap incident, demonstrates continued targeting of crypto users through trusted platforms.</li> <li>The large-scale exposure of credentials highlights ongoing risks from aggregated data breaches and the potential for automated attacks using leaked credentials.</li> </ul>